Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2026-46595 (GCVE-0-2026-46595)
Vulnerability from cvelistv5 – Published: 2026-05-22 02:31 – Updated: 2026-08-21 12:13
VLAI
EPSS
VEX
Title
Invoking VerifiedPublicKeyCallback permissions skip enforcement in golang.org/x/crypto/ssh
Summary
Previously, CVE-2024-45337 fixed an authorization bypass for misused ssh server configurations; if any other type of callback is passed other than public key, then the source-address validation would be skipped.
Severity
10 (Critical)
7.1 (High)
SSVC
Exploitation: none
Automatable: yes
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-05-22 18:21 UTC
CWE
Assigner
References
34 references
Impacted products
96 products
| Vendor | Product | Version | CPE status | |
|---|---|---|---|---|
| golang.org/x/crypto | golang.org/x/crypto/ssh |
Affected:
0 , < 0.52.0
(semver)
|
guessed | |
| Red Hat | Cryostat 4 on RHEL 9 |
Unaffected:
4.2.0-19 , < *
(rpm)
cpe:/a:redhat:cryostat:4::el9 |
||
| Red Hat | RHEM 1.0 for RHEL 9 |
Unaffected:
0:1.0.3-1.el9em , < *
(rpm)
cpe:/a:redhat:edge_manager:1.0::el9 |
||
| Red Hat | RHEM 1.1 for RHEL 10 |
Unaffected:
0:1.1.3-1.el10em , < *
(rpm)
cpe:/a:redhat:edge_manager:1.1::el10 |
||
| Red Hat | RHEM 1.1 for RHEL 9 |
Unaffected:
0:1.1.3-1.el9em , < *
(rpm)
cpe:/a:redhat:edge_manager:1.1::el9 |
||
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.19 |
Unaffected:
1786613805 , < *
(rpm)
cpe:/a:redhat:cert_manager:1.19::el9 |
||
| Red Hat | DevWorkspace Operator 0.42 |
Unaffected:
1782401674 , < *
(rpm)
cpe:/a:redhat:devworkspace:0.42::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.8 |
Unaffected:
1782160196 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.8::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.8 |
Unaffected:
1782477094 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.8::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.8 |
Unaffected:
1782160009 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.8::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.8 |
Unaffected:
1782160210 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.8::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.8 |
Unaffected:
1782160541 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.8::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.8 |
Unaffected:
1782159773 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.8::el9 |
||
| Red Hat | OpenShift API for Data Protection 1.3 |
Unaffected:
1785180878 , < *
(rpm)
cpe:/a:redhat:openshift_api_data_protection:1.3::el9 |
||
| Red Hat | OpenShift API for Data Protection 1.6 |
Unaffected:
1784058822 , < *
(rpm)
cpe:/a:redhat:openshift_api_data_protection:1.6::el9 |
||
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.13 |
Unaffected:
1782383730 , < *
(rpm)
cpe:/a:redhat:acm:2.13::el9 |
||
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.13 |
Unaffected:
1782488873 , < *
(rpm)
cpe:/a:redhat:acm:2.13::el9 |
||
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.13 |
Unaffected:
1782382711 , < *
(rpm)
cpe:/a:redhat:acm:2.13::el9 |
||
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.13 |
Unaffected:
1784652040 , < *
(rpm)
cpe:/a:redhat:acm:2.13::el9 |
||
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.13 |
Unaffected:
1784638644 , < *
(rpm)
cpe:/a:redhat:acm:2.13::el9 |
||
| Red Hat | Red Hat Advanced Cluster Security 4.9 |
Unaffected:
1781686446 , < *
(rpm)
cpe:/a:redhat:advanced_cluster_security:4.9::el8 |
||
| Red Hat | Red Hat Advanced Cluster Security for Kubernetes 4.10 |
Unaffected:
1781686458 , < *
(rpm)
cpe:/a:redhat:advanced_cluster_security:4.10::el8 |
||
| Red Hat | Red Hat Advanced Cluster Security for Kubernetes 4.11 |
Unaffected:
1783352589 , < *
(rpm)
cpe:/a:redhat:advanced_cluster_security:4.11::el9 |
||
| Red Hat | Red Hat Edge Manager 1.0 |
Unaffected:
1783502025 , < *
(rpm)
cpe:/a:redhat:edge_manager:1.0::el9 |
||
| Red Hat | Red Hat Edge Manager 1.1 |
Unaffected:
1784196588 , < *
(rpm)
cpe:/a:redhat:edge_manager:1.1::el10 |
||
| Red Hat | Red Hat Edge Manager 1.1 |
Unaffected:
1784126780 , < *
(rpm)
cpe:/a:redhat:edge_manager:1.1::el9 |
||
| Red Hat | Red Hat Enterprise Linux AI 3.4 |
Unaffected:
1782804957 , < *
(rpm)
cpe:/a:redhat:enterprise_linux_ai:3.4::el9 |
||
| Red Hat | Red Hat Enterprise Linux AI 3.4 |
Unaffected:
1782758407 , < *
(rpm)
cpe:/a:redhat:enterprise_linux_ai:3.4::el9 |
||
| Red Hat | Red Hat Enterprise Linux AI 3.4 |
Unaffected:
1782758410 , < *
(rpm)
cpe:/a:redhat:enterprise_linux_ai:3.4::el9 |
||
| Red Hat | Red Hat Enterprise Linux AI 3.4 |
Unaffected:
1782754093 , < *
(rpm)
cpe:/a:redhat:enterprise_linux_ai:3.4::el9 |
||
| Red Hat | Red Hat Enterprise Linux AI 3.4 |
Unaffected:
1782744816 , < *
(rpm)
cpe:/a:redhat:enterprise_linux_ai:3.4::el9 |
||
| Red Hat | Red Hat Enterprise Linux AI 3.4 |
Unaffected:
1782758409 , < *
(rpm)
cpe:/a:redhat:enterprise_linux_ai:3.4::el9 |
||
| Red Hat | Red Hat Enterprise Linux AI 3.4 |
Unaffected:
1782744830 , < *
(rpm)
cpe:/a:redhat:enterprise_linux_ai:3.4::el9 |
||
| Red Hat | Red Hat Hardened Images |
Unaffected:
1.25.11-2.hum1 , < *
(rpm)
cpe:/a:redhat:hummingbird:1 |
||
| Red Hat | Red Hat Hardened Images |
Unaffected:
1.26.4-2.hum1 , < *
(rpm)
cpe:/a:redhat:hummingbird:1 |
||
| Red Hat | Red Hat OpenShift AI 3.3 |
Unaffected:
1782471656 , < *
(rpm)
cpe:/a:redhat:openshift_ai:3.3::el9 |
||
| Red Hat | Red Hat OpenShift Builds 1.7.4 |
Unaffected:
1783057868 , < *
(rpm)
cpe:/a:redhat:openshift_builds:1.7::el9 |
||
| Red Hat | Red Hat OpenShift Builds 1.8.1 |
Unaffected:
1784121108 , < *
(rpm)
cpe:/a:redhat:openshift_builds:1.8::el9 |
||
| Red Hat | Red Hat OpenShift Builds 1.8.1 |
Unaffected:
1783612119 , < *
(rpm)
cpe:/a:redhat:openshift_builds:1.8::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.22 |
Unaffected:
1782932114 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.22::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.22 |
Unaffected:
1782931768 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.22::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.22 |
Unaffected:
1782932104 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.22::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.22 |
Unaffected:
1783536000 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.22::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.22 |
Unaffected:
1783535989 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.22::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.22 |
Unaffected:
1783536515 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.22::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.22 |
Unaffected:
1782932521 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.22::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.22 |
Unaffected:
1783018461 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.22::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.22 |
Unaffected:
1783018421 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.22::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.22 |
Unaffected:
1782932812 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.22::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.22 |
Unaffected:
1783537001 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.22::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.22 |
Unaffected:
1782932919 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.22::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.22 |
Unaffected:
1783537586 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.22::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.22 |
Unaffected:
1782932969 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.22::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.22 |
Unaffected:
1782933015 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.22::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.22 |
Unaffected:
1782933042 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.22::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.22 |
Unaffected:
1783537392 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.22::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.22 |
Unaffected:
1782933235 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.22::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.22 |
Unaffected:
1782933251 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.22::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.22 |
Unaffected:
1783537955 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.22::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.22 |
Unaffected:
1782933417 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.22::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.22 |
Unaffected:
1783537742 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.22::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.22 |
Unaffected:
1782933602 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.22::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.22 |
Unaffected:
1783019377 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.22::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.22 |
Unaffected:
1782934054 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.22::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.22 |
Unaffected:
1782934036 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.22::el9 |
||
| Red Hat | Red Hat Openshift Data Foundation 4.22 |
Unaffected:
1782934284 , < *
(rpm)
cpe:/a:redhat:openshift_data_foundation:4.22::el9 |
||
| Red Hat | Red Hat OpenShift Dev Spaces 3.29 |
Unaffected:
1782403274 , < *
(rpm)
cpe:/a:redhat:openshift_devspaces:3.29::el9 |
||
| Red Hat | Red Hat Quay 3.15 |
Unaffected:
1784351966 , < *
(rpm)
cpe:/a:redhat:quay:3.15::el8 |
||
| Red Hat | Red Hat Trusted Artifact Signer 1.4 |
Unaffected:
4-1.4.2 , < *
(rpm)
Unaffected: 4-1.4.3 , < * (rpm) cpe:/a:redhat:trusted_artifact_signer:1.4::el9 |
||
| Red Hat | Assisted Installer for Red Hat OpenShift Container Platform 2 |
cpe:/a:redhat:assisted_installer:2
|
||
| Red Hat | Confidential Compute Attestation |
cpe:/a:redhat:confidential_compute_attestation:1
|
||
| Red Hat | ExternalDNS Operator |
cpe:/a:redhat:ext_dns_optr:1
|
||
| Red Hat | External Secrets Operator for Red Hat OpenShift |
cpe:/a:redhat:external_secrets_operator:1
|
||
| Red Hat | Logging Subsystem for Red Hat OpenShift |
cpe:/a:redhat:logging:6
|
||
| Red Hat | Multicluster Engine for Kubernetes |
cpe:/a:redhat:multicluster_engine
|
||
| Red Hat | OpenShift Pipelines |
cpe:/a:redhat:openshift_pipelines:1
|
||
| Red Hat | OpenShift Serverless |
cpe:/a:redhat:serverless:1
|
||
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2 |
cpe:/a:redhat:acm:2
|
||
| Red Hat | Red Hat Ceph Storage 9 |
cpe:/a:redhat:ceph_storage:9
|
||
| Red Hat | Red Hat Enterprise Linux 10 |
cpe:/o:redhat:enterprise_linux:10
|
||
| Red Hat | Red Hat Enterprise Linux 8 |
cpe:/o:redhat:enterprise_linux:8
|
||
| Red Hat | Red Hat Enterprise Linux 9 |
cpe:/o:redhat:enterprise_linux:9
|
||
| Red Hat | Red Hat Enterprise Linux AI (RHEL AI) 3 |
cpe:/a:redhat:enterprise_linux_ai:3
|
||
| Red Hat | Red Hat OpenShift AI (RHOAI) |
cpe:/a:redhat:openshift_ai
|
||
| Red Hat | Red Hat OpenShift Container Platform 4 |
cpe:/a:redhat:openshift:4
|
||
| Red Hat | Red Hat OpenShift for Windows Containers |
cpe:/a:redhat:windows_machine_config
|
||
| Red Hat | Red Hat OpenShift GitOps |
cpe:/a:redhat:openshift_gitops:1
|
||
| Red Hat | Red Hat OpenShift on AWS |
cpe:/a:redhat:openshift_service_on_aws:1
|
||
| Red Hat | Red Hat OpenShift Virtualization 4 |
cpe:/a:redhat:container_native_virtualization:4
|
||
| Red Hat | Red Hat OpenStack Platform 16.2 |
cpe:/a:redhat:openstack:16.2
|
||
| Red Hat | Red Hat OpenStack Platform 17.1 |
cpe:/a:redhat:openstack:17.1
|
||
| Red Hat | Red Hat OpenStack Platform 18.0 |
cpe:/a:redhat:openstack:18.0
|
||
| Red Hat | Red Hat Quay 3 |
cpe:/a:redhat:quay:3
|
||
| Red Hat | Security Profiles Operator |
cpe:/a:redhat:openshift_security_profiles_operator:1
|
||
| Red Hat | Zero Trust Workload Identity Manager |
cpe:/a:redhat:zero_trust_workload_identity_manager:1
|
||
| Red Hat | Zero Trust Workload Identity Manager - Tech Preview |
cpe:/a:redhat:zero_trust_workload_identity_manager:0
|
{
"containers": {
"adp": [
{
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 10,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:L",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2026-46595",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-05-22T18:21:12.222019Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-863",
"description": "CWE-863 Incorrect Authorization",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-05-22T18:21:43.315Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
},
{
"affected": [
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:cryostat:4::el9"
],
"defaultStatus": "affected",
"packageName": "cryostat/cryostat-storage-rhel9",
"product": "Cryostat 4 on RHEL 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "4.2.0-19",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.0::el9"
],
"defaultStatus": "affected",
"packageName": "flightctl",
"product": "RHEM 1.0 for RHEL 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.0.3-1.el9em",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.1::el10"
],
"defaultStatus": "affected",
"packageName": "flightctl",
"product": "RHEM 1.1 for RHEL 10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.1.3-1.el10em",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.1::el9"
],
"defaultStatus": "affected",
"packageName": "flightctl",
"product": "RHEM 1.1 for RHEL 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.1.3-1.el9em",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:cert_manager:1.19::el9"
],
"defaultStatus": "affected",
"packageName": "cert-manager/jetstack-cert-manager-rhel9",
"product": "Cert Manager support for Red Hat OpenShift release 1.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786613805",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:devworkspace:0.42::el9"
],
"defaultStatus": "affected",
"packageName": "devworkspace/devworkspace-rhel9-operator",
"product": "DevWorkspace Operator 0.42",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782401674",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.8::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/addon-manager-rhel9",
"product": "multicluster engine for Kubernetes 2.8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782160196",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.8::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/kube-rbac-proxy-mce-rhel9",
"product": "multicluster engine for Kubernetes 2.8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782477094",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.8::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/placement-rhel9",
"product": "multicluster engine for Kubernetes 2.8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782160009",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.8::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/registration-operator-rhel9",
"product": "multicluster engine for Kubernetes 2.8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782160210",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.8::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/registration-rhel9",
"product": "multicluster engine for Kubernetes 2.8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782160541",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.8::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/work-rhel9",
"product": "multicluster engine for Kubernetes 2.8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782159773",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_api_data_protection:1.3::el9"
],
"defaultStatus": "affected",
"packageName": "oadp/oadp-velero-rhel9",
"product": "OpenShift API for Data Protection 1.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1785180878",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_api_data_protection:1.6::el9"
],
"defaultStatus": "affected",
"packageName": "oadp/oadp-velero-rhel9",
"product": "OpenShift API for Data Protection 1.6",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784058822",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:acm:2.13::el9"
],
"defaultStatus": "affected",
"packageName": "rhacm2/acm-grafana-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782383730",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:acm:2.13::el9"
],
"defaultStatus": "affected",
"packageName": "rhacm2/kube-rbac-proxy-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782488873",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:acm:2.13::el9"
],
"defaultStatus": "affected",
"packageName": "rhacm2/multicluster-observability-rhel9-operator",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782382711",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:acm:2.13::el9"
],
"defaultStatus": "affected",
"packageName": "rhacm2/multicloud-integrations-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784652040",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:acm:2.13::el9"
],
"defaultStatus": "affected",
"packageName": "rhacm2/multiclusterhub-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784638644",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:advanced_cluster_security:4.9::el8"
],
"defaultStatus": "affected",
"packageName": "advanced-cluster-security/rhacs-main-rhel8",
"product": "Red Hat Advanced Cluster Security 4.9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1781686446",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:advanced_cluster_security:4.10::el8"
],
"defaultStatus": "affected",
"packageName": "advanced-cluster-security/rhacs-main-rhel8",
"product": "Red Hat Advanced Cluster Security for Kubernetes 4.10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1781686458",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:advanced_cluster_security:4.11::el9"
],
"defaultStatus": "affected",
"packageName": "advanced-cluster-security/rhacs-main-rhel9",
"product": "Red Hat Advanced Cluster Security for Kubernetes 4.11",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783352589",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.0::el9"
],
"defaultStatus": "affected",
"packageName": "rhem/flightctl-api-rhel9",
"product": "Red Hat Edge Manager 1.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783502025",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.1::el10"
],
"defaultStatus": "affected",
"packageName": "rhem/flightctl-api-rhel10",
"product": "Red Hat Edge Manager 1.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784196588",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:edge_manager:1.1::el9"
],
"defaultStatus": "affected",
"packageName": "rhem/flightctl-api-rhel9",
"product": "Red Hat Edge Manager 1.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784126780",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:enterprise_linux_ai:3.4::el9"
],
"defaultStatus": "affected",
"packageName": "rhelai3/disk-image-cuda-rhel9",
"product": "Red Hat Enterprise Linux AI 3.4",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782804957",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:enterprise_linux_ai:3.4::el9"
],
"defaultStatus": "affected",
"packageName": "rhelai3/bootc-aws-cuda-rhel9",
"product": "Red Hat Enterprise Linux AI 3.4",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782758407",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:enterprise_linux_ai:3.4::el9"
],
"defaultStatus": "affected",
"packageName": "rhelai3/bootc-azure-cuda-rhel9",
"product": "Red Hat Enterprise Linux AI 3.4",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782758410",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:enterprise_linux_ai:3.4::el9"
],
"defaultStatus": "affected",
"packageName": "rhelai3/bootc-azure-rocm-rhel9",
"product": "Red Hat Enterprise Linux AI 3.4",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782754093",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:enterprise_linux_ai:3.4::el9"
],
"defaultStatus": "affected",
"packageName": "rhelai3/bootc-cuda-rhel9",
"product": "Red Hat Enterprise Linux AI 3.4",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782744816",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:enterprise_linux_ai:3.4::el9"
],
"defaultStatus": "affected",
"packageName": "rhelai3/bootc-gcp-cuda-rhel9",
"product": "Red Hat Enterprise Linux AI 3.4",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782758409",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:enterprise_linux_ai:3.4::el9"
],
"defaultStatus": "affected",
"packageName": "rhelai3/bootc-rocm-rhel9",
"product": "Red Hat Enterprise Linux AI 3.4",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782744830",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:hummingbird:1"
],
"defaultStatus": "affected",
"packageName": "golang1-25-main",
"product": "Red Hat Hardened Images",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1.25.11-2.hum1",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:hummingbird:1"
],
"defaultStatus": "affected",
"packageName": "golang1-26-main",
"product": "Red Hat Hardened Images",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1.26.4-2.hum1",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_ai:3.3::el9"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-trainer-rhel9",
"product": "Red Hat OpenShift AI 3.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782471656",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_builds:1.7::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-builds/openshift-builds-waiters-rhel9",
"product": "Red Hat OpenShift Builds 1.7.4",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783057868",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_builds:1.8::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-builds/openshift-builds-rhel9-operator",
"product": "Red Hat OpenShift Builds 1.8.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784121108",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_builds:1.8::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-builds/openshift-builds-waiters-rhel9",
"product": "Red Hat OpenShift Builds 1.8.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783612119",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.22::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/cephcsi-rhel9",
"product": "Red Hat Openshift Data Foundation 4.22",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782932114",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.22::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/cephcsi-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.22",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782931768",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.22::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/devicefinder-rhel9",
"product": "Red Hat Openshift Data Foundation 4.22",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782932104",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.22::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/mcg-core-rhel9",
"product": "Red Hat Openshift Data Foundation 4.22",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783536000",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.22::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/mcg-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.22",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783535989",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.22::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/ocs-client-console-rhel9",
"product": "Red Hat Openshift Data Foundation 4.22",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783536515",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.22::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/ocs-client-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.22",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782932521",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.22::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/ocs-metrics-exporter-rhel9",
"product": "Red Hat Openshift Data Foundation 4.22",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783018461",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.22::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/ocs-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.22",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783018421",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.22::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-blackbox-exporter-rhel9",
"product": "Red Hat Openshift Data Foundation 4.22",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782932812",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.22::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-cli-rhel9",
"product": "Red Hat Openshift Data Foundation 4.22",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783537001",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.22::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-cloudnative-pg-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.22",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782932919",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.22::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-console-rhel9",
"product": "Red Hat Openshift Data Foundation 4.22",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783537586",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.22::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-cosi-sidecar-rhel9",
"product": "Red Hat Openshift Data Foundation 4.22",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782932969",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.22::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-csi-addons-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.22",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782933015",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.22::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-csi-addons-sidecar-rhel9",
"product": "Red Hat Openshift Data Foundation 4.22",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782933042",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.22::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-drbd-rhel9",
"product": "Red Hat Openshift Data Foundation 4.22",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783537392",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.22::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-external-snapshotter-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.22",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782933235",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.22::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-external-snapshotter-sidecar-rhel9",
"product": "Red Hat Openshift Data Foundation 4.22",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782933251",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.22::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-multicluster-console-rhel9",
"product": "Red Hat Openshift Data Foundation 4.22",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783537955",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.22::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-multicluster-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.22",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782933417",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.22::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-must-gather-rhel9",
"product": "Red Hat Openshift Data Foundation 4.22",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783537742",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.22::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odf-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.22",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782933602",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.22::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odr-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.22",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783019377",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.22::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odr-volsync-plugin-mover-rhel9",
"product": "Red Hat Openshift Data Foundation 4.22",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782934054",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.22::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/odr-volsync-plugin-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.22",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782934036",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4.22::el9"
],
"defaultStatus": "affected",
"packageName": "odf4/rook-ceph-rhel9-operator",
"product": "Red Hat Openshift Data Foundation 4.22",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782934284",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_devspaces:3.29::el9"
],
"defaultStatus": "affected",
"packageName": "devspaces/traefik-rhel9",
"product": "Red Hat OpenShift Dev Spaces 3.29",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782403274",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:quay:3.15::el8"
],
"defaultStatus": "affected",
"packageName": "quay/quay-rhel8",
"product": "Red Hat Quay 3.15",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784351966",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:trusted_artifact_signer:1.4::el9"
],
"defaultStatus": "affected",
"packageName": "conforma-cli-stack-v1",
"product": "Red Hat Trusted Artifact Signer 1.4",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "4-1.4.2",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "4-1.4.3",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:assisted_installer:2"
],
"defaultStatus": "affected",
"packageName": "assisted/agent-preinstall-image-builder-rhel9",
"product": "Assisted Installer for Red Hat OpenShift Container Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:confidential_compute_attestation:1"
],
"defaultStatus": "affected",
"packageName": "openshift-sandboxed-containers/osc-rhel9-operator",
"product": "Confidential Compute Attestation",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ext_dns_optr:1"
],
"defaultStatus": "affected",
"packageName": "edo/external-dns-rhel9",
"product": "ExternalDNS Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:external_secrets_operator:1"
],
"defaultStatus": "affected",
"packageName": "external-secrets-operator/external-secrets-rhel9",
"product": "External Secrets Operator for Red Hat OpenShift",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:logging:6"
],
"defaultStatus": "affected",
"packageName": "openshift-logging/cluster-logging-rhel9-operator",
"product": "Logging Subsystem for Red Hat OpenShift",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:multicluster_engine"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/assisted-service-8-rhel8",
"product": "Multicluster Engine for Kubernetes",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:multicluster_engine"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/assisted-service-9-rhel9",
"product": "Multicluster Engine for Kubernetes",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:multicluster_engine"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/backplane-rhel9-operator",
"product": "Multicluster Engine for Kubernetes",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:multicluster_engine"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/cluster-image-set-controller-rhel9",
"product": "Multicluster Engine for Kubernetes",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:multicluster_engine"
],
"defaultStatus": "unknown",
"packageName": "multicluster-engine/hypershift-addon-rhel9-operator",
"product": "Multicluster Engine for Kubernetes",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:multicluster_engine"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/managedcluster-import-controller",
"product": "Multicluster Engine for Kubernetes",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:multicluster_engine"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/multicloud-manager-rhel9",
"product": "Multicluster Engine for Kubernetes",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_pipelines:1"
],
"defaultStatus": "affected",
"packageName": "openshift-pipelines-client",
"product": "OpenShift Pipelines",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_pipelines:1"
],
"defaultStatus": "affected",
"packageName": "openshift-pipelines/pipelines-chains-controller-rhel9",
"product": "OpenShift Pipelines",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_pipelines:1"
],
"defaultStatus": "affected",
"packageName": "openshift-pipelines/pipelines-pipelines-as-code-controller-rhel9",
"product": "OpenShift Pipelines",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_pipelines:1"
],
"defaultStatus": "affected",
"packageName": "openshift-pipelines/pipelines-pipelines-as-code-watcher-rhel9",
"product": "OpenShift Pipelines",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_pipelines:1"
],
"defaultStatus": "affected",
"packageName": "openshift-pipelines/pipelines-results-api-rhel9",
"product": "OpenShift Pipelines",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_pipelines:1"
],
"defaultStatus": "affected",
"packageName": "openshift-pipelines/pipelines-results-watcher-rhel9",
"product": "OpenShift Pipelines",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:serverless:1"
],
"defaultStatus": "affected",
"packageName": "openshift-serverless-1/kn-plugin-func-func-util-rhel9",
"product": "OpenShift Serverless",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:serverless:1"
],
"defaultStatus": "affected",
"packageName": "openshift-serverless-clients",
"product": "OpenShift Serverless",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:acm:2"
],
"defaultStatus": "affected",
"packageName": "rhacm2/multicluster-operators-channel-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:acm:2"
],
"defaultStatus": "affected",
"packageName": "rhacm2/multicluster-operators-subscription-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:acm:2"
],
"defaultStatus": "affected",
"packageName": "rhacm2/observatorium-rhel9-operator",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:acm:2"
],
"defaultStatus": "affected",
"packageName": "rhacm2/volsync-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ceph_storage:9"
],
"defaultStatus": "affected",
"packageName": "rhceph/alloy-rhel10",
"product": "Red Hat Ceph Storage 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "unaffected",
"packageName": "buildah",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "unaffected",
"packageName": "golang",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "affected",
"packageName": "gvisor-tap-vsock",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "unaffected",
"packageName": "podman",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "unaffected",
"packageName": "trustee",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "unaffected",
"packageName": "container-tools:rhel8/buildah",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "unaffected",
"packageName": "container-tools:rhel8/podman",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "unaffected",
"packageName": "golang",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "unaffected",
"packageName": "buildah",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "unaffected",
"packageName": "golang",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "gvisor-tap-vsock",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "unaffected",
"packageName": "podman",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux_ai:3"
],
"defaultStatus": "affected",
"packageName": "golang",
"product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-data-science-pipelines-argo-argoexec-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-model-registry-rhel8",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-model-registry-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "cri-o",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "microshift",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "openshift",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unknown",
"packageName": "openshift4/ose-hypershift-rhel9",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "openshift4/ose-ptp",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "openshift4/ose-ptp-rhel9",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "openshift4/ose-vsphere-csi-driver-rhel8",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "openshift4/ose-vsphere-csi-driver-rhel9",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "openshift4-wincw/windows-machine-config-rhel8-operator",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "ose-azure-acr-image-credential-provider",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "podman",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:windows_machine_config"
],
"defaultStatus": "affected",
"packageName": "openshift4-wincw/windows-machine-config-rhel9-operator",
"product": "Red Hat OpenShift for Windows Containers",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_gitops:1"
],
"defaultStatus": "affected",
"packageName": "openshift-gitops-1/argocd-rhel8",
"product": "Red Hat OpenShift GitOps",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_gitops:1"
],
"defaultStatus": "affected",
"packageName": "openshift-gitops-1/argocd-rhel9",
"product": "Red Hat OpenShift GitOps",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_service_on_aws:1"
],
"defaultStatus": "affected",
"packageName": "rosa",
"product": "Red Hat OpenShift on AWS",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:container_native_virtualization:4"
],
"defaultStatus": "affected",
"packageName": "kubevirt",
"product": "Red Hat OpenShift Virtualization 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openstack:16.2"
],
"defaultStatus": "unaffected",
"packageName": "golang-googlecode-go-crypto",
"product": "Red Hat OpenStack Platform 16.2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openstack:16.2"
],
"defaultStatus": "unaffected",
"packageName": "rhosp-rhel8/osp-director-agent",
"product": "Red Hat OpenStack Platform 16.2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openstack:17.1"
],
"defaultStatus": "unaffected",
"packageName": "rhosp-rhel9/osp-director-agent",
"product": "Red Hat OpenStack Platform 17.1",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openstack:18.0"
],
"defaultStatus": "unaffected",
"packageName": "rhoso-operators/octavia-rhel9-operator",
"product": "Red Hat OpenStack Platform 18.0",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:quay:3"
],
"defaultStatus": "affected",
"packageName": "quay/quay-builder-rhel8",
"product": "Red Hat Quay 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_security_profiles_operator:1"
],
"defaultStatus": "affected",
"packageName": "compliance/openshift-security-profiles-rhel8-operator",
"product": "Security Profiles Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:zero_trust_workload_identity_manager:1"
],
"defaultStatus": "affected",
"packageName": "zero-trust-workload-identity-manager/spiffe-spire-agent-rhel9",
"product": "Zero Trust Workload Identity Manager",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:zero_trust_workload_identity_manager:0"
],
"defaultStatus": "affected",
"packageName": "zero-trust-workload-identity-manager/spiffe-spire-agent-rhel9",
"product": "Zero Trust Workload Identity Manager - Tech Preview",
"vendor": "Red Hat"
}
],
"datePublic": "2026-05-22T02:31:27.894Z",
"descriptions": [
{
"lang": "en",
"value": "A flaw was found in golang.org/x/crypto/ssh. Source-address validation can be skipped when an SSH server configuration uses an authentication callback type other than public key, allowing authorization bypass in misconfigured servers. This is a follow-on to incomplete coverage from the CVE-2024-45337 fix."
}
],
"metrics": [
{
"other": {
"content": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"value": "Important"
},
"type": "Red Hat severity rating"
}
},
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L",
"version": "3.1"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-303",
"description": "Incorrect Implementation of Authentication Algorithm",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-08-21T12:13:00.762Z",
"orgId": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
"shortName": "redhat-SADP"
},
"references": [
{
"tags": [
"vdb-entry",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/security/cve/CVE-2026-46595"
},
{
"name": "RHBZ#2480689",
"tags": [
"issue-tracking",
"x_refsource_REDHAT"
],
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480689"
},
{
"tags": [
"x_sadp-csaf-vex"
],
"url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-46595.json"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:41019"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:48151"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:36796"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:54531"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:36808"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:51033"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:43692"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:30651"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:47737"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:26546"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:26547"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:36207"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:36651"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:40945"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:40118"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:33531"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:33524"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:23262"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:23264"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:37275"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:36648"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:41036"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:36820"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:37387"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:42796"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:36797"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:30650"
}
],
"solutions": [
{
"lang": "en",
"value": "RHSA-2026:41019: RHEM 1.1 for RHEL 10, RHEM 1.1 for RHEL 9"
},
{
"lang": "en",
"value": "RHSA-2026:48151: Cryostat 4 on RHEL 9"
},
{
"lang": "en",
"value": "RHSA-2026:36796: RHEM 1.0 for RHEL 9"
},
{
"lang": "en",
"value": "RHSA-2026:54531: Cert Manager support for Red Hat OpenShift release 1.19"
},
{
"lang": "en",
"value": "RHSA-2026:36808: DevWorkspace Operator 0.42"
},
{
"lang": "en",
"value": "RHSA-2026:51033: OpenShift API for Data Protection 1.3"
},
{
"lang": "en",
"value": "RHSA-2026:43692: OpenShift API for Data Protection 1.6"
},
{
"lang": "en",
"value": "RHSA-2026:30651: Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"lang": "en",
"value": "RHSA-2026:47737: Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"lang": "en",
"value": "RHSA-2026:26546: Red Hat Advanced Cluster Security 4.9"
},
{
"lang": "en",
"value": "RHSA-2026:26547: Red Hat Advanced Cluster Security for Kubernetes 4.10"
},
{
"lang": "en",
"value": "RHSA-2026:36207: Red Hat Advanced Cluster Security for Kubernetes 4.11"
},
{
"lang": "en",
"value": "RHSA-2026:36651: Red Hat Edge Manager 1.0"
},
{
"lang": "en",
"value": "RHSA-2026:40945: Red Hat Edge Manager 1.1"
},
{
"lang": "en",
"value": "RHSA-2026:40118: Red Hat Edge Manager 1.1"
},
{
"lang": "en",
"value": "RHSA-2026:33531: Red Hat Enterprise Linux AI 3.4"
},
{
"lang": "en",
"value": "RHSA-2026:33524: Red Hat Enterprise Linux AI 3.4"
},
{
"lang": "en",
"value": "RHSA-2026:23262: Red Hat Hardened Images"
},
{
"lang": "en",
"value": "RHSA-2026:23264: Red Hat Hardened Images"
},
{
"lang": "en",
"value": "RHSA-2026:37275: Red Hat OpenShift AI 3.3"
},
{
"lang": "en",
"value": "RHSA-2026:36648: Red Hat OpenShift Builds 1.7.4"
},
{
"lang": "en",
"value": "RHSA-2026:41036: Red Hat OpenShift Builds 1.8.1"
},
{
"lang": "en",
"value": "RHSA-2026:36820: Red Hat OpenShift Dev Spaces 3.29"
},
{
"lang": "en",
"value": "RHSA-2026:37387: Red Hat Openshift Data Foundation 4.22"
},
{
"lang": "en",
"value": "RHSA-2026:42796: Red Hat Quay 3.15"
},
{
"lang": "en",
"value": "RHSA-2026:36797: Red Hat Trusted Artifact Signer 1.4"
},
{
"lang": "en",
"value": "RHSA-2026:30650: multicluster engine for Kubernetes 2.8"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-05-22T04:01:52.215Z",
"value": "Reported to Red Hat."
},
{
"lang": "en",
"time": "2026-05-22T02:31:27.894Z",
"value": "Made public."
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation",
"workarounds": [
{
"lang": "en",
"value": "Upgrade to a fixed golang.org/x/crypto/ssh release via updated golang or package rebuilds. Ensure SSH servers use supported public-key callback configurations with source-address validation as intended."
}
],
"x_adpType": "supplier",
"x_generator": {
"engine": "sadp-cli 1.0.0"
}
}
],
"cna": {
"affected": [
{
"collectionURL": "https://pkg.go.dev",
"defaultStatus": "unaffected",
"packageName": "golang.org/x/crypto/ssh",
"product": "golang.org/x/crypto/ssh",
"programRoutines": [
{
"name": "connection.serverAuthenticate"
},
{
"name": "NewServerConn"
}
],
"vendor": "golang.org/x/crypto",
"versions": [
{
"lessThan": "0.52.0",
"status": "affected",
"version": "0",
"versionType": "semver"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Previously, CVE-2024-45337 fixed an authorization bypass for misused ssh server configurations; if any other type of callback is passed other than public key, then the source-address validation would be skipped."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "CWE-863: Incorrect Authorization",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-05-22T02:31:27.894Z",
"orgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
"shortName": "Go"
},
"references": [
{
"url": "https://go.dev/issue/79570"
},
{
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"url": "https://go.dev/cl/781642"
},
{
"url": "https://pkg.go.dev/vuln/GO-2026-5023"
}
],
"title": "Invoking VerifiedPublicKeyCallback permissions skip enforcement in golang.org/x/crypto/ssh"
}
},
"cveMetadata": {
"assignerOrgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
"assignerShortName": "Go",
"cveId": "CVE-2026-46595",
"datePublished": "2026-05-22T02:31:27.894Z",
"dateReserved": "2026-05-15T17:35:00.813Z",
"dateUpdated": "2026-08-21T12:13:00.762Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2026-46595",
"date": "2026-08-21",
"epss": "0.00503",
"percentile": "0.41067"
},
"microsoft_vex": {
"current_release_date": "2026-06-02T01:41:43.000Z",
"cve": "CVE-2026-46595",
"id": "msrc_CVE-2026-46595",
"initial_release_date": "2026-05-02T00:00:00.000Z",
"product_status:known_not_affected": "5",
"source": "Microsoft CSAF VEX",
"status": "final",
"title": "Invoking VerifiedPublicKeyCallback permissions skip enforcement in golang.org/x/crypto/ssh",
"url": "https://msrc.microsoft.com/csaf/vex/2026/msrc_cve-2026-46595.json",
"version": "2"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2026-46595\",\"sourceIdentifier\":\"security@golang.org\",\"published\":\"2026-05-22T04:16:25.550\",\"lastModified\":\"2026-08-20T13:18:55.070\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Previously, CVE-2024-45337 fixed an authorization bypass for misused ssh server configurations; if any other type of callback is passed other than public key, then the source-address validation would be skipped.\"},{\"lang\":\"es\",\"value\":\"Previamente, CVE-2024-45337 corrigi\u00f3 un bypass de autorizaci\u00f3n para configuraciones de servidor ssh mal utilizadas; si se pasa cualquier otro tipo de callback que no sea clave p\u00fablica, entonces la validaci\u00f3n de la direcci\u00f3n de origen se omitir\u00eda.\"}],\"affected\":[{\"source\":\"security@golang.org\",\"affectedData\":[{\"vendor\":\"golang.org/x/crypto\",\"product\":\"golang.org/x/crypto/ssh\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://pkg.go.dev\",\"packageName\":\"golang.org/x/crypto/ssh\",\"programRoutines\":[{\"name\":\"connection.serverAuthenticate\"},{\"name\":\"NewServerConn\"}],\"versions\":[{\"version\":\"0\",\"lessThan\":\"0.52.0\",\"versionType\":\"semver\",\"status\":\"affected\"}]}]},{\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"affectedData\":[{\"vendor\":\"Red Hat\",\"product\":\"Cryostat 4 on RHEL 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"cryostat/cryostat-storage-rhel9\",\"cpes\":[\"cpe:/a:redhat:cryostat:4::el9\"],\"versions\":[{\"version\":\"4.2.0-19\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"RHEM 1.0 for RHEL 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"flightctl\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.0::el9\"],\"versions\":[{\"version\":\"0:1.0.3-1.el9em\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"RHEM 1.1 for RHEL 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"flightctl\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.1::el10\"],\"versions\":[{\"version\":\"0:1.1.3-1.el10em\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"RHEM 1.1 for RHEL 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"flightctl\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.1::el9\"],\"versions\":[{\"version\":\"0:1.1.3-1.el9em\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Cert Manager support for Red Hat OpenShift release 1.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"cert-manager/jetstack-cert-manager-rhel9\",\"cpes\":[\"cpe:/a:redhat:cert_manager:1.19::el9\"],\"versions\":[{\"version\":\"1786613805\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"DevWorkspace Operator 0.42\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"devworkspace/devworkspace-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:devworkspace:0.42::el9\"],\"versions\":[{\"version\":\"1782401674\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/addon-manager-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.8::el9\"],\"versions\":[{\"version\":\"1782160196\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/kube-rbac-proxy-mce-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.8::el9\"],\"versions\":[{\"version\":\"1782477094\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/placement-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.8::el9\"],\"versions\":[{\"version\":\"1782160009\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/registration-operator-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.8::el9\"],\"versions\":[{\"version\":\"1782160210\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/registration-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.8::el9\"],\"versions\":[{\"version\":\"1782160541\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/work-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.8::el9\"],\"versions\":[{\"version\":\"1782159773\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift API for Data Protection 1.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"oadp/oadp-velero-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_api_data_protection:1.3::el9\"],\"versions\":[{\"version\":\"1785180878\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift API for Data Protection 1.6\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"oadp/oadp-velero-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_api_data_protection:1.6::el9\"],\"versions\":[{\"version\":\"1784058822\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2.13\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhacm2/acm-grafana-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2.13::el9\"],\"versions\":[{\"version\":\"1782383730\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2.13\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhacm2/kube-rbac-proxy-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2.13::el9\"],\"versions\":[{\"version\":\"1782488873\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2.13\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhacm2/multicluster-observability-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:acm:2.13::el9\"],\"versions\":[{\"version\":\"1782382711\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2.13\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhacm2/multicloud-integrations-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2.13::el9\"],\"versions\":[{\"version\":\"1784652040\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2.13\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhacm2/multiclusterhub-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2.13::el9\"],\"versions\":[{\"version\":\"1784638644\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Security 4.9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"advanced-cluster-security/rhacs-main-rhel8\",\"cpes\":[\"cpe:/a:redhat:advanced_cluster_security:4.9::el8\"],\"versions\":[{\"version\":\"1781686446\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Security for Kubernetes 4.10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"advanced-cluster-security/rhacs-main-rhel8\",\"cpes\":[\"cpe:/a:redhat:advanced_cluster_security:4.10::el8\"],\"versions\":[{\"version\":\"1781686458\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Security for Kubernetes 4.11\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"advanced-cluster-security/rhacs-main-rhel9\",\"cpes\":[\"cpe:/a:redhat:advanced_cluster_security:4.11::el9\"],\"versions\":[{\"version\":\"1783352589\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Edge Manager 1.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhem/flightctl-api-rhel9\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.0::el9\"],\"versions\":[{\"version\":\"1783502025\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Edge Manager 1.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhem/flightctl-api-rhel10\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.1::el10\"],\"versions\":[{\"version\":\"1784196588\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Edge Manager 1.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhem/flightctl-api-rhel9\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1.1::el9\"],\"versions\":[{\"version\":\"1784126780\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AI 3.4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhelai3/disk-image-cuda-rhel9\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux_ai:3.4::el9\"],\"versions\":[{\"version\":\"1782804957\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AI 3.4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhelai3/bootc-aws-cuda-rhel9\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux_ai:3.4::el9\"],\"versions\":[{\"version\":\"1782758407\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AI 3.4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhelai3/bootc-azure-cuda-rhel9\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux_ai:3.4::el9\"],\"versions\":[{\"version\":\"1782758410\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AI 3.4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhelai3/bootc-azure-rocm-rhel9\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux_ai:3.4::el9\"],\"versions\":[{\"version\":\"1782754093\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AI 3.4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhelai3/bootc-cuda-rhel9\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux_ai:3.4::el9\"],\"versions\":[{\"version\":\"1782744816\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AI 3.4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhelai3/bootc-gcp-cuda-rhel9\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux_ai:3.4::el9\"],\"versions\":[{\"version\":\"1782758409\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AI 3.4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhelai3/bootc-rocm-rhel9\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux_ai:3.4::el9\"],\"versions\":[{\"version\":\"1782744830\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Hardened Images\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"golang1-25-main\",\"cpes\":[\"cpe:/a:redhat:hummingbird:1\"],\"versions\":[{\"version\":\"1.25.11-2.hum1\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Hardened Images\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"golang1-26-main\",\"cpes\":[\"cpe:/a:redhat:hummingbird:1\"],\"versions\":[{\"version\":\"1.26.4-2.hum1\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI 3.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhoai/odh-trainer-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai:3.3::el9\"],\"versions\":[{\"version\":\"1782471656\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Builds 1.7.4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-builds/openshift-builds-waiters-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_builds:1.7::el9\"],\"versions\":[{\"version\":\"1783057868\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Builds 1.8.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-builds/openshift-builds-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_builds:1.8::el9\"],\"versions\":[{\"version\":\"1784121108\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Builds 1.8.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-builds/openshift-builds-waiters-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_builds:1.8::el9\"],\"versions\":[{\"version\":\"1783612119\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.22\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/cephcsi-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"],\"versions\":[{\"version\":\"1782932114\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.22\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/cephcsi-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"],\"versions\":[{\"version\":\"1782931768\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.22\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/devicefinder-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"],\"versions\":[{\"version\":\"1782932104\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.22\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/mcg-core-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"],\"versions\":[{\"version\":\"1783536000\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.22\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/mcg-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"],\"versions\":[{\"version\":\"1783535989\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.22\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/ocs-client-console-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"],\"versions\":[{\"version\":\"1783536515\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.22\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/ocs-client-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"],\"versions\":[{\"version\":\"1782932521\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.22\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/ocs-metrics-exporter-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"],\"versions\":[{\"version\":\"1783018461\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.22\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/ocs-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"],\"versions\":[{\"version\":\"1783018421\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.22\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-blackbox-exporter-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"],\"versions\":[{\"version\":\"1782932812\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.22\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-cli-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"],\"versions\":[{\"version\":\"1783537001\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.22\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-cloudnative-pg-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"],\"versions\":[{\"version\":\"1782932919\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.22\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-console-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"],\"versions\":[{\"version\":\"1783537586\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.22\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-cosi-sidecar-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"],\"versions\":[{\"version\":\"1782932969\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.22\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-csi-addons-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"],\"versions\":[{\"version\":\"1782933015\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.22\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-csi-addons-sidecar-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"],\"versions\":[{\"version\":\"1782933042\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.22\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-drbd-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"],\"versions\":[{\"version\":\"1783537392\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.22\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-external-snapshotter-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"],\"versions\":[{\"version\":\"1782933235\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.22\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-external-snapshotter-sidecar-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"],\"versions\":[{\"version\":\"1782933251\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.22\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-multicluster-console-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"],\"versions\":[{\"version\":\"1783537955\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.22\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-multicluster-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"],\"versions\":[{\"version\":\"1782933417\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.22\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-must-gather-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"],\"versions\":[{\"version\":\"1783537742\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.22\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odf-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"],\"versions\":[{\"version\":\"1782933602\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.22\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odr-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"],\"versions\":[{\"version\":\"1783019377\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.22\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odr-volsync-plugin-mover-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"],\"versions\":[{\"version\":\"1782934054\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.22\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/odr-volsync-plugin-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"],\"versions\":[{\"version\":\"1782934036\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4.22\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"odf4/rook-ceph-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"],\"versions\":[{\"version\":\"1782934284\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Dev Spaces 3.29\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"devspaces/traefik-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_devspaces:3.29::el9\"],\"versions\":[{\"version\":\"1782403274\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Quay 3.15\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"quay/quay-rhel8\",\"cpes\":[\"cpe:/a:redhat:quay:3.15::el8\"],\"versions\":[{\"version\":\"1784351966\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Trusted Artifact Signer 1.4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"conforma-cli-stack-v1\",\"cpes\":[\"cpe:/a:redhat:trusted_artifact_signer:1.4::el9\"],\"versions\":[{\"version\":\"4-1.4.2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"4-1.4.3\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Assisted Installer for Red Hat OpenShift Container Platform 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"assisted/agent-preinstall-image-builder-rhel9\",\"cpes\":[\"cpe:/a:redhat:assisted_installer:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Confidential Compute Attestation\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-sandboxed-containers/osc-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:confidential_compute_attestation:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"ExternalDNS Operator\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"edo/external-dns-rhel9\",\"cpes\":[\"cpe:/a:redhat:ext_dns_optr:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"External Secrets Operator for Red Hat OpenShift\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"external-secrets-operator/external-secrets-rhel9\",\"cpes\":[\"cpe:/a:redhat:external_secrets_operator:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Logging Subsystem for Red Hat OpenShift\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-logging/cluster-logging-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:logging:6\"]},{\"vendor\":\"Red Hat\",\"product\":\"Multicluster Engine for Kubernetes\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"multicluster-engine/assisted-service-8-rhel8\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine\"]},{\"vendor\":\"Red Hat\",\"product\":\"Multicluster Engine for Kubernetes\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"multicluster-engine/assisted-service-9-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine\"]},{\"vendor\":\"Red Hat\",\"product\":\"Multicluster Engine for Kubernetes\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"multicluster-engine/backplane-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine\"]},{\"vendor\":\"Red Hat\",\"product\":\"Multicluster Engine for Kubernetes\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"multicluster-engine/cluster-image-set-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine\"]},{\"vendor\":\"Red Hat\",\"product\":\"Multicluster Engine for Kubernetes\",\"defaultStatus\":\"unknown\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"multicluster-engine/hypershift-addon-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine\"]},{\"vendor\":\"Red Hat\",\"product\":\"Multicluster Engine for Kubernetes\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"multicluster-engine/managedcluster-import-controller\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine\"]},{\"vendor\":\"Red Hat\",\"product\":\"Multicluster Engine for Kubernetes\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"multicluster-engine/multicloud-manager-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Pipelines\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-pipelines-client\",\"cpes\":[\"cpe:/a:redhat:openshift_pipelines:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Pipelines\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-pipelines/pipelines-chains-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_pipelines:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Pipelines\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-pipelines/pipelines-pipelines-as-code-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_pipelines:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Pipelines\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-pipelines/pipelines-pipelines-as-code-watcher-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_pipelines:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Pipelines\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-pipelines/pipelines-results-api-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_pipelines:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Pipelines\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-pipelines/pipelines-results-watcher-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_pipelines:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Serverless\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-serverless-1/kn-plugin-func-func-util-rhel9\",\"cpes\":[\"cpe:/a:redhat:serverless:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Serverless\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-serverless-clients\",\"cpes\":[\"cpe:/a:redhat:serverless:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhacm2/multicluster-operators-channel-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhacm2/multicluster-operators-subscription-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhacm2/observatorium-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:acm:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhacm2/volsync-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ceph Storage 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhceph/alloy-rhel10\",\"cpes\":[\"cpe:/a:redhat:ceph_storage:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"buildah\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"golang\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"gvisor-tap-vsock\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"podman\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"trustee\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"container-tools:rhel8/buildah\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"container-tools:rhel8/podman\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"golang\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"buildah\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"golang\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"gvisor-tap-vsock\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"podman\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AI (RHEL AI) 3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"golang\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux_ai:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-data-science-pipelines-argo-argoexec-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-model-registry-rhel8\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-model-registry-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"cri-o\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"microshift\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unknown\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-hypershift-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-ptp\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-ptp-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-vsphere-csi-driver-rhel8\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-vsphere-csi-driver-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4-wincw/windows-machine-config-rhel8-operator\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ose-azure-acr-image-credential-provider\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"podman\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift for Windows Containers\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4-wincw/windows-machine-config-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:windows_machine_config\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift GitOps\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-gitops-1/argocd-rhel8\",\"cpes\":[\"cpe:/a:redhat:openshift_gitops:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift GitOps\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-gitops-1/argocd-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_gitops:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift on AWS\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rosa\",\"cpes\":[\"cpe:/a:redhat:openshift_service_on_aws:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Virtualization 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"kubevirt\",\"cpes\":[\"cpe:/a:redhat:container_native_virtualization:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenStack Platform 16.2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"golang-googlecode-go-crypto\",\"cpes\":[\"cpe:/a:redhat:openstack:16.2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenStack Platform 16.2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhosp-rhel8/osp-director-agent\",\"cpes\":[\"cpe:/a:redhat:openstack:16.2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenStack Platform 17.1\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhosp-rhel9/osp-director-agent\",\"cpes\":[\"cpe:/a:redhat:openstack:17.1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenStack Platform 18.0\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoso-operators/octavia-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openstack:18.0\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Quay 3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"quay/quay-builder-rhel8\",\"cpes\":[\"cpe:/a:redhat:quay:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Security Profiles Operator\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"compliance/openshift-security-profiles-rhel8-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_security_profiles_operator:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Zero Trust Workload Identity Manager\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"zero-trust-workload-identity-manager/spiffe-spire-agent-rhel9\",\"cpes\":[\"cpe:/a:redhat:zero_trust_workload_identity_manager:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Zero Trust Workload Identity Manager - Tech Preview\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"zero-trust-workload-identity-manager/spiffe-spire-agent-rhel9\",\"cpes\":[\"cpe:/a:redhat:zero_trust_workload_identity_manager:0\"]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:L\",\"baseScore\":10.0,\"baseSeverity\":\"CRITICAL\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"CHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"LOW\"},\"exploitabilityScore\":3.9,\"impactScore\":6.0},{\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L\",\"baseScore\":7.1,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"HIGH\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"LOW\"},\"exploitabilityScore\":1.6,\"impactScore\":5.5}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2026-05-22T18:21:12.222019Z\",\"id\":\"CVE-2026-46595\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"yes\"},{\"technicalImpact\":\"partial\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-863\"}]},{\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-303\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:golang:crypto:*:*:*:*:*:go:*:*\",\"versionEndExcluding\":\"0.52.0\",\"matchCriteriaId\":\"D540395B-31B8-4B07-8F79-F5C631BBD5C8\"}]}]}],\"references\":[{\"url\":\"https://go.dev/cl/781642\",\"source\":\"security@golang.org\",\"tags\":[\"Issue Tracking\"]},{\"url\":\"https://go.dev/issue/79570\",\"source\":\"security@golang.org\",\"tags\":[\"Issue Tracking\"]},{\"url\":\"https://groups.google.com/g/golang-announce/c/a082jnz-LvI\",\"source\":\"security@golang.org\",\"tags\":[\"Mailing List\"]},{\"url\":\"https://pkg.go.dev/vuln/GO-2026-5023\",\"source\":\"security@golang.org\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:23262\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:23264\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:26546\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:26547\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:30650\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:30651\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:33524\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:33531\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:36207\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:36648\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:36651\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:36796\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:36797\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:36808\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:36820\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:37275\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:37387\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:40118\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:40945\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:41019\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:41036\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:42796\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:43692\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:47737\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:48151\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:51033\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:54531\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/security/cve/CVE-2026-46595\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://bugzilla.redhat.com/show_bug.cgi?id=2480689\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-46595.json\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"}]}}",
"redhat_vex": {
"aggregate_severity": "Important",
"current_release_date": "2026-08-21T23:01:07+00:00",
"cve": "CVE-2026-46595",
"id": "CVE-2026-46595",
"initial_release_date": "2026-05-22T02:31:27.894000+00:00",
"product_status:fixed": "262",
"product_status:known_affected": "60",
"product_status:known_not_affected": "1308",
"source": "Red Hat CSAF VEX",
"status": "final",
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation",
"url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-46595.json",
"version": "3"
},
"suse_vex": {
"aggregate_severity": "important",
"current_release_date": "2026-08-21T01:00:01Z",
"cve": "CVE-2026-46595",
"id": "CVE-2026-46595",
"initial_release_date": "2026-05-23T01:27:54Z",
"product_status:known_affected": "739",
"product_status:known_not_affected": "267",
"product_status:recommended": "385",
"source": "SUSE CSAF VEX",
"status": "interim",
"title": "SUSE CVE CVE-2026-46595",
"url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-46595.json",
"version": "37"
},
"vulnrichment": {
"containers": "{\"adp\": [{\"title\": \"golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation\", \"metrics\": [{\"other\": {\"type\": \"Red Hat severity rating\", \"content\": {\"value\": \"Important\", \"namespace\": \"https://access.redhat.com/security/updates/classification/\"}}}, {\"format\": \"CVSS\", \"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 7.1, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L\", \"integrityImpact\": \"HIGH\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"HIGH\", \"availabilityImpact\": \"LOW\", \"privilegesRequired\": \"LOW\", \"confidentialityImpact\": \"HIGH\"}}], \"affected\": [{\"cpes\": [\"cpe:/a:redhat:cryostat:4::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Cryostat 4 on RHEL 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"4.2.0-19\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"cryostat/cryostat-storage-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.0::el9\"], \"vendor\": \"Red Hat\", \"product\": \"RHEM 1.0 for RHEL 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.0.3-1.el9em\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"flightctl\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.1::el10\"], \"vendor\": \"Red Hat\", \"product\": \"RHEM 1.1 for RHEL 10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.1.3-1.el10em\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"flightctl\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.1::el9\"], \"vendor\": \"Red Hat\", \"product\": \"RHEM 1.1 for RHEL 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.1.3-1.el9em\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"flightctl\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:cert_manager:1.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Cert Manager support for Red Hat OpenShift release 1.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786613805\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"cert-manager/jetstack-cert-manager-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:devworkspace:0.42::el9\"], \"vendor\": \"Red Hat\", \"product\": \"DevWorkspace Operator 0.42\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782401674\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"devworkspace/devworkspace-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.8::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782160196\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/addon-manager-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.8::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782477094\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/kube-rbac-proxy-mce-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.8::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782160009\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/placement-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.8::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782160210\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/registration-operator-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.8::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782160541\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/registration-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.8::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782159773\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/work-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_api_data_protection:1.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift API for Data Protection 1.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1785180878\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"oadp/oadp-velero-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_api_data_protection:1.6::el9\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift API for Data Protection 1.6\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784058822\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"oadp/oadp-velero-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2.13::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2.13\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782383730\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhacm2/acm-grafana-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2.13::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2.13\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782488873\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhacm2/kube-rbac-proxy-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2.13::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2.13\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782382711\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhacm2/multicluster-observability-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2.13::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2.13\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784652040\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhacm2/multicloud-integrations-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2.13::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2.13\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784638644\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhacm2/multiclusterhub-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:advanced_cluster_security:4.9::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Security 4.9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1781686446\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"advanced-cluster-security/rhacs-main-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:advanced_cluster_security:4.10::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Security for Kubernetes 4.10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1781686458\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"advanced-cluster-security/rhacs-main-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:advanced_cluster_security:4.11::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Security for Kubernetes 4.11\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783352589\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"advanced-cluster-security/rhacs-main-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.0::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Edge Manager 1.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783502025\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhem/flightctl-api-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.1::el10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Edge Manager 1.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784196588\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhem/flightctl-api-rhel10\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1.1::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Edge Manager 1.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784126780\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhem/flightctl-api-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux_ai:3.4::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AI 3.4\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782804957\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhelai3/disk-image-cuda-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux_ai:3.4::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AI 3.4\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782758407\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhelai3/bootc-aws-cuda-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux_ai:3.4::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AI 3.4\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782758410\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhelai3/bootc-azure-cuda-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux_ai:3.4::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AI 3.4\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782754093\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhelai3/bootc-azure-rocm-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux_ai:3.4::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AI 3.4\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782744816\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhelai3/bootc-cuda-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux_ai:3.4::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AI 3.4\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782758409\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhelai3/bootc-gcp-cuda-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux_ai:3.4::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AI 3.4\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782744830\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhelai3/bootc-rocm-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:hummingbird:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Hardened Images\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1.25.11-2.hum1\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"golang1-25-main\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:hummingbird:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Hardened Images\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1.26.4-2.hum1\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"golang1-26-main\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai:3.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI 3.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782471656\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhoai/odh-trainer-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_builds:1.7::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Builds 1.7.4\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783057868\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-builds/openshift-builds-waiters-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_builds:1.8::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Builds 1.8.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784121108\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-builds/openshift-builds-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_builds:1.8::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Builds 1.8.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783612119\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-builds/openshift-builds-waiters-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.22\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782932114\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/cephcsi-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.22\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782931768\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/cephcsi-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.22\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782932104\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/devicefinder-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.22\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783536000\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/mcg-core-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.22\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783535989\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/mcg-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.22\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783536515\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/ocs-client-console-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.22\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782932521\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/ocs-client-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.22\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783018461\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/ocs-metrics-exporter-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.22\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783018421\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/ocs-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.22\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782932812\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-blackbox-exporter-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.22\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783537001\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-cli-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.22\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782932919\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-cloudnative-pg-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.22\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783537586\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-console-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.22\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782932969\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-cosi-sidecar-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.22\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782933015\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-csi-addons-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.22\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782933042\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-csi-addons-sidecar-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.22\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783537392\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-drbd-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.22\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782933235\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-external-snapshotter-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.22\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782933251\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-external-snapshotter-sidecar-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.22\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783537955\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-multicluster-console-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.22\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782933417\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-multicluster-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.22\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783537742\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-must-gather-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.22\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782933602\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odf-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.22\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783019377\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odr-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.22\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782934054\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odr-volsync-plugin-mover-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.22\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782934036\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/odr-volsync-plugin-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4.22::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4.22\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782934284\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"odf4/rook-ceph-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_devspaces:3.29::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Dev Spaces 3.29\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782403274\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"devspaces/traefik-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:quay:3.15::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Quay 3.15\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784351966\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"quay/quay-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:trusted_artifact_signer:1.4::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Trusted Artifact Signer 1.4\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"4-1.4.2\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"4-1.4.3\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"conforma-cli-stack-v1\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:assisted_installer:2\"], \"vendor\": \"Red Hat\", \"product\": \"Assisted Installer for Red Hat OpenShift Container Platform 2\", \"packageName\": \"assisted/agent-preinstall-image-builder-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:confidential_compute_attestation:1\"], \"vendor\": \"Red Hat\", \"product\": \"Confidential Compute Attestation\", \"packageName\": \"openshift-sandboxed-containers/osc-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ext_dns_optr:1\"], \"vendor\": \"Red Hat\", \"product\": \"ExternalDNS Operator\", \"packageName\": \"edo/external-dns-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:external_secrets_operator:1\"], \"vendor\": \"Red Hat\", \"product\": \"External Secrets Operator for Red Hat OpenShift\", \"packageName\": \"external-secrets-operator/external-secrets-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:logging:6\"], \"vendor\": \"Red Hat\", \"product\": \"Logging Subsystem for Red Hat OpenShift\", \"packageName\": \"openshift-logging/cluster-logging-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine\"], \"vendor\": \"Red Hat\", \"product\": \"Multicluster Engine for Kubernetes\", \"packageName\": \"multicluster-engine/assisted-service-8-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine\"], \"vendor\": \"Red Hat\", \"product\": \"Multicluster Engine for Kubernetes\", \"packageName\": \"multicluster-engine/assisted-service-9-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine\"], \"vendor\": \"Red Hat\", \"product\": \"Multicluster Engine for Kubernetes\", \"packageName\": \"multicluster-engine/backplane-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine\"], \"vendor\": \"Red Hat\", \"product\": \"Multicluster Engine for Kubernetes\", \"packageName\": \"multicluster-engine/cluster-image-set-controller-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine\"], \"vendor\": \"Red Hat\", \"product\": \"Multicluster Engine for Kubernetes\", \"packageName\": \"multicluster-engine/hypershift-addon-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine\"], \"vendor\": \"Red Hat\", \"product\": \"Multicluster Engine for Kubernetes\", \"packageName\": \"multicluster-engine/managedcluster-import-controller\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine\"], \"vendor\": \"Red Hat\", \"product\": \"Multicluster Engine for Kubernetes\", \"packageName\": \"multicluster-engine/multicloud-manager-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_pipelines:1\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Pipelines\", \"packageName\": \"openshift-pipelines-client\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_pipelines:1\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Pipelines\", \"packageName\": \"openshift-pipelines/pipelines-chains-controller-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_pipelines:1\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Pipelines\", \"packageName\": \"openshift-pipelines/pipelines-pipelines-as-code-controller-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_pipelines:1\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Pipelines\", \"packageName\": \"openshift-pipelines/pipelines-pipelines-as-code-watcher-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_pipelines:1\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Pipelines\", \"packageName\": \"openshift-pipelines/pipelines-results-api-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_pipelines:1\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Pipelines\", \"packageName\": \"openshift-pipelines/pipelines-results-watcher-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:serverless:1\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Serverless\", \"packageName\": \"openshift-serverless-1/kn-plugin-func-func-util-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:serverless:1\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Serverless\", \"packageName\": \"openshift-serverless-clients\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2\", \"packageName\": \"rhacm2/multicluster-operators-channel-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2\", \"packageName\": \"rhacm2/multicluster-operators-subscription-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2\", \"packageName\": \"rhacm2/observatorium-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2\", \"packageName\": \"rhacm2/volsync-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ceph_storage:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ceph Storage 9\", \"packageName\": \"rhceph/alloy-rhel10\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"buildah\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"golang\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"gvisor-tap-vsock\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"podman\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"trustee\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"container-tools:rhel8/buildah\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"container-tools:rhel8/podman\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"golang\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"buildah\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"golang\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"gvisor-tap-vsock\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"podman\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux_ai:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AI (RHEL AI) 3\", \"packageName\": \"golang\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-data-science-pipelines-argo-argoexec-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-model-registry-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-model-registry-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"cri-o\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"microshift\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-hypershift-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unknown\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-ptp\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-ptp-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-vsphere-csi-driver-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-vsphere-csi-driver-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4-wincw/windows-machine-config-rhel8-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"ose-azure-acr-image-credential-provider\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"podman\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:windows_machine_config\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift for Windows Containers\", \"packageName\": \"openshift4-wincw/windows-machine-config-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_gitops:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift GitOps\", \"packageName\": \"openshift-gitops-1/argocd-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_gitops:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift GitOps\", \"packageName\": \"openshift-gitops-1/argocd-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_service_on_aws:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift on AWS\", \"packageName\": \"rosa\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:container_native_virtualization:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Virtualization 4\", \"packageName\": \"kubevirt\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openstack:16.2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenStack Platform 16.2\", \"packageName\": \"golang-googlecode-go-crypto\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openstack:16.2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenStack Platform 16.2\", \"packageName\": \"rhosp-rhel8/osp-director-agent\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openstack:17.1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenStack Platform 17.1\", \"packageName\": \"rhosp-rhel9/osp-director-agent\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openstack:18.0\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenStack Platform 18.0\", \"packageName\": \"rhoso-operators/octavia-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:quay:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Quay 3\", \"packageName\": \"quay/quay-builder-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_security_profiles_operator:1\"], \"vendor\": \"Red Hat\", \"product\": \"Security Profiles Operator\", \"packageName\": \"compliance/openshift-security-profiles-rhel8-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:zero_trust_workload_identity_manager:1\"], \"vendor\": \"Red Hat\", \"product\": \"Zero Trust Workload Identity Manager\", \"packageName\": \"zero-trust-workload-identity-manager/spiffe-spire-agent-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:zero_trust_workload_identity_manager:0\"], \"vendor\": \"Red Hat\", \"product\": \"Zero Trust Workload Identity Manager - Tech Preview\", \"packageName\": \"zero-trust-workload-identity-manager/spiffe-spire-agent-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}], \"timeline\": [{\"lang\": \"en\", \"time\": \"2026-05-22T04:01:52.215Z\", \"value\": \"Reported to Red Hat.\"}, {\"lang\": \"en\", \"time\": \"2026-05-22T02:31:27.894Z\", \"value\": \"Made public.\"}], \"solutions\": [{\"lang\": \"en\", \"value\": \"RHSA-2026:41019: RHEM 1.1 for RHEL 10, RHEM 1.1 for RHEL 9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:48151: Cryostat 4 on RHEL 9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:36796: RHEM 1.0 for RHEL 9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:54531: Cert Manager support for Red Hat OpenShift release 1.19\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:36808: DevWorkspace Operator 0.42\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:51033: OpenShift API for Data Protection 1.3\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:43692: OpenShift API for Data Protection 1.6\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:30651: Red Hat Advanced Cluster Management for Kubernetes 2.13\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:47737: Red Hat Advanced Cluster Management for Kubernetes 2.13\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:26546: Red Hat Advanced Cluster Security 4.9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:26547: Red Hat Advanced Cluster Security for Kubernetes 4.10\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:36207: Red Hat Advanced Cluster Security for Kubernetes 4.11\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:36651: Red Hat Edge Manager 1.0\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:40945: Red Hat Edge Manager 1.1\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:40118: Red Hat Edge Manager 1.1\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:33531: Red Hat Enterprise Linux AI 3.4\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:33524: Red Hat Enterprise Linux AI 3.4\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:23262: Red Hat Hardened Images\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:23264: Red Hat Hardened Images\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:37275: Red Hat OpenShift AI 3.3\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:36648: Red Hat OpenShift Builds 1.7.4\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:41036: Red Hat OpenShift Builds 1.8.1\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:36820: Red Hat OpenShift Dev Spaces 3.29\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:37387: Red Hat Openshift Data Foundation 4.22\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:42796: Red Hat Quay 3.15\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:36797: Red Hat Trusted Artifact Signer 1.4\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:30650: multicluster engine for Kubernetes 2.8\"}], \"x_adpType\": \"supplier\", \"datePublic\": \"2026-05-22T02:31:27.894Z\", \"references\": [{\"url\": \"https://access.redhat.com/security/cve/CVE-2026-46595\", \"tags\": [\"vdb-entry\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://bugzilla.redhat.com/show_bug.cgi?id=2480689\", \"name\": \"RHBZ#2480689\", \"tags\": [\"issue-tracking\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-46595.json\", \"tags\": [\"x_sadp-csaf-vex\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:41019\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:48151\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:36796\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:54531\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:36808\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:51033\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:43692\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:30651\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:47737\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:26546\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:26547\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:36207\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:36651\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:40945\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:40118\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:33531\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:33524\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:23262\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:23264\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:37275\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:36648\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:41036\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:36820\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:37387\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:42796\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:36797\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:30650\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}], \"workarounds\": [{\"lang\": \"en\", \"value\": \"Upgrade to a fixed golang.org/x/crypto/ssh release via updated golang or package rebuilds. Ensure SSH servers use supported public-key callback configurations with source-address validation as intended.\"}], \"x_generator\": {\"engine\": \"sadp-cli 1.0.0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"A flaw was found in golang.org/x/crypto/ssh. Source-address validation can be skipped when an SSH server configuration uses an authentication callback type other than public key, allowing authorization bypass in misconfigured servers. This is a follow-on to incomplete coverage from the CVE-2024-45337 fix.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-303\", \"description\": \"Incorrect Implementation of Authentication Algorithm\"}]}], \"providerMetadata\": {\"orgId\": \"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\", \"shortName\": \"redhat-SADP\", \"dateUpdated\": \"2026-08-21T12:13:00.762Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"cvssV3_1\": {\"scope\": \"CHANGED\", \"version\": \"3.1\", \"baseScore\": 10, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"CRITICAL\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:L\", \"integrityImpact\": \"HIGH\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"LOW\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"HIGH\"}}, {\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2026-46595\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"yes\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2026-05-22T18:21:12.222019Z\"}}}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-863\", \"description\": \"CWE-863 Incorrect Authorization\"}]}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2026-05-22T18:20:15.936Z\"}}], \"cna\": {\"title\": \"Invoking VerifiedPublicKeyCallback permissions skip enforcement in golang.org/x/crypto/ssh\", \"affected\": [{\"vendor\": \"golang.org/x/crypto\", \"product\": \"golang.org/x/crypto/ssh\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"0.52.0\", \"versionType\": \"semver\"}], \"packageName\": \"golang.org/x/crypto/ssh\", \"collectionURL\": \"https://pkg.go.dev\", \"defaultStatus\": \"unaffected\", \"programRoutines\": [{\"name\": \"connection.serverAuthenticate\"}, {\"name\": \"NewServerConn\"}]}], \"references\": [{\"url\": \"https://go.dev/issue/79570\"}, {\"url\": \"https://groups.google.com/g/golang-announce/c/a082jnz-LvI\"}, {\"url\": \"https://go.dev/cl/781642\"}, {\"url\": \"https://pkg.go.dev/vuln/GO-2026-5023\"}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"Previously, CVE-2024-45337 fixed an authorization bypass for misused ssh server configurations; if any other type of callback is passed other than public key, then the source-address validation would be skipped.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"description\": \"CWE-863: Incorrect Authorization\"}]}], \"providerMetadata\": {\"orgId\": \"1bb62c36-49e3-4200-9d77-64a1400537cc\", \"shortName\": \"Go\", \"dateUpdated\": \"2026-05-22T02:31:27.894Z\"}}}",
"cveMetadata": "{\"cveId\": \"CVE-2026-46595\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-08-21T12:13:00.762Z\", \"dateReserved\": \"2026-05-15T17:35:00.813Z\", \"assignerOrgId\": \"1bb62c36-49e3-4200-9d77-64a1400537cc\", \"datePublished\": \"2026-05-22T02:31:27.894Z\", \"assignerShortName\": \"Go\"}",
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
}
}
RHSA-2026:47737
Vulnerability from csaf_redhat - Published: 2026-07-29 07:47 - Updated: 2026-08-22 08:39Summary
Red Hat Security Advisory: Red Hat Advanced Cluster Management for Kubernetes v2.13.10 security update
Severity
Important
Notes
Topic: Red Hat Advanced Cluster Management for Kubernetes v2.13 general availability release images, which provide security fixes, bug fixes, and updated container images.
Red Hat Product Security has rated this update as having a security impact of Important.
A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the References section.
Details: Red Hat Advanced Cluster Management for Kubernetes provides the
capabilities to address common challenges that administrators and site
reliability engineers face as they work across a range of public and
private cloud environments. Clusters and applications are all visible and
managed from a single console—with security policy built in.
This advisory contains the container images for Red Hat Advanced Cluster
Management for Kubernetes, which add new features and enhancements, bug
fixes, and updated container images. See the following
Release Notes documentation, which will be updated shortly for this
release, for additional details about this release:
https://docs.redhat.com/en/documentation/red_hat_advanced_cluster_management_for_kubernetes/2.13/html-single/release_notes/index#acm-release-notes
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in golang.org/x/net/html. When arbitrary HTML is parsed and then rendered, it can result in an unexpected HTML tree. This allows an attacker to bypass HTML sanitization mechanisms, leading to Cross-Site Scripting (XSS) attacks in applications. Such attacks can result in information disclosure or arbitrary code execution.
8.1 (High)
Affected products
Fixed
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:0a90a13f006ef0b271079b728ef6d54081f36ae19b6d0e9ab4dc24ea52a30fad_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:3a53629645832974a883002e53198df7c28e59dd6d1df99bf321b52d0ef84b61_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:879315f438ca43abb607d6c97f8fbd4ca2d38209b142e2d97cc0598740273252_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:c6c4d01f5fcee6cad3fc870cace92f45000624760e6e93654bb5e814afeed7bb_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:50f7647620c78fd6b445379c8762f5e978113fe3552906376a24459263f27459_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:53e641f48ddc05c63da2e6bc24e9e4636a10de2c3599d8f5f78622bdebca07ca_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:57114b7a386c406715e342637558fab57afeef2e193517f99173a441f39401d5_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:dcdcaa90f292f2d7ad3f10acbedfab9f7f22f3432c3156055f34760d9bf9429c_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:3e6519c0c789b946eb1b811867c41c4f204440bad5734760c0aca4e3fc602e5a_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:95684cfaf4d5d91bc9fe8cfbf64a6f113e944e3f0c102d27851be5232eca0dbb_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:9cb20990af88287dd8a27de4e4ef12eb244577a1844482d26107359c6efe8efa_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:a69ebb0c7e817d44cfabd86ad13ef4cc94a8bf5b6e8a607d17b197603d64a224_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:03adc6277e2bf409391941c6f4508154abc38a0c043139978754f6d4fd32c5a8_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:7e100af30ed11325cb2cbee02af09306e53df5db5847f2a4b733cd307e3cd623_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:91b474b4808b18c279c9f8eb3be8e6d1e1e47cf2b5f9553acd901c74b20bddbc_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:d56f884a9700a4f193d6f3db1895bd54745ec77e02ead3d43bd6e4fe04a2969e_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
160 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:31bd91156f49687d2efffd3be971d9ee0e16abb420b8e8b958caa88b97770020_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:a6315866c67ba350665f5a92f960a5a44e427ca37ae7505e2072af4e02c42f76_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:b3ad6fa1de658f3a40c8b183ab501ebc66b359d8cc01439d4215aa52769df213_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:bfde9ebea1fcd27b6d104d5f67db62e870878f9517ccbec2f649dd2c1af4a073_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:08fed161d59299881ff7a54db859feaf8ed7bdb8238d6cf12628ccb73575665e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:09436fe2649ca384b1bc1fd8f736fb1d71392733310e66758ed9f289e00471f9_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:3b83670e1c0e9d1f5b76bd7b75d77072bc6208646bc2201bd0bd200dbc59e34a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:927146f966e4c5c2908d29d8ab45a8f3071dbd5ebd9cf0424460a23f814a72a7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:38a3bc59511133cae56827eba879e7c82c5a974bf1f16b6e8d95e1f79821e669_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:3fa04db82e3ce6169270db0ce29107b69d8e044e0a1ab13a2bf1050b8c26d087_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:6041a918713d4464c73560b68c294a12d33f297a980d2f9d0e0cc8c300a96f24_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:98bd72ba69bdfb3070d87b3edcbd7050579a514b72cfd67c2926541ba52dbaf7_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:938abc970731c2eeda8e2b7b73e96d4dfcbf7587330c7b7e52117a577700e426_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:a0876a25ce85d7d4616212813f012422826f152b8d71065e75cd9c3e23034d8a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:c77077a0cca835a503a6529c89ab19c4027f949d361afdf8a5a259e1e87b0d55_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:d5bbf3fe886f27cdc27363dcb175e004487d9c8f36de4f1f8516fbeda3a95224_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:0f5d8cae3ba4ea4fcdc5fb9d08f797d576bc225b92af66f193bd4b1324cda4b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:2d3588825f8a714fa59b1648d0934d064165e333f322f7f31f01f07b940d42d9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:68aa571827f5331f1d5a3bd0c60ad441a18877ba11921aff2633940236bafcd4_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:9b80c9c61d4befefa7f6a65ae8c001ce7e343a1e4f251e5ebe025625d9511730_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:9b2c24401a91903f023096d2b641aa977acff423eb6770a8e4c4a81aecfd4e62_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:9d74585acc098c13f3e9dac5ae7f5ef337fa82bd7119d7f1849c5f8a50e84907_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:a6ee95d0ed82bddef084684d11fa770bd646d9be9bc65b3bc386d7c58b33975c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:f7b8654eb8bf675c8c26f0ad395d790f990308d3ad6683bb61b484c92073bbac_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:2a598e7fd07db27100d9a53a328ac9a0535865883bddd1373f4f1f2705068d2f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:4f8f0b02d0969753e156226a998d442746c238a2a50ea606a49ca0cf695b8925_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:63c02348faa7d4e26e35c69aef5453613dd607a26116823b931b89fe5311e181_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:ae224866f0085d2c00ab18a28d2aed076e455731903989a49a544abf49950d1f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:3723b1d5c74f37cba219e203fd2026a718d4821595cb505ec6626684695da65b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:562291f52b6bce98ec8795856b808545c4fe30047b54544c7f6c2ab4678480ff_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:e6dfac9bc3e467e141a425944782f5087ed967ac4d02d8d47442e3d61ba5b882_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:f683186c2cc8be9ec09b8efdec66d6b8b1f991c7f7b9fd398dc7c3f9ab8b3079_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:2471edd63a94473c68cf37ee50de643e40003f2c5bba84063c154e4888a7f0bd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:7cef49d68df5d8efe52061a18920e07e6c7efa3016c0cea7d1747e67851f254a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:d912383405599032acffbad22bc154f63a87dd429ba882fd7a94cb82fe650d8e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:f3034211e16de48af540efe4ee460395dba0a4a544fa4f277a12840a25df1730_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:181d1decb2f16fcf6f5938027ed346aca29126687bbe6cdcc601c25087f70d11_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:ab5e4d27e23448d99a37b8c05442bb1254083cdc4ff325e721d97d80ec27346c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:ac172243d158e126594f28317e0cfb37dc1790c9f2121e95fe52506b5e05fc91_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:fd96b6284d270effa0f838d960ea4218b72b54c4718513eb523658f2f4972682_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:c59d9cd479c62730eda5d482fb2f4e9fbc17a90a5a2861b130aafe1f3a27a333_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:e547f672b14b6e8fc2ffd300b150aedbd3f6b6b36ddcad612f7c992a936a7c82_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:ead1263d538974c48790c65e44cd9cab07a62c2893b2eeb250174e7cf58d7f9d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:ed0457a57c7b39b79fb308176f45ffe678938b25fbb8c15de2cedbe54b916f64_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:9847a5752ec77e17861dcdac5546ee5c53679c80c3569609b21d9080ee3b7ef3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:d3c823e61a0682ddc85e576e86234e580992886de471035630f9c89bbad6ebb7_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:ded425ed0af88a1411a06e5191aee25c4c59f1de85b041eba95c9997686cf09e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:ee63f59942f9df04e95fc4266f0d194cd62a7ca08dd5478283884d0ab6003da7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:724377cabaa284a5197e7505a7150c89631c2f2bcc629e074c7c0be18abd8e6f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:cbf797c9e93413540b20ebee9191375ddd8185ef22dc8c9e23cc3a4c015abaf7_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:d7609d62a801cf07ef639abcd4f193b2d68967fadebbfddf2349003d7e9eaa44_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:f61fe90362f793225591eb7e2a86d5cdc6fb35aa087e9b6a6218a42b1c1d945d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:1c4de9460688800b62bad6fb13653ef4b52bf215e4d41674291193e9b8e71b24_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:4f1e59610b2fbedc56f425b3fbd8f16c9ea6ea96025f18a404fe48f6a49bdc1e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:ab0d28306dd6daa03af79bdc2ea650e59a50a03317987c4cdd0d1ee70f95b597_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:b700a8bb7ea6e4253afb8bcf94e5ad086349980ca0716a87817724d3da3fdce1_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4015f46d2172db26a348635e2e8cbd4bbcdbbaa56a4b12c232676a3d0f5bbee2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4169252c61ec70b91b10c750d5f9ecd53f5c3c906766bba9103afbac3c3f9edf_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4ab72a192553c21de76754f06fe38cf443e686e4b4edc2aa2ceb2b6b9d95bb6c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:579ef0925c6f56ed48f22121767189431bef6c4eaa72b2648a1b91488357a51d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:2b796bf55ecf7a14d1c87d829a2b20d998fc2943686373105b0a50f5053ef836_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:7e960b59f64547f7e9602b7c066a51ab52aba929726aec2bacdf486a9d4d28fd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:a43e430a2ec0b86fb6ade361677be298b4e27444388a9bca35ddafbf9c77277c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:d2394b121256985e5ca322aea77bb0bf999ba2d7a6f1627e62bbc125c475dbbd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:1868e2ea03d063b4cd64601cb0aaf5c9ea7f55e83eba2e2d4dcf6f830efeafc7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:4bfbf0bdc882979bc94d85a4aeff8caa0ec7887aec7412e32ae1442811325d06_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:844e3d69d3c26914e02612466021592a876e6e2dd6cf77084723a70f567ba0e2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:bbe04eb8fd197f15875f498e3c18b9a7a445380efb5f696422d79df99a34a881_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:2c9f9b47c01c5e5e017c583c6a09c5c52f40ef88acf789689265cb31ef328fb8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:7b5e883efde312c1571c4825b523ff04ab57af6a9f4162a36b80b973f9602c46_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:d896dd89fb924da246fc729041d9debc019d8a4210cfd3de8883834e429cca10_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:ede3e22d4e4de49789622149dec23beaa7e0569a3715ac2262929df543e05bc3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:273a393b8c62fbc4edb4bf4033c47d8b52bda56fc9cafa289d9513210840815b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:71f1b590785ce7f4577ecd687dbab9bc3c5931c568a3108eb84279c7aa892046_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:d1e1b4310eb64891c9456be7c34547bf36b0aafdeb471a49f0892d7eaf8f41f4_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:e0a7514406c7ffae080db6d4db3bbf7b77a606ea4632bf09f8301ce1d3739bb5_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:2a4c6c061d154ed9c74707a7a2e2390fde2a150f36197386c3e49c0612d345b2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:6ffcc051c955e198c6d96b59bda0ef26b5124ebbdef5357d36a84534f2c7097c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:c9258bf58373f9c6859789c8ec272cd7d702c37e063fc2ee53c66d296e7ee3d0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:d83c6bb4f2a91d2c4de3ffbf4aa8ceecb695f8491ba7586d55275c62cd1931e6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:67637c5cba3eca1597885823c6e44c13db445d0ef38751eb8364b69dbf07caac_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:68fb5c2a3c8a0d5e6bbcf2c5568969f6b13e72006d4d54bc5c57cd9a032d1bf6_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:9f5fa40c88b0f5d1ae3634632240817a91f4575f8eae9c005b8e35a55cf38003_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:fcbcee9fc7e0bbf5775a33ae9b7e3d7e48a90e2aa1cb85605e05612b6e4d4e30_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:0c165bb93ce933c7f9998a615908bfcca0b4eb38e32e24a1c823e63791b7604b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:42aa392f82bdc45a3b857d1ed44e224ddfd14db1e3dcbb74dcc850ac0540e964_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:9dcd0c0ecf1523bf05bd296edbecd85841b2753dee7a5c9df32437f9a8e31471_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:c5505c462e6b2c04a6e14bc1e22dfc42dc8adea8f6eaf0615cd58b1973b7d62e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:1a93df314c31f10da7b1345fab07b15b846e28865764178e34124f84dc967152_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:34343f81973c3fbdd8630c32d0fad597745ea10f960ea64236408e58e0f10e14_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:7b3635784ebfb6343a73c9fa6de7bea57b3aacce1c49a0f7f250a471f7b897e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:f0a7fade2853193429bab16922b2e3bbe426e14632423d6550ff7dfb66d42827_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:94950d339fa382d6911f12fc23dcaf2cdb2854c4cab654f6058f5bf0df1bb371_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:bcfbd2284cbeeba5a835aaf5a5590ddd8156bd881ca24fd0fe1465fade1f84c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:bd739ced163053224e5b0ea2f3cd577481c6b6c1162cc0fbc186f1716b4a1fbd_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:d40496f114898985cde3860b9664c34d8c32de85e4d3d846df91a6ba27a2e99c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:3f7cbe7605595d712e14d9a17717fafc6c6e334f2ad3e821c34947ec78411046_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:96775900ea90e57487da6afe59d058b33cb977a0247a1bbeb1bd07bed2816398_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:caa6b121538e074312314d9888d9b423bd225aefa4f25eb145893b9fc548c0ad_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:e59c90cfe8160b28f9d2aa9e59b1d04d742df44d2195210ebc1946ee3cb78b6f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:10c95e5c55ccc1a04e8d2ac28bd1afd3b9bb9a7e9e2a5e3e8efb301421539980_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:60a310d4464b4817845703d14e95729321b883fbfc79fbf2dd8d514bb3c675e9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:70e6c14d72f14d25a90f44043932fbd3f824b30e8ad4b36307100726b24d9c06_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:784129cf69b3bf77a907fe909fd73a2a4d0fbd947fe0037e47aa1d62c6ffcf0b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:26e58654cdd092cb812207cb4473f5f5988ebd708d95c34152c2e8c124f7297d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:40e5d9634aa7469df8247758961d486cfac3e7d7f0b59184e11ed5571b46bf40_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:5b59faed336de07965755c893cb9d0ffc52ec90f61cc8c54487f6c0cac53322e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:b59aea0c9e859025988b0f0c9b6e7748c4acf6d0b4cee35f3fabb7b84feb598b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:2368703206d833e4cb73b7e8750efb9997633a6f9accbf032426bcfcae4c00d9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:80b543b207e724e880ff932c514fe9c6a3925bfede1c31863531e4e69d050d40_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:82405a9a5715db5442dfa3d3f594888bd7b2f9c778d68357a7d8884f5ea46915_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:8fd2bda7b8d94ededf7973f76a159dd61105776a05d961ac9cfd9bee0a988213_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:4def845360282dad99181b96bcd834b4863eab39e246fda2476234c561c652ec_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:b67aec868b6366cf04f3980b15588e1a0af5c88b2248958bc3884261ad390ca0_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:ceacf3491ebec6f5613011fe8d36b66d00f8b3697832615a4d7024e23125085e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:d9f6a520b818dcccbedb94720b5979ef1cdec2e02491c76e3decb3ee18f2085d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:0eea35a3af36d08db945a70c387cc38eb326f75b4ed322f09d8c91863cfe5d02_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:22c48db227cd6f2ecec746674e31ac7f5a983a418679fc91678a0aa0ebb49496_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:8e8d249c39d562f819d347f12610dda7f5c01215c41101bfd5dca008e04edf6e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:f8adb8dd40a204bacb51cd423803097a514ec8e8e9f52209e02ecf14cad622bb_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:1f7ed606f69a74943aedb0a956e5a71019f8a1ab53cd3f8166be0f55a69809b9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:4841076eb82f1f1748345556ff6c4e02a17f1f63c661e375eaba720291cbaf6a_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:a79ac7dcae109aa526e2a218327dd8c5dba2b924fc27447a07199b3b2f2f67b3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:dee022821852f2d5ebdbbd9f09c9b97997a905061dadb3f78433291d462d49a7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:1a746b16f362a83f399255d925b322b3440b3d89ae4d64ab7962db3d82ee91a1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:417a31bec11c3ffb70f40fa955069d5160dc12e2426b67e1d2e35ae3f7fa06df_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:89a3cb77fdb3dcbddfe96785a9ba3fa2b6132098fce028f859663b31fcf77a34_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:b1ba0b4cd8f515895af7b9f797f6ea5b661f7254ce019ce5115375639dcd06e9_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:0827c96b922ca185b7a7321a4f504e8a5dc01aadafcfd20443060546981339a8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:b5b732dfc0ce3d740781eda9a72e1542c7a30b28b39d2be6e0ba470af06a9680_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:f74081e5eb03227ccff5717a7d139ceee6c5b610625ff7b99e639a2652bf7663_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:f80976ae4fc332600e1d8e1d70b42c038ea05d76ac2c5b1d7d0cbaddbe89140a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:4029ece83812237ce8b1d394252e9561012e8cd94af40680a90284fbea1bc32a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:63a3465a7539a8a286c846a84d63e3feca9a11758e4c0d697889b0bdeb26a25c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:81c227d7c7599b0d4357ccdc3b567f31b67bbd1198c9e7ddba1864c299bad11b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:f392bde8ce22aca058d77132cc709440442931679dbe725c52516f1cdc97b38d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:4825fab15300bc911e0b2b5c4ae342004bfcff95fa64af0fdb1085fadd132aa2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:68f879679911c2ca828551b900eca1c2f4e8caec7312fbba502fabc4778d1832_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:b4188ac728c746769ef6586663dd6d7d07db984b083397d2c76fe847ef22ea60_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:f2805fc1e6f37bc8acc3187ea8712d38f32151d584c10d5996c0ad7076cd638b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:1c943edcf23df14f254e4aabb93cbc1665bbc7902076b3f04bd80edd2fe324db_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:84c5d2b24caf68c3a6a6d078bd9f66de9fb88e769f6c09c11a248693d463ac21_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:907d6e24922d6d372bceb21ad830c254c6a9c9d6be0ac4f4edf22c236437a09d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:923a3ee0e3d5b7341b96826e465e6856855f2801dbaf381d139a632c77bda1c5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:285d2e2d103b458f0603435aedb4d779d85e48fed2267845b798f4a04a0df4c7_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:44981f5fcbc9086470143fae6e21a5de3baad2258d9f8c81accecb2faad6b2a2_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:5ba248d0bc8fcde70e210319bb962f4043e5e8ab8a5625c8f8f30ec96d47c6b7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:f681cdac28ee9ff6375fb39d7b7d12917a06043db44c16e8f84bdb9e09e7b5e7_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:2057531884d897574fc0648e5d3cf21c4549738ac5f35d8095f400cdb80049cc_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:8be0e50a132a2c974893f36b51f3f40b6d6e1f913ae0f9ee6319ef0d5ec455b7_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:a2edc5d233d1547fa2e1d01f29d8a914930735f7098289892430ba9a17d20ab7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:c81c7aeb3dd05801e279a9fcc8d6c3baf00a2ccc08eab53f8acc8bd4d2d129c4_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:25e17bf203568420587cf5907e84e4167afab84dfce549c91bea99e70290b742_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:277f4e8ac5fc292b9f0f2d123f924c6b5cbc0a2eeba3c87a0e61c5ee2399aaa9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:76766b77ed53513cd254195b25d205ab6964522816e1e3662800e38a105abdf2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:c7ace45f7cb86055e2ba18e27a660f6aa6cb4eff497204294875d5dd1d63cce3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:3780b1bc80ab7ebc3cfed06ce69346d589dc07b53cea65ad3ed92cc912284300_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:681b356709778083448892513b4559f693e002bfda897a57e2d065f736a902b5_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:d110b52ce8ea022b3d35e7c4b0ce3b646f30513cf8abb55327132565ea4a6a87_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:f076ab59f3abe061e4553a61f98a144a472297dba5ed924ca887f130e9372da9_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `crypto/x509` package of `golang`. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name (SAN) entries. The certificate verification process, specifically the `VerifyHostname` function, incurs excessive computational overhead due to repeated string operations when processing these entries. This can lead to a significant performance degradation or unresponsiveness of systems validating such certificates.
7.5 (High)
Affected products
Fixed
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:1a93df314c31f10da7b1345fab07b15b846e28865764178e34124f84dc967152_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:34343f81973c3fbdd8630c32d0fad597745ea10f960ea64236408e58e0f10e14_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:7b3635784ebfb6343a73c9fa6de7bea57b3aacce1c49a0f7f250a471f7b897e3_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:f0a7fade2853193429bab16922b2e3bbe426e14632423d6550ff7dfb66d42827_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:2368703206d833e4cb73b7e8750efb9997633a6f9accbf032426bcfcae4c00d9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:80b543b207e724e880ff932c514fe9c6a3925bfede1c31863531e4e69d050d40_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:82405a9a5715db5442dfa3d3f594888bd7b2f9c778d68357a7d8884f5ea46915_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:8fd2bda7b8d94ededf7973f76a159dd61105776a05d961ac9cfd9bee0a988213_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:03adc6277e2bf409391941c6f4508154abc38a0c043139978754f6d4fd32c5a8_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:7e100af30ed11325cb2cbee02af09306e53df5db5847f2a4b733cd307e3cd623_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:91b474b4808b18c279c9f8eb3be8e6d1e1e47cf2b5f9553acd901c74b20bddbc_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:d56f884a9700a4f193d6f3db1895bd54745ec77e02ead3d43bd6e4fe04a2969e_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
164 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:31bd91156f49687d2efffd3be971d9ee0e16abb420b8e8b958caa88b97770020_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:a6315866c67ba350665f5a92f960a5a44e427ca37ae7505e2072af4e02c42f76_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:b3ad6fa1de658f3a40c8b183ab501ebc66b359d8cc01439d4215aa52769df213_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:bfde9ebea1fcd27b6d104d5f67db62e870878f9517ccbec2f649dd2c1af4a073_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:08fed161d59299881ff7a54db859feaf8ed7bdb8238d6cf12628ccb73575665e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:09436fe2649ca384b1bc1fd8f736fb1d71392733310e66758ed9f289e00471f9_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:3b83670e1c0e9d1f5b76bd7b75d77072bc6208646bc2201bd0bd200dbc59e34a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:927146f966e4c5c2908d29d8ab45a8f3071dbd5ebd9cf0424460a23f814a72a7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:38a3bc59511133cae56827eba879e7c82c5a974bf1f16b6e8d95e1f79821e669_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:3fa04db82e3ce6169270db0ce29107b69d8e044e0a1ab13a2bf1050b8c26d087_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:6041a918713d4464c73560b68c294a12d33f297a980d2f9d0e0cc8c300a96f24_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:98bd72ba69bdfb3070d87b3edcbd7050579a514b72cfd67c2926541ba52dbaf7_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:938abc970731c2eeda8e2b7b73e96d4dfcbf7587330c7b7e52117a577700e426_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:a0876a25ce85d7d4616212813f012422826f152b8d71065e75cd9c3e23034d8a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:c77077a0cca835a503a6529c89ab19c4027f949d361afdf8a5a259e1e87b0d55_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:d5bbf3fe886f27cdc27363dcb175e004487d9c8f36de4f1f8516fbeda3a95224_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:0f5d8cae3ba4ea4fcdc5fb9d08f797d576bc225b92af66f193bd4b1324cda4b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:2d3588825f8a714fa59b1648d0934d064165e333f322f7f31f01f07b940d42d9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:68aa571827f5331f1d5a3bd0c60ad441a18877ba11921aff2633940236bafcd4_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:9b80c9c61d4befefa7f6a65ae8c001ce7e343a1e4f251e5ebe025625d9511730_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:9b2c24401a91903f023096d2b641aa977acff423eb6770a8e4c4a81aecfd4e62_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:9d74585acc098c13f3e9dac5ae7f5ef337fa82bd7119d7f1849c5f8a50e84907_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:a6ee95d0ed82bddef084684d11fa770bd646d9be9bc65b3bc386d7c58b33975c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:f7b8654eb8bf675c8c26f0ad395d790f990308d3ad6683bb61b484c92073bbac_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:2a598e7fd07db27100d9a53a328ac9a0535865883bddd1373f4f1f2705068d2f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:4f8f0b02d0969753e156226a998d442746c238a2a50ea606a49ca0cf695b8925_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:63c02348faa7d4e26e35c69aef5453613dd607a26116823b931b89fe5311e181_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:ae224866f0085d2c00ab18a28d2aed076e455731903989a49a544abf49950d1f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:0a90a13f006ef0b271079b728ef6d54081f36ae19b6d0e9ab4dc24ea52a30fad_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:3a53629645832974a883002e53198df7c28e59dd6d1df99bf321b52d0ef84b61_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:879315f438ca43abb607d6c97f8fbd4ca2d38209b142e2d97cc0598740273252_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:c6c4d01f5fcee6cad3fc870cace92f45000624760e6e93654bb5e814afeed7bb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:50f7647620c78fd6b445379c8762f5e978113fe3552906376a24459263f27459_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:53e641f48ddc05c63da2e6bc24e9e4636a10de2c3599d8f5f78622bdebca07ca_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:57114b7a386c406715e342637558fab57afeef2e193517f99173a441f39401d5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:dcdcaa90f292f2d7ad3f10acbedfab9f7f22f3432c3156055f34760d9bf9429c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:3723b1d5c74f37cba219e203fd2026a718d4821595cb505ec6626684695da65b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:562291f52b6bce98ec8795856b808545c4fe30047b54544c7f6c2ab4678480ff_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:e6dfac9bc3e467e141a425944782f5087ed967ac4d02d8d47442e3d61ba5b882_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:f683186c2cc8be9ec09b8efdec66d6b8b1f991c7f7b9fd398dc7c3f9ab8b3079_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:2471edd63a94473c68cf37ee50de643e40003f2c5bba84063c154e4888a7f0bd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:7cef49d68df5d8efe52061a18920e07e6c7efa3016c0cea7d1747e67851f254a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:d912383405599032acffbad22bc154f63a87dd429ba882fd7a94cb82fe650d8e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:f3034211e16de48af540efe4ee460395dba0a4a544fa4f277a12840a25df1730_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:181d1decb2f16fcf6f5938027ed346aca29126687bbe6cdcc601c25087f70d11_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:ab5e4d27e23448d99a37b8c05442bb1254083cdc4ff325e721d97d80ec27346c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:ac172243d158e126594f28317e0cfb37dc1790c9f2121e95fe52506b5e05fc91_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:fd96b6284d270effa0f838d960ea4218b72b54c4718513eb523658f2f4972682_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:c59d9cd479c62730eda5d482fb2f4e9fbc17a90a5a2861b130aafe1f3a27a333_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:e547f672b14b6e8fc2ffd300b150aedbd3f6b6b36ddcad612f7c992a936a7c82_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:ead1263d538974c48790c65e44cd9cab07a62c2893b2eeb250174e7cf58d7f9d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:ed0457a57c7b39b79fb308176f45ffe678938b25fbb8c15de2cedbe54b916f64_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:9847a5752ec77e17861dcdac5546ee5c53679c80c3569609b21d9080ee3b7ef3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:d3c823e61a0682ddc85e576e86234e580992886de471035630f9c89bbad6ebb7_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:ded425ed0af88a1411a06e5191aee25c4c59f1de85b041eba95c9997686cf09e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:ee63f59942f9df04e95fc4266f0d194cd62a7ca08dd5478283884d0ab6003da7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:724377cabaa284a5197e7505a7150c89631c2f2bcc629e074c7c0be18abd8e6f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:cbf797c9e93413540b20ebee9191375ddd8185ef22dc8c9e23cc3a4c015abaf7_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:d7609d62a801cf07ef639abcd4f193b2d68967fadebbfddf2349003d7e9eaa44_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:f61fe90362f793225591eb7e2a86d5cdc6fb35aa087e9b6a6218a42b1c1d945d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:1c4de9460688800b62bad6fb13653ef4b52bf215e4d41674291193e9b8e71b24_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:4f1e59610b2fbedc56f425b3fbd8f16c9ea6ea96025f18a404fe48f6a49bdc1e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:ab0d28306dd6daa03af79bdc2ea650e59a50a03317987c4cdd0d1ee70f95b597_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:b700a8bb7ea6e4253afb8bcf94e5ad086349980ca0716a87817724d3da3fdce1_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4015f46d2172db26a348635e2e8cbd4bbcdbbaa56a4b12c232676a3d0f5bbee2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4169252c61ec70b91b10c750d5f9ecd53f5c3c906766bba9103afbac3c3f9edf_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4ab72a192553c21de76754f06fe38cf443e686e4b4edc2aa2ceb2b6b9d95bb6c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:579ef0925c6f56ed48f22121767189431bef6c4eaa72b2648a1b91488357a51d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:2b796bf55ecf7a14d1c87d829a2b20d998fc2943686373105b0a50f5053ef836_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:7e960b59f64547f7e9602b7c066a51ab52aba929726aec2bacdf486a9d4d28fd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:a43e430a2ec0b86fb6ade361677be298b4e27444388a9bca35ddafbf9c77277c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:d2394b121256985e5ca322aea77bb0bf999ba2d7a6f1627e62bbc125c475dbbd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:1868e2ea03d063b4cd64601cb0aaf5c9ea7f55e83eba2e2d4dcf6f830efeafc7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:4bfbf0bdc882979bc94d85a4aeff8caa0ec7887aec7412e32ae1442811325d06_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:844e3d69d3c26914e02612466021592a876e6e2dd6cf77084723a70f567ba0e2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:bbe04eb8fd197f15875f498e3c18b9a7a445380efb5f696422d79df99a34a881_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:2c9f9b47c01c5e5e017c583c6a09c5c52f40ef88acf789689265cb31ef328fb8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:7b5e883efde312c1571c4825b523ff04ab57af6a9f4162a36b80b973f9602c46_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:d896dd89fb924da246fc729041d9debc019d8a4210cfd3de8883834e429cca10_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:ede3e22d4e4de49789622149dec23beaa7e0569a3715ac2262929df543e05bc3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:273a393b8c62fbc4edb4bf4033c47d8b52bda56fc9cafa289d9513210840815b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:71f1b590785ce7f4577ecd687dbab9bc3c5931c568a3108eb84279c7aa892046_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:d1e1b4310eb64891c9456be7c34547bf36b0aafdeb471a49f0892d7eaf8f41f4_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:e0a7514406c7ffae080db6d4db3bbf7b77a606ea4632bf09f8301ce1d3739bb5_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:2a4c6c061d154ed9c74707a7a2e2390fde2a150f36197386c3e49c0612d345b2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:6ffcc051c955e198c6d96b59bda0ef26b5124ebbdef5357d36a84534f2c7097c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:c9258bf58373f9c6859789c8ec272cd7d702c37e063fc2ee53c66d296e7ee3d0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:d83c6bb4f2a91d2c4de3ffbf4aa8ceecb695f8491ba7586d55275c62cd1931e6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:67637c5cba3eca1597885823c6e44c13db445d0ef38751eb8364b69dbf07caac_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:68fb5c2a3c8a0d5e6bbcf2c5568969f6b13e72006d4d54bc5c57cd9a032d1bf6_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:9f5fa40c88b0f5d1ae3634632240817a91f4575f8eae9c005b8e35a55cf38003_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:fcbcee9fc7e0bbf5775a33ae9b7e3d7e48a90e2aa1cb85605e05612b6e4d4e30_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:0c165bb93ce933c7f9998a615908bfcca0b4eb38e32e24a1c823e63791b7604b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:42aa392f82bdc45a3b857d1ed44e224ddfd14db1e3dcbb74dcc850ac0540e964_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:9dcd0c0ecf1523bf05bd296edbecd85841b2753dee7a5c9df32437f9a8e31471_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:c5505c462e6b2c04a6e14bc1e22dfc42dc8adea8f6eaf0615cd58b1973b7d62e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:94950d339fa382d6911f12fc23dcaf2cdb2854c4cab654f6058f5bf0df1bb371_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:bcfbd2284cbeeba5a835aaf5a5590ddd8156bd881ca24fd0fe1465fade1f84c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:bd739ced163053224e5b0ea2f3cd577481c6b6c1162cc0fbc186f1716b4a1fbd_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:d40496f114898985cde3860b9664c34d8c32de85e4d3d846df91a6ba27a2e99c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:3f7cbe7605595d712e14d9a17717fafc6c6e334f2ad3e821c34947ec78411046_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:96775900ea90e57487da6afe59d058b33cb977a0247a1bbeb1bd07bed2816398_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:caa6b121538e074312314d9888d9b423bd225aefa4f25eb145893b9fc548c0ad_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:e59c90cfe8160b28f9d2aa9e59b1d04d742df44d2195210ebc1946ee3cb78b6f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:10c95e5c55ccc1a04e8d2ac28bd1afd3b9bb9a7e9e2a5e3e8efb301421539980_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:60a310d4464b4817845703d14e95729321b883fbfc79fbf2dd8d514bb3c675e9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:70e6c14d72f14d25a90f44043932fbd3f824b30e8ad4b36307100726b24d9c06_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:784129cf69b3bf77a907fe909fd73a2a4d0fbd947fe0037e47aa1d62c6ffcf0b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:26e58654cdd092cb812207cb4473f5f5988ebd708d95c34152c2e8c124f7297d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:40e5d9634aa7469df8247758961d486cfac3e7d7f0b59184e11ed5571b46bf40_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:5b59faed336de07965755c893cb9d0ffc52ec90f61cc8c54487f6c0cac53322e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:b59aea0c9e859025988b0f0c9b6e7748c4acf6d0b4cee35f3fabb7b84feb598b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:4def845360282dad99181b96bcd834b4863eab39e246fda2476234c561c652ec_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:b67aec868b6366cf04f3980b15588e1a0af5c88b2248958bc3884261ad390ca0_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:ceacf3491ebec6f5613011fe8d36b66d00f8b3697832615a4d7024e23125085e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:d9f6a520b818dcccbedb94720b5979ef1cdec2e02491c76e3decb3ee18f2085d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:3e6519c0c789b946eb1b811867c41c4f204440bad5734760c0aca4e3fc602e5a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:95684cfaf4d5d91bc9fe8cfbf64a6f113e944e3f0c102d27851be5232eca0dbb_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:9cb20990af88287dd8a27de4e4ef12eb244577a1844482d26107359c6efe8efa_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:a69ebb0c7e817d44cfabd86ad13ef4cc94a8bf5b6e8a607d17b197603d64a224_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:0eea35a3af36d08db945a70c387cc38eb326f75b4ed322f09d8c91863cfe5d02_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:22c48db227cd6f2ecec746674e31ac7f5a983a418679fc91678a0aa0ebb49496_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:8e8d249c39d562f819d347f12610dda7f5c01215c41101bfd5dca008e04edf6e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:f8adb8dd40a204bacb51cd423803097a514ec8e8e9f52209e02ecf14cad622bb_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:1f7ed606f69a74943aedb0a956e5a71019f8a1ab53cd3f8166be0f55a69809b9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:4841076eb82f1f1748345556ff6c4e02a17f1f63c661e375eaba720291cbaf6a_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:a79ac7dcae109aa526e2a218327dd8c5dba2b924fc27447a07199b3b2f2f67b3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:dee022821852f2d5ebdbbd9f09c9b97997a905061dadb3f78433291d462d49a7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:1a746b16f362a83f399255d925b322b3440b3d89ae4d64ab7962db3d82ee91a1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:417a31bec11c3ffb70f40fa955069d5160dc12e2426b67e1d2e35ae3f7fa06df_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:89a3cb77fdb3dcbddfe96785a9ba3fa2b6132098fce028f859663b31fcf77a34_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:b1ba0b4cd8f515895af7b9f797f6ea5b661f7254ce019ce5115375639dcd06e9_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:0827c96b922ca185b7a7321a4f504e8a5dc01aadafcfd20443060546981339a8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:b5b732dfc0ce3d740781eda9a72e1542c7a30b28b39d2be6e0ba470af06a9680_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:f74081e5eb03227ccff5717a7d139ceee6c5b610625ff7b99e639a2652bf7663_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:f80976ae4fc332600e1d8e1d70b42c038ea05d76ac2c5b1d7d0cbaddbe89140a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:4029ece83812237ce8b1d394252e9561012e8cd94af40680a90284fbea1bc32a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:63a3465a7539a8a286c846a84d63e3feca9a11758e4c0d697889b0bdeb26a25c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:81c227d7c7599b0d4357ccdc3b567f31b67bbd1198c9e7ddba1864c299bad11b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:f392bde8ce22aca058d77132cc709440442931679dbe725c52516f1cdc97b38d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:4825fab15300bc911e0b2b5c4ae342004bfcff95fa64af0fdb1085fadd132aa2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:68f879679911c2ca828551b900eca1c2f4e8caec7312fbba502fabc4778d1832_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:b4188ac728c746769ef6586663dd6d7d07db984b083397d2c76fe847ef22ea60_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:f2805fc1e6f37bc8acc3187ea8712d38f32151d584c10d5996c0ad7076cd638b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:1c943edcf23df14f254e4aabb93cbc1665bbc7902076b3f04bd80edd2fe324db_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:84c5d2b24caf68c3a6a6d078bd9f66de9fb88e769f6c09c11a248693d463ac21_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:907d6e24922d6d372bceb21ad830c254c6a9c9d6be0ac4f4edf22c236437a09d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:923a3ee0e3d5b7341b96826e465e6856855f2801dbaf381d139a632c77bda1c5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:285d2e2d103b458f0603435aedb4d779d85e48fed2267845b798f4a04a0df4c7_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:44981f5fcbc9086470143fae6e21a5de3baad2258d9f8c81accecb2faad6b2a2_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:5ba248d0bc8fcde70e210319bb962f4043e5e8ab8a5625c8f8f30ec96d47c6b7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:f681cdac28ee9ff6375fb39d7b7d12917a06043db44c16e8f84bdb9e09e7b5e7_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:2057531884d897574fc0648e5d3cf21c4549738ac5f35d8095f400cdb80049cc_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:8be0e50a132a2c974893f36b51f3f40b6d6e1f913ae0f9ee6319ef0d5ec455b7_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:a2edc5d233d1547fa2e1d01f29d8a914930735f7098289892430ba9a17d20ab7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:c81c7aeb3dd05801e279a9fcc8d6c3baf00a2ccc08eab53f8acc8bd4d2d129c4_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:25e17bf203568420587cf5907e84e4167afab84dfce549c91bea99e70290b742_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:277f4e8ac5fc292b9f0f2d123f924c6b5cbc0a2eeba3c87a0e61c5ee2399aaa9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:76766b77ed53513cd254195b25d205ab6964522816e1e3662800e38a105abdf2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:c7ace45f7cb86055e2ba18e27a660f6aa6cb4eff497204294875d5dd1d63cce3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:3780b1bc80ab7ebc3cfed06ce69346d589dc07b53cea65ad3ed92cc912284300_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:681b356709778083448892513b4559f693e002bfda897a57e2d065f736a902b5_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:d110b52ce8ea022b3d35e7c4b0ce3b646f30513cf8abb55327132565ea4a6a87_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:f076ab59f3abe061e4553a61f98a144a472297dba5ed924ca887f130e9372da9_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.
8.2 (High)
Affected products
Fixed
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:26e58654cdd092cb812207cb4473f5f5988ebd708d95c34152c2e8c124f7297d_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:40e5d9634aa7469df8247758961d486cfac3e7d7f0b59184e11ed5571b46bf40_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:5b59faed336de07965755c893cb9d0ffc52ec90f61cc8c54487f6c0cac53322e_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:b59aea0c9e859025988b0f0c9b6e7748c4acf6d0b4cee35f3fabb7b84feb598b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:0eea35a3af36d08db945a70c387cc38eb326f75b4ed322f09d8c91863cfe5d02_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:22c48db227cd6f2ecec746674e31ac7f5a983a418679fc91678a0aa0ebb49496_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:8e8d249c39d562f819d347f12610dda7f5c01215c41101bfd5dca008e04edf6e_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:f8adb8dd40a204bacb51cd423803097a514ec8e8e9f52209e02ecf14cad622bb_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:03adc6277e2bf409391941c6f4508154abc38a0c043139978754f6d4fd32c5a8_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:7e100af30ed11325cb2cbee02af09306e53df5db5847f2a4b733cd307e3cd623_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:91b474b4808b18c279c9f8eb3be8e6d1e1e47cf2b5f9553acd901c74b20bddbc_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:d56f884a9700a4f193d6f3db1895bd54745ec77e02ead3d43bd6e4fe04a2969e_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
164 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:31bd91156f49687d2efffd3be971d9ee0e16abb420b8e8b958caa88b97770020_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:a6315866c67ba350665f5a92f960a5a44e427ca37ae7505e2072af4e02c42f76_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:b3ad6fa1de658f3a40c8b183ab501ebc66b359d8cc01439d4215aa52769df213_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:bfde9ebea1fcd27b6d104d5f67db62e870878f9517ccbec2f649dd2c1af4a073_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:08fed161d59299881ff7a54db859feaf8ed7bdb8238d6cf12628ccb73575665e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:09436fe2649ca384b1bc1fd8f736fb1d71392733310e66758ed9f289e00471f9_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:3b83670e1c0e9d1f5b76bd7b75d77072bc6208646bc2201bd0bd200dbc59e34a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:927146f966e4c5c2908d29d8ab45a8f3071dbd5ebd9cf0424460a23f814a72a7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:38a3bc59511133cae56827eba879e7c82c5a974bf1f16b6e8d95e1f79821e669_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:3fa04db82e3ce6169270db0ce29107b69d8e044e0a1ab13a2bf1050b8c26d087_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:6041a918713d4464c73560b68c294a12d33f297a980d2f9d0e0cc8c300a96f24_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:98bd72ba69bdfb3070d87b3edcbd7050579a514b72cfd67c2926541ba52dbaf7_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:938abc970731c2eeda8e2b7b73e96d4dfcbf7587330c7b7e52117a577700e426_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:a0876a25ce85d7d4616212813f012422826f152b8d71065e75cd9c3e23034d8a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:c77077a0cca835a503a6529c89ab19c4027f949d361afdf8a5a259e1e87b0d55_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:d5bbf3fe886f27cdc27363dcb175e004487d9c8f36de4f1f8516fbeda3a95224_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:0f5d8cae3ba4ea4fcdc5fb9d08f797d576bc225b92af66f193bd4b1324cda4b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:2d3588825f8a714fa59b1648d0934d064165e333f322f7f31f01f07b940d42d9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:68aa571827f5331f1d5a3bd0c60ad441a18877ba11921aff2633940236bafcd4_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:9b80c9c61d4befefa7f6a65ae8c001ce7e343a1e4f251e5ebe025625d9511730_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:9b2c24401a91903f023096d2b641aa977acff423eb6770a8e4c4a81aecfd4e62_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:9d74585acc098c13f3e9dac5ae7f5ef337fa82bd7119d7f1849c5f8a50e84907_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:a6ee95d0ed82bddef084684d11fa770bd646d9be9bc65b3bc386d7c58b33975c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:f7b8654eb8bf675c8c26f0ad395d790f990308d3ad6683bb61b484c92073bbac_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:2a598e7fd07db27100d9a53a328ac9a0535865883bddd1373f4f1f2705068d2f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:4f8f0b02d0969753e156226a998d442746c238a2a50ea606a49ca0cf695b8925_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:63c02348faa7d4e26e35c69aef5453613dd607a26116823b931b89fe5311e181_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:ae224866f0085d2c00ab18a28d2aed076e455731903989a49a544abf49950d1f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:0a90a13f006ef0b271079b728ef6d54081f36ae19b6d0e9ab4dc24ea52a30fad_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:3a53629645832974a883002e53198df7c28e59dd6d1df99bf321b52d0ef84b61_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:879315f438ca43abb607d6c97f8fbd4ca2d38209b142e2d97cc0598740273252_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:c6c4d01f5fcee6cad3fc870cace92f45000624760e6e93654bb5e814afeed7bb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:50f7647620c78fd6b445379c8762f5e978113fe3552906376a24459263f27459_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:53e641f48ddc05c63da2e6bc24e9e4636a10de2c3599d8f5f78622bdebca07ca_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:57114b7a386c406715e342637558fab57afeef2e193517f99173a441f39401d5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:dcdcaa90f292f2d7ad3f10acbedfab9f7f22f3432c3156055f34760d9bf9429c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:3723b1d5c74f37cba219e203fd2026a718d4821595cb505ec6626684695da65b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:562291f52b6bce98ec8795856b808545c4fe30047b54544c7f6c2ab4678480ff_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:e6dfac9bc3e467e141a425944782f5087ed967ac4d02d8d47442e3d61ba5b882_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:f683186c2cc8be9ec09b8efdec66d6b8b1f991c7f7b9fd398dc7c3f9ab8b3079_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:2471edd63a94473c68cf37ee50de643e40003f2c5bba84063c154e4888a7f0bd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:7cef49d68df5d8efe52061a18920e07e6c7efa3016c0cea7d1747e67851f254a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:d912383405599032acffbad22bc154f63a87dd429ba882fd7a94cb82fe650d8e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:f3034211e16de48af540efe4ee460395dba0a4a544fa4f277a12840a25df1730_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:181d1decb2f16fcf6f5938027ed346aca29126687bbe6cdcc601c25087f70d11_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:ab5e4d27e23448d99a37b8c05442bb1254083cdc4ff325e721d97d80ec27346c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:ac172243d158e126594f28317e0cfb37dc1790c9f2121e95fe52506b5e05fc91_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:fd96b6284d270effa0f838d960ea4218b72b54c4718513eb523658f2f4972682_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:c59d9cd479c62730eda5d482fb2f4e9fbc17a90a5a2861b130aafe1f3a27a333_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:e547f672b14b6e8fc2ffd300b150aedbd3f6b6b36ddcad612f7c992a936a7c82_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:ead1263d538974c48790c65e44cd9cab07a62c2893b2eeb250174e7cf58d7f9d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:ed0457a57c7b39b79fb308176f45ffe678938b25fbb8c15de2cedbe54b916f64_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:9847a5752ec77e17861dcdac5546ee5c53679c80c3569609b21d9080ee3b7ef3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:d3c823e61a0682ddc85e576e86234e580992886de471035630f9c89bbad6ebb7_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:ded425ed0af88a1411a06e5191aee25c4c59f1de85b041eba95c9997686cf09e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:ee63f59942f9df04e95fc4266f0d194cd62a7ca08dd5478283884d0ab6003da7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:724377cabaa284a5197e7505a7150c89631c2f2bcc629e074c7c0be18abd8e6f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:cbf797c9e93413540b20ebee9191375ddd8185ef22dc8c9e23cc3a4c015abaf7_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:d7609d62a801cf07ef639abcd4f193b2d68967fadebbfddf2349003d7e9eaa44_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:f61fe90362f793225591eb7e2a86d5cdc6fb35aa087e9b6a6218a42b1c1d945d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:1c4de9460688800b62bad6fb13653ef4b52bf215e4d41674291193e9b8e71b24_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:4f1e59610b2fbedc56f425b3fbd8f16c9ea6ea96025f18a404fe48f6a49bdc1e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:ab0d28306dd6daa03af79bdc2ea650e59a50a03317987c4cdd0d1ee70f95b597_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:b700a8bb7ea6e4253afb8bcf94e5ad086349980ca0716a87817724d3da3fdce1_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4015f46d2172db26a348635e2e8cbd4bbcdbbaa56a4b12c232676a3d0f5bbee2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4169252c61ec70b91b10c750d5f9ecd53f5c3c906766bba9103afbac3c3f9edf_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4ab72a192553c21de76754f06fe38cf443e686e4b4edc2aa2ceb2b6b9d95bb6c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:579ef0925c6f56ed48f22121767189431bef6c4eaa72b2648a1b91488357a51d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:2b796bf55ecf7a14d1c87d829a2b20d998fc2943686373105b0a50f5053ef836_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:7e960b59f64547f7e9602b7c066a51ab52aba929726aec2bacdf486a9d4d28fd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:a43e430a2ec0b86fb6ade361677be298b4e27444388a9bca35ddafbf9c77277c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:d2394b121256985e5ca322aea77bb0bf999ba2d7a6f1627e62bbc125c475dbbd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:1868e2ea03d063b4cd64601cb0aaf5c9ea7f55e83eba2e2d4dcf6f830efeafc7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:4bfbf0bdc882979bc94d85a4aeff8caa0ec7887aec7412e32ae1442811325d06_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:844e3d69d3c26914e02612466021592a876e6e2dd6cf77084723a70f567ba0e2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:bbe04eb8fd197f15875f498e3c18b9a7a445380efb5f696422d79df99a34a881_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:2c9f9b47c01c5e5e017c583c6a09c5c52f40ef88acf789689265cb31ef328fb8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:7b5e883efde312c1571c4825b523ff04ab57af6a9f4162a36b80b973f9602c46_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:d896dd89fb924da246fc729041d9debc019d8a4210cfd3de8883834e429cca10_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:ede3e22d4e4de49789622149dec23beaa7e0569a3715ac2262929df543e05bc3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:273a393b8c62fbc4edb4bf4033c47d8b52bda56fc9cafa289d9513210840815b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:71f1b590785ce7f4577ecd687dbab9bc3c5931c568a3108eb84279c7aa892046_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:d1e1b4310eb64891c9456be7c34547bf36b0aafdeb471a49f0892d7eaf8f41f4_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:e0a7514406c7ffae080db6d4db3bbf7b77a606ea4632bf09f8301ce1d3739bb5_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:2a4c6c061d154ed9c74707a7a2e2390fde2a150f36197386c3e49c0612d345b2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:6ffcc051c955e198c6d96b59bda0ef26b5124ebbdef5357d36a84534f2c7097c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:c9258bf58373f9c6859789c8ec272cd7d702c37e063fc2ee53c66d296e7ee3d0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:d83c6bb4f2a91d2c4de3ffbf4aa8ceecb695f8491ba7586d55275c62cd1931e6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:67637c5cba3eca1597885823c6e44c13db445d0ef38751eb8364b69dbf07caac_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:68fb5c2a3c8a0d5e6bbcf2c5568969f6b13e72006d4d54bc5c57cd9a032d1bf6_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:9f5fa40c88b0f5d1ae3634632240817a91f4575f8eae9c005b8e35a55cf38003_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:fcbcee9fc7e0bbf5775a33ae9b7e3d7e48a90e2aa1cb85605e05612b6e4d4e30_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:0c165bb93ce933c7f9998a615908bfcca0b4eb38e32e24a1c823e63791b7604b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:42aa392f82bdc45a3b857d1ed44e224ddfd14db1e3dcbb74dcc850ac0540e964_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:9dcd0c0ecf1523bf05bd296edbecd85841b2753dee7a5c9df32437f9a8e31471_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:c5505c462e6b2c04a6e14bc1e22dfc42dc8adea8f6eaf0615cd58b1973b7d62e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:1a93df314c31f10da7b1345fab07b15b846e28865764178e34124f84dc967152_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:34343f81973c3fbdd8630c32d0fad597745ea10f960ea64236408e58e0f10e14_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:7b3635784ebfb6343a73c9fa6de7bea57b3aacce1c49a0f7f250a471f7b897e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:f0a7fade2853193429bab16922b2e3bbe426e14632423d6550ff7dfb66d42827_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:94950d339fa382d6911f12fc23dcaf2cdb2854c4cab654f6058f5bf0df1bb371_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:bcfbd2284cbeeba5a835aaf5a5590ddd8156bd881ca24fd0fe1465fade1f84c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:bd739ced163053224e5b0ea2f3cd577481c6b6c1162cc0fbc186f1716b4a1fbd_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:d40496f114898985cde3860b9664c34d8c32de85e4d3d846df91a6ba27a2e99c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:3f7cbe7605595d712e14d9a17717fafc6c6e334f2ad3e821c34947ec78411046_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:96775900ea90e57487da6afe59d058b33cb977a0247a1bbeb1bd07bed2816398_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:caa6b121538e074312314d9888d9b423bd225aefa4f25eb145893b9fc548c0ad_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:e59c90cfe8160b28f9d2aa9e59b1d04d742df44d2195210ebc1946ee3cb78b6f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:10c95e5c55ccc1a04e8d2ac28bd1afd3b9bb9a7e9e2a5e3e8efb301421539980_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:60a310d4464b4817845703d14e95729321b883fbfc79fbf2dd8d514bb3c675e9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:70e6c14d72f14d25a90f44043932fbd3f824b30e8ad4b36307100726b24d9c06_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:784129cf69b3bf77a907fe909fd73a2a4d0fbd947fe0037e47aa1d62c6ffcf0b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:2368703206d833e4cb73b7e8750efb9997633a6f9accbf032426bcfcae4c00d9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:80b543b207e724e880ff932c514fe9c6a3925bfede1c31863531e4e69d050d40_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:82405a9a5715db5442dfa3d3f594888bd7b2f9c778d68357a7d8884f5ea46915_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:8fd2bda7b8d94ededf7973f76a159dd61105776a05d961ac9cfd9bee0a988213_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:4def845360282dad99181b96bcd834b4863eab39e246fda2476234c561c652ec_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:b67aec868b6366cf04f3980b15588e1a0af5c88b2248958bc3884261ad390ca0_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:ceacf3491ebec6f5613011fe8d36b66d00f8b3697832615a4d7024e23125085e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:d9f6a520b818dcccbedb94720b5979ef1cdec2e02491c76e3decb3ee18f2085d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:3e6519c0c789b946eb1b811867c41c4f204440bad5734760c0aca4e3fc602e5a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:95684cfaf4d5d91bc9fe8cfbf64a6f113e944e3f0c102d27851be5232eca0dbb_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:9cb20990af88287dd8a27de4e4ef12eb244577a1844482d26107359c6efe8efa_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:a69ebb0c7e817d44cfabd86ad13ef4cc94a8bf5b6e8a607d17b197603d64a224_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:1f7ed606f69a74943aedb0a956e5a71019f8a1ab53cd3f8166be0f55a69809b9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:4841076eb82f1f1748345556ff6c4e02a17f1f63c661e375eaba720291cbaf6a_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:a79ac7dcae109aa526e2a218327dd8c5dba2b924fc27447a07199b3b2f2f67b3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:dee022821852f2d5ebdbbd9f09c9b97997a905061dadb3f78433291d462d49a7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:1a746b16f362a83f399255d925b322b3440b3d89ae4d64ab7962db3d82ee91a1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:417a31bec11c3ffb70f40fa955069d5160dc12e2426b67e1d2e35ae3f7fa06df_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:89a3cb77fdb3dcbddfe96785a9ba3fa2b6132098fce028f859663b31fcf77a34_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:b1ba0b4cd8f515895af7b9f797f6ea5b661f7254ce019ce5115375639dcd06e9_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:0827c96b922ca185b7a7321a4f504e8a5dc01aadafcfd20443060546981339a8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:b5b732dfc0ce3d740781eda9a72e1542c7a30b28b39d2be6e0ba470af06a9680_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:f74081e5eb03227ccff5717a7d139ceee6c5b610625ff7b99e639a2652bf7663_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:f80976ae4fc332600e1d8e1d70b42c038ea05d76ac2c5b1d7d0cbaddbe89140a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:4029ece83812237ce8b1d394252e9561012e8cd94af40680a90284fbea1bc32a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:63a3465a7539a8a286c846a84d63e3feca9a11758e4c0d697889b0bdeb26a25c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:81c227d7c7599b0d4357ccdc3b567f31b67bbd1198c9e7ddba1864c299bad11b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:f392bde8ce22aca058d77132cc709440442931679dbe725c52516f1cdc97b38d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:4825fab15300bc911e0b2b5c4ae342004bfcff95fa64af0fdb1085fadd132aa2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:68f879679911c2ca828551b900eca1c2f4e8caec7312fbba502fabc4778d1832_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:b4188ac728c746769ef6586663dd6d7d07db984b083397d2c76fe847ef22ea60_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:f2805fc1e6f37bc8acc3187ea8712d38f32151d584c10d5996c0ad7076cd638b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:1c943edcf23df14f254e4aabb93cbc1665bbc7902076b3f04bd80edd2fe324db_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:84c5d2b24caf68c3a6a6d078bd9f66de9fb88e769f6c09c11a248693d463ac21_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:907d6e24922d6d372bceb21ad830c254c6a9c9d6be0ac4f4edf22c236437a09d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:923a3ee0e3d5b7341b96826e465e6856855f2801dbaf381d139a632c77bda1c5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:285d2e2d103b458f0603435aedb4d779d85e48fed2267845b798f4a04a0df4c7_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:44981f5fcbc9086470143fae6e21a5de3baad2258d9f8c81accecb2faad6b2a2_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:5ba248d0bc8fcde70e210319bb962f4043e5e8ab8a5625c8f8f30ec96d47c6b7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:f681cdac28ee9ff6375fb39d7b7d12917a06043db44c16e8f84bdb9e09e7b5e7_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:2057531884d897574fc0648e5d3cf21c4549738ac5f35d8095f400cdb80049cc_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:8be0e50a132a2c974893f36b51f3f40b6d6e1f913ae0f9ee6319ef0d5ec455b7_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:a2edc5d233d1547fa2e1d01f29d8a914930735f7098289892430ba9a17d20ab7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:c81c7aeb3dd05801e279a9fcc8d6c3baf00a2ccc08eab53f8acc8bd4d2d129c4_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:25e17bf203568420587cf5907e84e4167afab84dfce549c91bea99e70290b742_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:277f4e8ac5fc292b9f0f2d123f924c6b5cbc0a2eeba3c87a0e61c5ee2399aaa9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:76766b77ed53513cd254195b25d205ab6964522816e1e3662800e38a105abdf2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:c7ace45f7cb86055e2ba18e27a660f6aa6cb4eff497204294875d5dd1d63cce3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:3780b1bc80ab7ebc3cfed06ce69346d589dc07b53cea65ad3ed92cc912284300_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:681b356709778083448892513b4559f693e002bfda897a57e2d065f736a902b5_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:d110b52ce8ea022b3d35e7c4b0ce3b646f30513cf8abb55327132565ea4a6a87_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:f076ab59f3abe061e4553a61f98a144a472297dba5ed924ca887f130e9372da9_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh/knownhosts. This vulnerability occurs because the system did not correctly check for the revocation status of a SignatureKey belonging to a Certificate Authority (CA). A remote attacker could potentially exploit this by presenting a revoked key, leading to the system accepting it as valid. This could allow an attacker to bypass security checks and potentially gain unauthorized access or spoof legitimate entities.
7.4 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:0eea35a3af36d08db945a70c387cc38eb326f75b4ed322f09d8c91863cfe5d02_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:22c48db227cd6f2ecec746674e31ac7f5a983a418679fc91678a0aa0ebb49496_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:8e8d249c39d562f819d347f12610dda7f5c01215c41101bfd5dca008e04edf6e_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:f8adb8dd40a204bacb51cd423803097a514ec8e8e9f52209e02ecf14cad622bb_ppc64le | — |
Vendor Fix
fix
|
Known not affected
172 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:31bd91156f49687d2efffd3be971d9ee0e16abb420b8e8b958caa88b97770020_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:a6315866c67ba350665f5a92f960a5a44e427ca37ae7505e2072af4e02c42f76_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:b3ad6fa1de658f3a40c8b183ab501ebc66b359d8cc01439d4215aa52769df213_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:bfde9ebea1fcd27b6d104d5f67db62e870878f9517ccbec2f649dd2c1af4a073_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:08fed161d59299881ff7a54db859feaf8ed7bdb8238d6cf12628ccb73575665e_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:09436fe2649ca384b1bc1fd8f736fb1d71392733310e66758ed9f289e00471f9_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:3b83670e1c0e9d1f5b76bd7b75d77072bc6208646bc2201bd0bd200dbc59e34a_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:927146f966e4c5c2908d29d8ab45a8f3071dbd5ebd9cf0424460a23f814a72a7_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:38a3bc59511133cae56827eba879e7c82c5a974bf1f16b6e8d95e1f79821e669_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:3fa04db82e3ce6169270db0ce29107b69d8e044e0a1ab13a2bf1050b8c26d087_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:6041a918713d4464c73560b68c294a12d33f297a980d2f9d0e0cc8c300a96f24_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:98bd72ba69bdfb3070d87b3edcbd7050579a514b72cfd67c2926541ba52dbaf7_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:938abc970731c2eeda8e2b7b73e96d4dfcbf7587330c7b7e52117a577700e426_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:a0876a25ce85d7d4616212813f012422826f152b8d71065e75cd9c3e23034d8a_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:c77077a0cca835a503a6529c89ab19c4027f949d361afdf8a5a259e1e87b0d55_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:d5bbf3fe886f27cdc27363dcb175e004487d9c8f36de4f1f8516fbeda3a95224_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:0f5d8cae3ba4ea4fcdc5fb9d08f797d576bc225b92af66f193bd4b1324cda4b9_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:2d3588825f8a714fa59b1648d0934d064165e333f322f7f31f01f07b940d42d9_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:68aa571827f5331f1d5a3bd0c60ad441a18877ba11921aff2633940236bafcd4_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:9b80c9c61d4befefa7f6a65ae8c001ce7e343a1e4f251e5ebe025625d9511730_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:9b2c24401a91903f023096d2b641aa977acff423eb6770a8e4c4a81aecfd4e62_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:9d74585acc098c13f3e9dac5ae7f5ef337fa82bd7119d7f1849c5f8a50e84907_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:a6ee95d0ed82bddef084684d11fa770bd646d9be9bc65b3bc386d7c58b33975c_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:f7b8654eb8bf675c8c26f0ad395d790f990308d3ad6683bb61b484c92073bbac_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:2a598e7fd07db27100d9a53a328ac9a0535865883bddd1373f4f1f2705068d2f_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:4f8f0b02d0969753e156226a998d442746c238a2a50ea606a49ca0cf695b8925_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:63c02348faa7d4e26e35c69aef5453613dd607a26116823b931b89fe5311e181_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:ae224866f0085d2c00ab18a28d2aed076e455731903989a49a544abf49950d1f_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:0a90a13f006ef0b271079b728ef6d54081f36ae19b6d0e9ab4dc24ea52a30fad_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:3a53629645832974a883002e53198df7c28e59dd6d1df99bf321b52d0ef84b61_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:879315f438ca43abb607d6c97f8fbd4ca2d38209b142e2d97cc0598740273252_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:c6c4d01f5fcee6cad3fc870cace92f45000624760e6e93654bb5e814afeed7bb_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:50f7647620c78fd6b445379c8762f5e978113fe3552906376a24459263f27459_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:53e641f48ddc05c63da2e6bc24e9e4636a10de2c3599d8f5f78622bdebca07ca_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:57114b7a386c406715e342637558fab57afeef2e193517f99173a441f39401d5_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:dcdcaa90f292f2d7ad3f10acbedfab9f7f22f3432c3156055f34760d9bf9429c_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:3723b1d5c74f37cba219e203fd2026a718d4821595cb505ec6626684695da65b_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:562291f52b6bce98ec8795856b808545c4fe30047b54544c7f6c2ab4678480ff_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:e6dfac9bc3e467e141a425944782f5087ed967ac4d02d8d47442e3d61ba5b882_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:f683186c2cc8be9ec09b8efdec66d6b8b1f991c7f7b9fd398dc7c3f9ab8b3079_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:2471edd63a94473c68cf37ee50de643e40003f2c5bba84063c154e4888a7f0bd_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:7cef49d68df5d8efe52061a18920e07e6c7efa3016c0cea7d1747e67851f254a_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:d912383405599032acffbad22bc154f63a87dd429ba882fd7a94cb82fe650d8e_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:f3034211e16de48af540efe4ee460395dba0a4a544fa4f277a12840a25df1730_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:181d1decb2f16fcf6f5938027ed346aca29126687bbe6cdcc601c25087f70d11_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:ab5e4d27e23448d99a37b8c05442bb1254083cdc4ff325e721d97d80ec27346c_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:ac172243d158e126594f28317e0cfb37dc1790c9f2121e95fe52506b5e05fc91_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:fd96b6284d270effa0f838d960ea4218b72b54c4718513eb523658f2f4972682_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:c59d9cd479c62730eda5d482fb2f4e9fbc17a90a5a2861b130aafe1f3a27a333_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:e547f672b14b6e8fc2ffd300b150aedbd3f6b6b36ddcad612f7c992a936a7c82_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:ead1263d538974c48790c65e44cd9cab07a62c2893b2eeb250174e7cf58d7f9d_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:ed0457a57c7b39b79fb308176f45ffe678938b25fbb8c15de2cedbe54b916f64_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:9847a5752ec77e17861dcdac5546ee5c53679c80c3569609b21d9080ee3b7ef3_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:d3c823e61a0682ddc85e576e86234e580992886de471035630f9c89bbad6ebb7_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:ded425ed0af88a1411a06e5191aee25c4c59f1de85b041eba95c9997686cf09e_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:ee63f59942f9df04e95fc4266f0d194cd62a7ca08dd5478283884d0ab6003da7_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:724377cabaa284a5197e7505a7150c89631c2f2bcc629e074c7c0be18abd8e6f_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:cbf797c9e93413540b20ebee9191375ddd8185ef22dc8c9e23cc3a4c015abaf7_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:d7609d62a801cf07ef639abcd4f193b2d68967fadebbfddf2349003d7e9eaa44_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:f61fe90362f793225591eb7e2a86d5cdc6fb35aa087e9b6a6218a42b1c1d945d_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:1c4de9460688800b62bad6fb13653ef4b52bf215e4d41674291193e9b8e71b24_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:4f1e59610b2fbedc56f425b3fbd8f16c9ea6ea96025f18a404fe48f6a49bdc1e_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:ab0d28306dd6daa03af79bdc2ea650e59a50a03317987c4cdd0d1ee70f95b597_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:b700a8bb7ea6e4253afb8bcf94e5ad086349980ca0716a87817724d3da3fdce1_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4015f46d2172db26a348635e2e8cbd4bbcdbbaa56a4b12c232676a3d0f5bbee2_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4169252c61ec70b91b10c750d5f9ecd53f5c3c906766bba9103afbac3c3f9edf_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4ab72a192553c21de76754f06fe38cf443e686e4b4edc2aa2ceb2b6b9d95bb6c_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:579ef0925c6f56ed48f22121767189431bef6c4eaa72b2648a1b91488357a51d_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:2b796bf55ecf7a14d1c87d829a2b20d998fc2943686373105b0a50f5053ef836_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:7e960b59f64547f7e9602b7c066a51ab52aba929726aec2bacdf486a9d4d28fd_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:a43e430a2ec0b86fb6ade361677be298b4e27444388a9bca35ddafbf9c77277c_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:d2394b121256985e5ca322aea77bb0bf999ba2d7a6f1627e62bbc125c475dbbd_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:1868e2ea03d063b4cd64601cb0aaf5c9ea7f55e83eba2e2d4dcf6f830efeafc7_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:4bfbf0bdc882979bc94d85a4aeff8caa0ec7887aec7412e32ae1442811325d06_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:844e3d69d3c26914e02612466021592a876e6e2dd6cf77084723a70f567ba0e2_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:bbe04eb8fd197f15875f498e3c18b9a7a445380efb5f696422d79df99a34a881_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:2c9f9b47c01c5e5e017c583c6a09c5c52f40ef88acf789689265cb31ef328fb8_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:7b5e883efde312c1571c4825b523ff04ab57af6a9f4162a36b80b973f9602c46_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:d896dd89fb924da246fc729041d9debc019d8a4210cfd3de8883834e429cca10_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:ede3e22d4e4de49789622149dec23beaa7e0569a3715ac2262929df543e05bc3_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:273a393b8c62fbc4edb4bf4033c47d8b52bda56fc9cafa289d9513210840815b_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:71f1b590785ce7f4577ecd687dbab9bc3c5931c568a3108eb84279c7aa892046_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:d1e1b4310eb64891c9456be7c34547bf36b0aafdeb471a49f0892d7eaf8f41f4_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:e0a7514406c7ffae080db6d4db3bbf7b77a606ea4632bf09f8301ce1d3739bb5_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:2a4c6c061d154ed9c74707a7a2e2390fde2a150f36197386c3e49c0612d345b2_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:6ffcc051c955e198c6d96b59bda0ef26b5124ebbdef5357d36a84534f2c7097c_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:c9258bf58373f9c6859789c8ec272cd7d702c37e063fc2ee53c66d296e7ee3d0_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:d83c6bb4f2a91d2c4de3ffbf4aa8ceecb695f8491ba7586d55275c62cd1931e6_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:67637c5cba3eca1597885823c6e44c13db445d0ef38751eb8364b69dbf07caac_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:68fb5c2a3c8a0d5e6bbcf2c5568969f6b13e72006d4d54bc5c57cd9a032d1bf6_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:9f5fa40c88b0f5d1ae3634632240817a91f4575f8eae9c005b8e35a55cf38003_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:fcbcee9fc7e0bbf5775a33ae9b7e3d7e48a90e2aa1cb85605e05612b6e4d4e30_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:0c165bb93ce933c7f9998a615908bfcca0b4eb38e32e24a1c823e63791b7604b_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:42aa392f82bdc45a3b857d1ed44e224ddfd14db1e3dcbb74dcc850ac0540e964_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:9dcd0c0ecf1523bf05bd296edbecd85841b2753dee7a5c9df32437f9a8e31471_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:c5505c462e6b2c04a6e14bc1e22dfc42dc8adea8f6eaf0615cd58b1973b7d62e_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:1a93df314c31f10da7b1345fab07b15b846e28865764178e34124f84dc967152_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:34343f81973c3fbdd8630c32d0fad597745ea10f960ea64236408e58e0f10e14_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:7b3635784ebfb6343a73c9fa6de7bea57b3aacce1c49a0f7f250a471f7b897e3_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:f0a7fade2853193429bab16922b2e3bbe426e14632423d6550ff7dfb66d42827_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:94950d339fa382d6911f12fc23dcaf2cdb2854c4cab654f6058f5bf0df1bb371_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:bcfbd2284cbeeba5a835aaf5a5590ddd8156bd881ca24fd0fe1465fade1f84c2_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:bd739ced163053224e5b0ea2f3cd577481c6b6c1162cc0fbc186f1716b4a1fbd_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:d40496f114898985cde3860b9664c34d8c32de85e4d3d846df91a6ba27a2e99c_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:3f7cbe7605595d712e14d9a17717fafc6c6e334f2ad3e821c34947ec78411046_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:96775900ea90e57487da6afe59d058b33cb977a0247a1bbeb1bd07bed2816398_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:caa6b121538e074312314d9888d9b423bd225aefa4f25eb145893b9fc548c0ad_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:e59c90cfe8160b28f9d2aa9e59b1d04d742df44d2195210ebc1946ee3cb78b6f_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:10c95e5c55ccc1a04e8d2ac28bd1afd3b9bb9a7e9e2a5e3e8efb301421539980_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:60a310d4464b4817845703d14e95729321b883fbfc79fbf2dd8d514bb3c675e9_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:70e6c14d72f14d25a90f44043932fbd3f824b30e8ad4b36307100726b24d9c06_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:784129cf69b3bf77a907fe909fd73a2a4d0fbd947fe0037e47aa1d62c6ffcf0b_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:26e58654cdd092cb812207cb4473f5f5988ebd708d95c34152c2e8c124f7297d_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:40e5d9634aa7469df8247758961d486cfac3e7d7f0b59184e11ed5571b46bf40_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:5b59faed336de07965755c893cb9d0ffc52ec90f61cc8c54487f6c0cac53322e_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:b59aea0c9e859025988b0f0c9b6e7748c4acf6d0b4cee35f3fabb7b84feb598b_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:2368703206d833e4cb73b7e8750efb9997633a6f9accbf032426bcfcae4c00d9_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:80b543b207e724e880ff932c514fe9c6a3925bfede1c31863531e4e69d050d40_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:82405a9a5715db5442dfa3d3f594888bd7b2f9c778d68357a7d8884f5ea46915_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:8fd2bda7b8d94ededf7973f76a159dd61105776a05d961ac9cfd9bee0a988213_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:4def845360282dad99181b96bcd834b4863eab39e246fda2476234c561c652ec_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:b67aec868b6366cf04f3980b15588e1a0af5c88b2248958bc3884261ad390ca0_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:ceacf3491ebec6f5613011fe8d36b66d00f8b3697832615a4d7024e23125085e_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:d9f6a520b818dcccbedb94720b5979ef1cdec2e02491c76e3decb3ee18f2085d_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:3e6519c0c789b946eb1b811867c41c4f204440bad5734760c0aca4e3fc602e5a_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:95684cfaf4d5d91bc9fe8cfbf64a6f113e944e3f0c102d27851be5232eca0dbb_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:9cb20990af88287dd8a27de4e4ef12eb244577a1844482d26107359c6efe8efa_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:a69ebb0c7e817d44cfabd86ad13ef4cc94a8bf5b6e8a607d17b197603d64a224_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:03adc6277e2bf409391941c6f4508154abc38a0c043139978754f6d4fd32c5a8_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:7e100af30ed11325cb2cbee02af09306e53df5db5847f2a4b733cd307e3cd623_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:91b474b4808b18c279c9f8eb3be8e6d1e1e47cf2b5f9553acd901c74b20bddbc_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:d56f884a9700a4f193d6f3db1895bd54745ec77e02ead3d43bd6e4fe04a2969e_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:1f7ed606f69a74943aedb0a956e5a71019f8a1ab53cd3f8166be0f55a69809b9_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:4841076eb82f1f1748345556ff6c4e02a17f1f63c661e375eaba720291cbaf6a_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:a79ac7dcae109aa526e2a218327dd8c5dba2b924fc27447a07199b3b2f2f67b3_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:dee022821852f2d5ebdbbd9f09c9b97997a905061dadb3f78433291d462d49a7_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:1a746b16f362a83f399255d925b322b3440b3d89ae4d64ab7962db3d82ee91a1_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:417a31bec11c3ffb70f40fa955069d5160dc12e2426b67e1d2e35ae3f7fa06df_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:89a3cb77fdb3dcbddfe96785a9ba3fa2b6132098fce028f859663b31fcf77a34_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:b1ba0b4cd8f515895af7b9f797f6ea5b661f7254ce019ce5115375639dcd06e9_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:0827c96b922ca185b7a7321a4f504e8a5dc01aadafcfd20443060546981339a8_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:b5b732dfc0ce3d740781eda9a72e1542c7a30b28b39d2be6e0ba470af06a9680_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:f74081e5eb03227ccff5717a7d139ceee6c5b610625ff7b99e639a2652bf7663_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:f80976ae4fc332600e1d8e1d70b42c038ea05d76ac2c5b1d7d0cbaddbe89140a_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:4029ece83812237ce8b1d394252e9561012e8cd94af40680a90284fbea1bc32a_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:63a3465a7539a8a286c846a84d63e3feca9a11758e4c0d697889b0bdeb26a25c_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:81c227d7c7599b0d4357ccdc3b567f31b67bbd1198c9e7ddba1864c299bad11b_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:f392bde8ce22aca058d77132cc709440442931679dbe725c52516f1cdc97b38d_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:4825fab15300bc911e0b2b5c4ae342004bfcff95fa64af0fdb1085fadd132aa2_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:68f879679911c2ca828551b900eca1c2f4e8caec7312fbba502fabc4778d1832_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:b4188ac728c746769ef6586663dd6d7d07db984b083397d2c76fe847ef22ea60_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:f2805fc1e6f37bc8acc3187ea8712d38f32151d584c10d5996c0ad7076cd638b_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:1c943edcf23df14f254e4aabb93cbc1665bbc7902076b3f04bd80edd2fe324db_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:84c5d2b24caf68c3a6a6d078bd9f66de9fb88e769f6c09c11a248693d463ac21_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:907d6e24922d6d372bceb21ad830c254c6a9c9d6be0ac4f4edf22c236437a09d_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:923a3ee0e3d5b7341b96826e465e6856855f2801dbaf381d139a632c77bda1c5_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:285d2e2d103b458f0603435aedb4d779d85e48fed2267845b798f4a04a0df4c7_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:44981f5fcbc9086470143fae6e21a5de3baad2258d9f8c81accecb2faad6b2a2_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:5ba248d0bc8fcde70e210319bb962f4043e5e8ab8a5625c8f8f30ec96d47c6b7_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:f681cdac28ee9ff6375fb39d7b7d12917a06043db44c16e8f84bdb9e09e7b5e7_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:2057531884d897574fc0648e5d3cf21c4549738ac5f35d8095f400cdb80049cc_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:8be0e50a132a2c974893f36b51f3f40b6d6e1f913ae0f9ee6319ef0d5ec455b7_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:a2edc5d233d1547fa2e1d01f29d8a914930735f7098289892430ba9a17d20ab7_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:c81c7aeb3dd05801e279a9fcc8d6c3baf00a2ccc08eab53f8acc8bd4d2d129c4_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:25e17bf203568420587cf5907e84e4167afab84dfce549c91bea99e70290b742_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:277f4e8ac5fc292b9f0f2d123f924c6b5cbc0a2eeba3c87a0e61c5ee2399aaa9_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:76766b77ed53513cd254195b25d205ab6964522816e1e3662800e38a105abdf2_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:c7ace45f7cb86055e2ba18e27a660f6aa6cb4eff497204294875d5dd1d63cce3_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:3780b1bc80ab7ebc3cfed06ce69346d589dc07b53cea65ad3ed92cc912284300_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:681b356709778083448892513b4559f693e002bfda897a57e2d065f736a902b5_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:d110b52ce8ea022b3d35e7c4b0ce3b646f30513cf8abb55327132565ea4a6a87_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:f076ab59f3abe061e4553a61f98a144a472297dba5ed924ca887f130e9372da9_s390x | — |
Threats
Impact
Important
A flaw was found in Billy, an interface filesystem abstraction for Go. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by providing crafted or malformed input. The issue arises from insufficient validation and missing safety mechanisms when processing untrusted repository data and filesystem structures, leading to panics, infinite loops, uncontrolled recursion, or excessive resource consumption.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:0eea35a3af36d08db945a70c387cc38eb326f75b4ed322f09d8c91863cfe5d02_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:22c48db227cd6f2ecec746674e31ac7f5a983a418679fc91678a0aa0ebb49496_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:8e8d249c39d562f819d347f12610dda7f5c01215c41101bfd5dca008e04edf6e_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:f8adb8dd40a204bacb51cd423803097a514ec8e8e9f52209e02ecf14cad622bb_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
172 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:31bd91156f49687d2efffd3be971d9ee0e16abb420b8e8b958caa88b97770020_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:a6315866c67ba350665f5a92f960a5a44e427ca37ae7505e2072af4e02c42f76_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:b3ad6fa1de658f3a40c8b183ab501ebc66b359d8cc01439d4215aa52769df213_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:bfde9ebea1fcd27b6d104d5f67db62e870878f9517ccbec2f649dd2c1af4a073_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:08fed161d59299881ff7a54db859feaf8ed7bdb8238d6cf12628ccb73575665e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:09436fe2649ca384b1bc1fd8f736fb1d71392733310e66758ed9f289e00471f9_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:3b83670e1c0e9d1f5b76bd7b75d77072bc6208646bc2201bd0bd200dbc59e34a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:927146f966e4c5c2908d29d8ab45a8f3071dbd5ebd9cf0424460a23f814a72a7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:38a3bc59511133cae56827eba879e7c82c5a974bf1f16b6e8d95e1f79821e669_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:3fa04db82e3ce6169270db0ce29107b69d8e044e0a1ab13a2bf1050b8c26d087_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:6041a918713d4464c73560b68c294a12d33f297a980d2f9d0e0cc8c300a96f24_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:98bd72ba69bdfb3070d87b3edcbd7050579a514b72cfd67c2926541ba52dbaf7_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:938abc970731c2eeda8e2b7b73e96d4dfcbf7587330c7b7e52117a577700e426_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:a0876a25ce85d7d4616212813f012422826f152b8d71065e75cd9c3e23034d8a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:c77077a0cca835a503a6529c89ab19c4027f949d361afdf8a5a259e1e87b0d55_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:d5bbf3fe886f27cdc27363dcb175e004487d9c8f36de4f1f8516fbeda3a95224_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:0f5d8cae3ba4ea4fcdc5fb9d08f797d576bc225b92af66f193bd4b1324cda4b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:2d3588825f8a714fa59b1648d0934d064165e333f322f7f31f01f07b940d42d9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:68aa571827f5331f1d5a3bd0c60ad441a18877ba11921aff2633940236bafcd4_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:9b80c9c61d4befefa7f6a65ae8c001ce7e343a1e4f251e5ebe025625d9511730_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:9b2c24401a91903f023096d2b641aa977acff423eb6770a8e4c4a81aecfd4e62_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:9d74585acc098c13f3e9dac5ae7f5ef337fa82bd7119d7f1849c5f8a50e84907_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:a6ee95d0ed82bddef084684d11fa770bd646d9be9bc65b3bc386d7c58b33975c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:f7b8654eb8bf675c8c26f0ad395d790f990308d3ad6683bb61b484c92073bbac_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:2a598e7fd07db27100d9a53a328ac9a0535865883bddd1373f4f1f2705068d2f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:4f8f0b02d0969753e156226a998d442746c238a2a50ea606a49ca0cf695b8925_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:63c02348faa7d4e26e35c69aef5453613dd607a26116823b931b89fe5311e181_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:ae224866f0085d2c00ab18a28d2aed076e455731903989a49a544abf49950d1f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:0a90a13f006ef0b271079b728ef6d54081f36ae19b6d0e9ab4dc24ea52a30fad_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:3a53629645832974a883002e53198df7c28e59dd6d1df99bf321b52d0ef84b61_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:879315f438ca43abb607d6c97f8fbd4ca2d38209b142e2d97cc0598740273252_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:c6c4d01f5fcee6cad3fc870cace92f45000624760e6e93654bb5e814afeed7bb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:50f7647620c78fd6b445379c8762f5e978113fe3552906376a24459263f27459_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:53e641f48ddc05c63da2e6bc24e9e4636a10de2c3599d8f5f78622bdebca07ca_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:57114b7a386c406715e342637558fab57afeef2e193517f99173a441f39401d5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:dcdcaa90f292f2d7ad3f10acbedfab9f7f22f3432c3156055f34760d9bf9429c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:3723b1d5c74f37cba219e203fd2026a718d4821595cb505ec6626684695da65b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:562291f52b6bce98ec8795856b808545c4fe30047b54544c7f6c2ab4678480ff_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:e6dfac9bc3e467e141a425944782f5087ed967ac4d02d8d47442e3d61ba5b882_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:f683186c2cc8be9ec09b8efdec66d6b8b1f991c7f7b9fd398dc7c3f9ab8b3079_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:2471edd63a94473c68cf37ee50de643e40003f2c5bba84063c154e4888a7f0bd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:7cef49d68df5d8efe52061a18920e07e6c7efa3016c0cea7d1747e67851f254a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:d912383405599032acffbad22bc154f63a87dd429ba882fd7a94cb82fe650d8e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:f3034211e16de48af540efe4ee460395dba0a4a544fa4f277a12840a25df1730_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:181d1decb2f16fcf6f5938027ed346aca29126687bbe6cdcc601c25087f70d11_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:ab5e4d27e23448d99a37b8c05442bb1254083cdc4ff325e721d97d80ec27346c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:ac172243d158e126594f28317e0cfb37dc1790c9f2121e95fe52506b5e05fc91_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:fd96b6284d270effa0f838d960ea4218b72b54c4718513eb523658f2f4972682_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:c59d9cd479c62730eda5d482fb2f4e9fbc17a90a5a2861b130aafe1f3a27a333_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:e547f672b14b6e8fc2ffd300b150aedbd3f6b6b36ddcad612f7c992a936a7c82_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:ead1263d538974c48790c65e44cd9cab07a62c2893b2eeb250174e7cf58d7f9d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:ed0457a57c7b39b79fb308176f45ffe678938b25fbb8c15de2cedbe54b916f64_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:9847a5752ec77e17861dcdac5546ee5c53679c80c3569609b21d9080ee3b7ef3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:d3c823e61a0682ddc85e576e86234e580992886de471035630f9c89bbad6ebb7_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:ded425ed0af88a1411a06e5191aee25c4c59f1de85b041eba95c9997686cf09e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:ee63f59942f9df04e95fc4266f0d194cd62a7ca08dd5478283884d0ab6003da7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:724377cabaa284a5197e7505a7150c89631c2f2bcc629e074c7c0be18abd8e6f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:cbf797c9e93413540b20ebee9191375ddd8185ef22dc8c9e23cc3a4c015abaf7_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:d7609d62a801cf07ef639abcd4f193b2d68967fadebbfddf2349003d7e9eaa44_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:f61fe90362f793225591eb7e2a86d5cdc6fb35aa087e9b6a6218a42b1c1d945d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:1c4de9460688800b62bad6fb13653ef4b52bf215e4d41674291193e9b8e71b24_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:4f1e59610b2fbedc56f425b3fbd8f16c9ea6ea96025f18a404fe48f6a49bdc1e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:ab0d28306dd6daa03af79bdc2ea650e59a50a03317987c4cdd0d1ee70f95b597_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:b700a8bb7ea6e4253afb8bcf94e5ad086349980ca0716a87817724d3da3fdce1_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4015f46d2172db26a348635e2e8cbd4bbcdbbaa56a4b12c232676a3d0f5bbee2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4169252c61ec70b91b10c750d5f9ecd53f5c3c906766bba9103afbac3c3f9edf_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4ab72a192553c21de76754f06fe38cf443e686e4b4edc2aa2ceb2b6b9d95bb6c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:579ef0925c6f56ed48f22121767189431bef6c4eaa72b2648a1b91488357a51d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:2b796bf55ecf7a14d1c87d829a2b20d998fc2943686373105b0a50f5053ef836_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:7e960b59f64547f7e9602b7c066a51ab52aba929726aec2bacdf486a9d4d28fd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:a43e430a2ec0b86fb6ade361677be298b4e27444388a9bca35ddafbf9c77277c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:d2394b121256985e5ca322aea77bb0bf999ba2d7a6f1627e62bbc125c475dbbd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:1868e2ea03d063b4cd64601cb0aaf5c9ea7f55e83eba2e2d4dcf6f830efeafc7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:4bfbf0bdc882979bc94d85a4aeff8caa0ec7887aec7412e32ae1442811325d06_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:844e3d69d3c26914e02612466021592a876e6e2dd6cf77084723a70f567ba0e2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:bbe04eb8fd197f15875f498e3c18b9a7a445380efb5f696422d79df99a34a881_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:2c9f9b47c01c5e5e017c583c6a09c5c52f40ef88acf789689265cb31ef328fb8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:7b5e883efde312c1571c4825b523ff04ab57af6a9f4162a36b80b973f9602c46_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:d896dd89fb924da246fc729041d9debc019d8a4210cfd3de8883834e429cca10_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:ede3e22d4e4de49789622149dec23beaa7e0569a3715ac2262929df543e05bc3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:273a393b8c62fbc4edb4bf4033c47d8b52bda56fc9cafa289d9513210840815b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:71f1b590785ce7f4577ecd687dbab9bc3c5931c568a3108eb84279c7aa892046_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:d1e1b4310eb64891c9456be7c34547bf36b0aafdeb471a49f0892d7eaf8f41f4_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:e0a7514406c7ffae080db6d4db3bbf7b77a606ea4632bf09f8301ce1d3739bb5_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:2a4c6c061d154ed9c74707a7a2e2390fde2a150f36197386c3e49c0612d345b2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:6ffcc051c955e198c6d96b59bda0ef26b5124ebbdef5357d36a84534f2c7097c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:c9258bf58373f9c6859789c8ec272cd7d702c37e063fc2ee53c66d296e7ee3d0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:d83c6bb4f2a91d2c4de3ffbf4aa8ceecb695f8491ba7586d55275c62cd1931e6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:67637c5cba3eca1597885823c6e44c13db445d0ef38751eb8364b69dbf07caac_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:68fb5c2a3c8a0d5e6bbcf2c5568969f6b13e72006d4d54bc5c57cd9a032d1bf6_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:9f5fa40c88b0f5d1ae3634632240817a91f4575f8eae9c005b8e35a55cf38003_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:fcbcee9fc7e0bbf5775a33ae9b7e3d7e48a90e2aa1cb85605e05612b6e4d4e30_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:0c165bb93ce933c7f9998a615908bfcca0b4eb38e32e24a1c823e63791b7604b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:42aa392f82bdc45a3b857d1ed44e224ddfd14db1e3dcbb74dcc850ac0540e964_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:9dcd0c0ecf1523bf05bd296edbecd85841b2753dee7a5c9df32437f9a8e31471_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:c5505c462e6b2c04a6e14bc1e22dfc42dc8adea8f6eaf0615cd58b1973b7d62e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:1a93df314c31f10da7b1345fab07b15b846e28865764178e34124f84dc967152_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:34343f81973c3fbdd8630c32d0fad597745ea10f960ea64236408e58e0f10e14_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:7b3635784ebfb6343a73c9fa6de7bea57b3aacce1c49a0f7f250a471f7b897e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:f0a7fade2853193429bab16922b2e3bbe426e14632423d6550ff7dfb66d42827_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:94950d339fa382d6911f12fc23dcaf2cdb2854c4cab654f6058f5bf0df1bb371_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:bcfbd2284cbeeba5a835aaf5a5590ddd8156bd881ca24fd0fe1465fade1f84c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:bd739ced163053224e5b0ea2f3cd577481c6b6c1162cc0fbc186f1716b4a1fbd_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:d40496f114898985cde3860b9664c34d8c32de85e4d3d846df91a6ba27a2e99c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:3f7cbe7605595d712e14d9a17717fafc6c6e334f2ad3e821c34947ec78411046_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:96775900ea90e57487da6afe59d058b33cb977a0247a1bbeb1bd07bed2816398_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:caa6b121538e074312314d9888d9b423bd225aefa4f25eb145893b9fc548c0ad_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:e59c90cfe8160b28f9d2aa9e59b1d04d742df44d2195210ebc1946ee3cb78b6f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:10c95e5c55ccc1a04e8d2ac28bd1afd3b9bb9a7e9e2a5e3e8efb301421539980_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:60a310d4464b4817845703d14e95729321b883fbfc79fbf2dd8d514bb3c675e9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:70e6c14d72f14d25a90f44043932fbd3f824b30e8ad4b36307100726b24d9c06_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:784129cf69b3bf77a907fe909fd73a2a4d0fbd947fe0037e47aa1d62c6ffcf0b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:26e58654cdd092cb812207cb4473f5f5988ebd708d95c34152c2e8c124f7297d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:40e5d9634aa7469df8247758961d486cfac3e7d7f0b59184e11ed5571b46bf40_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:5b59faed336de07965755c893cb9d0ffc52ec90f61cc8c54487f6c0cac53322e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:b59aea0c9e859025988b0f0c9b6e7748c4acf6d0b4cee35f3fabb7b84feb598b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:2368703206d833e4cb73b7e8750efb9997633a6f9accbf032426bcfcae4c00d9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:80b543b207e724e880ff932c514fe9c6a3925bfede1c31863531e4e69d050d40_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:82405a9a5715db5442dfa3d3f594888bd7b2f9c778d68357a7d8884f5ea46915_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:8fd2bda7b8d94ededf7973f76a159dd61105776a05d961ac9cfd9bee0a988213_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:4def845360282dad99181b96bcd834b4863eab39e246fda2476234c561c652ec_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:b67aec868b6366cf04f3980b15588e1a0af5c88b2248958bc3884261ad390ca0_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:ceacf3491ebec6f5613011fe8d36b66d00f8b3697832615a4d7024e23125085e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:d9f6a520b818dcccbedb94720b5979ef1cdec2e02491c76e3decb3ee18f2085d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:3e6519c0c789b946eb1b811867c41c4f204440bad5734760c0aca4e3fc602e5a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:95684cfaf4d5d91bc9fe8cfbf64a6f113e944e3f0c102d27851be5232eca0dbb_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:9cb20990af88287dd8a27de4e4ef12eb244577a1844482d26107359c6efe8efa_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:a69ebb0c7e817d44cfabd86ad13ef4cc94a8bf5b6e8a607d17b197603d64a224_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:03adc6277e2bf409391941c6f4508154abc38a0c043139978754f6d4fd32c5a8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:7e100af30ed11325cb2cbee02af09306e53df5db5847f2a4b733cd307e3cd623_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:91b474b4808b18c279c9f8eb3be8e6d1e1e47cf2b5f9553acd901c74b20bddbc_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:d56f884a9700a4f193d6f3db1895bd54745ec77e02ead3d43bd6e4fe04a2969e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:1f7ed606f69a74943aedb0a956e5a71019f8a1ab53cd3f8166be0f55a69809b9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:4841076eb82f1f1748345556ff6c4e02a17f1f63c661e375eaba720291cbaf6a_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:a79ac7dcae109aa526e2a218327dd8c5dba2b924fc27447a07199b3b2f2f67b3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:dee022821852f2d5ebdbbd9f09c9b97997a905061dadb3f78433291d462d49a7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:1a746b16f362a83f399255d925b322b3440b3d89ae4d64ab7962db3d82ee91a1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:417a31bec11c3ffb70f40fa955069d5160dc12e2426b67e1d2e35ae3f7fa06df_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:89a3cb77fdb3dcbddfe96785a9ba3fa2b6132098fce028f859663b31fcf77a34_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:b1ba0b4cd8f515895af7b9f797f6ea5b661f7254ce019ce5115375639dcd06e9_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:0827c96b922ca185b7a7321a4f504e8a5dc01aadafcfd20443060546981339a8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:b5b732dfc0ce3d740781eda9a72e1542c7a30b28b39d2be6e0ba470af06a9680_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:f74081e5eb03227ccff5717a7d139ceee6c5b610625ff7b99e639a2652bf7663_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:f80976ae4fc332600e1d8e1d70b42c038ea05d76ac2c5b1d7d0cbaddbe89140a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:4029ece83812237ce8b1d394252e9561012e8cd94af40680a90284fbea1bc32a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:63a3465a7539a8a286c846a84d63e3feca9a11758e4c0d697889b0bdeb26a25c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:81c227d7c7599b0d4357ccdc3b567f31b67bbd1198c9e7ddba1864c299bad11b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:f392bde8ce22aca058d77132cc709440442931679dbe725c52516f1cdc97b38d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:4825fab15300bc911e0b2b5c4ae342004bfcff95fa64af0fdb1085fadd132aa2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:68f879679911c2ca828551b900eca1c2f4e8caec7312fbba502fabc4778d1832_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:b4188ac728c746769ef6586663dd6d7d07db984b083397d2c76fe847ef22ea60_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:f2805fc1e6f37bc8acc3187ea8712d38f32151d584c10d5996c0ad7076cd638b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:1c943edcf23df14f254e4aabb93cbc1665bbc7902076b3f04bd80edd2fe324db_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:84c5d2b24caf68c3a6a6d078bd9f66de9fb88e769f6c09c11a248693d463ac21_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:907d6e24922d6d372bceb21ad830c254c6a9c9d6be0ac4f4edf22c236437a09d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:923a3ee0e3d5b7341b96826e465e6856855f2801dbaf381d139a632c77bda1c5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:285d2e2d103b458f0603435aedb4d779d85e48fed2267845b798f4a04a0df4c7_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:44981f5fcbc9086470143fae6e21a5de3baad2258d9f8c81accecb2faad6b2a2_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:5ba248d0bc8fcde70e210319bb962f4043e5e8ab8a5625c8f8f30ec96d47c6b7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:f681cdac28ee9ff6375fb39d7b7d12917a06043db44c16e8f84bdb9e09e7b5e7_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:2057531884d897574fc0648e5d3cf21c4549738ac5f35d8095f400cdb80049cc_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:8be0e50a132a2c974893f36b51f3f40b6d6e1f913ae0f9ee6319ef0d5ec455b7_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:a2edc5d233d1547fa2e1d01f29d8a914930735f7098289892430ba9a17d20ab7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:c81c7aeb3dd05801e279a9fcc8d6c3baf00a2ccc08eab53f8acc8bd4d2d129c4_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:25e17bf203568420587cf5907e84e4167afab84dfce549c91bea99e70290b742_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:277f4e8ac5fc292b9f0f2d123f924c6b5cbc0a2eeba3c87a0e61c5ee2399aaa9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:76766b77ed53513cd254195b25d205ab6964522816e1e3662800e38a105abdf2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:c7ace45f7cb86055e2ba18e27a660f6aa6cb4eff497204294875d5dd1d63cce3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:3780b1bc80ab7ebc3cfed06ce69346d589dc07b53cea65ad3ed92cc912284300_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:681b356709778083448892513b4559f693e002bfda897a57e2d065f736a902b5_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:d110b52ce8ea022b3d35e7c4b0ce3b646f30513cf8abb55327132565ea4a6a87_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:f076ab59f3abe061e4553a61f98a144a472297dba5ed924ca887f130e9372da9_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `sanitize-html` library. Under its default configuration, an attacker can embed malicious content within a disallowed `xmp` element. This vulnerability allows the attacker to bypass the HTML sanitization process, leading to stored Cross-Site Scripting (XSS). Successful exploitation can result in arbitrary code execution or information disclosure when a user views the affected content.
8.1 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:2b796bf55ecf7a14d1c87d829a2b20d998fc2943686373105b0a50f5053ef836_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:7e960b59f64547f7e9602b7c066a51ab52aba929726aec2bacdf486a9d4d28fd_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:a43e430a2ec0b86fb6ade361677be298b4e27444388a9bca35ddafbf9c77277c_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:d2394b121256985e5ca322aea77bb0bf999ba2d7a6f1627e62bbc125c475dbbd_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
172 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:31bd91156f49687d2efffd3be971d9ee0e16abb420b8e8b958caa88b97770020_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:a6315866c67ba350665f5a92f960a5a44e427ca37ae7505e2072af4e02c42f76_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:b3ad6fa1de658f3a40c8b183ab501ebc66b359d8cc01439d4215aa52769df213_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:bfde9ebea1fcd27b6d104d5f67db62e870878f9517ccbec2f649dd2c1af4a073_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:08fed161d59299881ff7a54db859feaf8ed7bdb8238d6cf12628ccb73575665e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:09436fe2649ca384b1bc1fd8f736fb1d71392733310e66758ed9f289e00471f9_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:3b83670e1c0e9d1f5b76bd7b75d77072bc6208646bc2201bd0bd200dbc59e34a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:927146f966e4c5c2908d29d8ab45a8f3071dbd5ebd9cf0424460a23f814a72a7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:38a3bc59511133cae56827eba879e7c82c5a974bf1f16b6e8d95e1f79821e669_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:3fa04db82e3ce6169270db0ce29107b69d8e044e0a1ab13a2bf1050b8c26d087_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:6041a918713d4464c73560b68c294a12d33f297a980d2f9d0e0cc8c300a96f24_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:98bd72ba69bdfb3070d87b3edcbd7050579a514b72cfd67c2926541ba52dbaf7_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:938abc970731c2eeda8e2b7b73e96d4dfcbf7587330c7b7e52117a577700e426_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:a0876a25ce85d7d4616212813f012422826f152b8d71065e75cd9c3e23034d8a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:c77077a0cca835a503a6529c89ab19c4027f949d361afdf8a5a259e1e87b0d55_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:d5bbf3fe886f27cdc27363dcb175e004487d9c8f36de4f1f8516fbeda3a95224_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:0f5d8cae3ba4ea4fcdc5fb9d08f797d576bc225b92af66f193bd4b1324cda4b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:2d3588825f8a714fa59b1648d0934d064165e333f322f7f31f01f07b940d42d9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:68aa571827f5331f1d5a3bd0c60ad441a18877ba11921aff2633940236bafcd4_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:9b80c9c61d4befefa7f6a65ae8c001ce7e343a1e4f251e5ebe025625d9511730_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:9b2c24401a91903f023096d2b641aa977acff423eb6770a8e4c4a81aecfd4e62_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:9d74585acc098c13f3e9dac5ae7f5ef337fa82bd7119d7f1849c5f8a50e84907_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:a6ee95d0ed82bddef084684d11fa770bd646d9be9bc65b3bc386d7c58b33975c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:f7b8654eb8bf675c8c26f0ad395d790f990308d3ad6683bb61b484c92073bbac_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:2a598e7fd07db27100d9a53a328ac9a0535865883bddd1373f4f1f2705068d2f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:4f8f0b02d0969753e156226a998d442746c238a2a50ea606a49ca0cf695b8925_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:63c02348faa7d4e26e35c69aef5453613dd607a26116823b931b89fe5311e181_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:ae224866f0085d2c00ab18a28d2aed076e455731903989a49a544abf49950d1f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:0a90a13f006ef0b271079b728ef6d54081f36ae19b6d0e9ab4dc24ea52a30fad_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:3a53629645832974a883002e53198df7c28e59dd6d1df99bf321b52d0ef84b61_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:879315f438ca43abb607d6c97f8fbd4ca2d38209b142e2d97cc0598740273252_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:c6c4d01f5fcee6cad3fc870cace92f45000624760e6e93654bb5e814afeed7bb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:50f7647620c78fd6b445379c8762f5e978113fe3552906376a24459263f27459_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:53e641f48ddc05c63da2e6bc24e9e4636a10de2c3599d8f5f78622bdebca07ca_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:57114b7a386c406715e342637558fab57afeef2e193517f99173a441f39401d5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:dcdcaa90f292f2d7ad3f10acbedfab9f7f22f3432c3156055f34760d9bf9429c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:3723b1d5c74f37cba219e203fd2026a718d4821595cb505ec6626684695da65b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:562291f52b6bce98ec8795856b808545c4fe30047b54544c7f6c2ab4678480ff_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:e6dfac9bc3e467e141a425944782f5087ed967ac4d02d8d47442e3d61ba5b882_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:f683186c2cc8be9ec09b8efdec66d6b8b1f991c7f7b9fd398dc7c3f9ab8b3079_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:2471edd63a94473c68cf37ee50de643e40003f2c5bba84063c154e4888a7f0bd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:7cef49d68df5d8efe52061a18920e07e6c7efa3016c0cea7d1747e67851f254a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:d912383405599032acffbad22bc154f63a87dd429ba882fd7a94cb82fe650d8e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:f3034211e16de48af540efe4ee460395dba0a4a544fa4f277a12840a25df1730_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:181d1decb2f16fcf6f5938027ed346aca29126687bbe6cdcc601c25087f70d11_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:ab5e4d27e23448d99a37b8c05442bb1254083cdc4ff325e721d97d80ec27346c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:ac172243d158e126594f28317e0cfb37dc1790c9f2121e95fe52506b5e05fc91_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:fd96b6284d270effa0f838d960ea4218b72b54c4718513eb523658f2f4972682_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:c59d9cd479c62730eda5d482fb2f4e9fbc17a90a5a2861b130aafe1f3a27a333_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:e547f672b14b6e8fc2ffd300b150aedbd3f6b6b36ddcad612f7c992a936a7c82_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:ead1263d538974c48790c65e44cd9cab07a62c2893b2eeb250174e7cf58d7f9d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:ed0457a57c7b39b79fb308176f45ffe678938b25fbb8c15de2cedbe54b916f64_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:9847a5752ec77e17861dcdac5546ee5c53679c80c3569609b21d9080ee3b7ef3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:d3c823e61a0682ddc85e576e86234e580992886de471035630f9c89bbad6ebb7_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:ded425ed0af88a1411a06e5191aee25c4c59f1de85b041eba95c9997686cf09e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:ee63f59942f9df04e95fc4266f0d194cd62a7ca08dd5478283884d0ab6003da7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:724377cabaa284a5197e7505a7150c89631c2f2bcc629e074c7c0be18abd8e6f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:cbf797c9e93413540b20ebee9191375ddd8185ef22dc8c9e23cc3a4c015abaf7_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:d7609d62a801cf07ef639abcd4f193b2d68967fadebbfddf2349003d7e9eaa44_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:f61fe90362f793225591eb7e2a86d5cdc6fb35aa087e9b6a6218a42b1c1d945d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:1c4de9460688800b62bad6fb13653ef4b52bf215e4d41674291193e9b8e71b24_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:4f1e59610b2fbedc56f425b3fbd8f16c9ea6ea96025f18a404fe48f6a49bdc1e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:ab0d28306dd6daa03af79bdc2ea650e59a50a03317987c4cdd0d1ee70f95b597_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:b700a8bb7ea6e4253afb8bcf94e5ad086349980ca0716a87817724d3da3fdce1_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4015f46d2172db26a348635e2e8cbd4bbcdbbaa56a4b12c232676a3d0f5bbee2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4169252c61ec70b91b10c750d5f9ecd53f5c3c906766bba9103afbac3c3f9edf_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4ab72a192553c21de76754f06fe38cf443e686e4b4edc2aa2ceb2b6b9d95bb6c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:579ef0925c6f56ed48f22121767189431bef6c4eaa72b2648a1b91488357a51d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:1868e2ea03d063b4cd64601cb0aaf5c9ea7f55e83eba2e2d4dcf6f830efeafc7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:4bfbf0bdc882979bc94d85a4aeff8caa0ec7887aec7412e32ae1442811325d06_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:844e3d69d3c26914e02612466021592a876e6e2dd6cf77084723a70f567ba0e2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:bbe04eb8fd197f15875f498e3c18b9a7a445380efb5f696422d79df99a34a881_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:2c9f9b47c01c5e5e017c583c6a09c5c52f40ef88acf789689265cb31ef328fb8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:7b5e883efde312c1571c4825b523ff04ab57af6a9f4162a36b80b973f9602c46_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:d896dd89fb924da246fc729041d9debc019d8a4210cfd3de8883834e429cca10_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:ede3e22d4e4de49789622149dec23beaa7e0569a3715ac2262929df543e05bc3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:273a393b8c62fbc4edb4bf4033c47d8b52bda56fc9cafa289d9513210840815b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:71f1b590785ce7f4577ecd687dbab9bc3c5931c568a3108eb84279c7aa892046_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:d1e1b4310eb64891c9456be7c34547bf36b0aafdeb471a49f0892d7eaf8f41f4_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:e0a7514406c7ffae080db6d4db3bbf7b77a606ea4632bf09f8301ce1d3739bb5_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:2a4c6c061d154ed9c74707a7a2e2390fde2a150f36197386c3e49c0612d345b2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:6ffcc051c955e198c6d96b59bda0ef26b5124ebbdef5357d36a84534f2c7097c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:c9258bf58373f9c6859789c8ec272cd7d702c37e063fc2ee53c66d296e7ee3d0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:d83c6bb4f2a91d2c4de3ffbf4aa8ceecb695f8491ba7586d55275c62cd1931e6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:67637c5cba3eca1597885823c6e44c13db445d0ef38751eb8364b69dbf07caac_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:68fb5c2a3c8a0d5e6bbcf2c5568969f6b13e72006d4d54bc5c57cd9a032d1bf6_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:9f5fa40c88b0f5d1ae3634632240817a91f4575f8eae9c005b8e35a55cf38003_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:fcbcee9fc7e0bbf5775a33ae9b7e3d7e48a90e2aa1cb85605e05612b6e4d4e30_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:0c165bb93ce933c7f9998a615908bfcca0b4eb38e32e24a1c823e63791b7604b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:42aa392f82bdc45a3b857d1ed44e224ddfd14db1e3dcbb74dcc850ac0540e964_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:9dcd0c0ecf1523bf05bd296edbecd85841b2753dee7a5c9df32437f9a8e31471_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:c5505c462e6b2c04a6e14bc1e22dfc42dc8adea8f6eaf0615cd58b1973b7d62e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:1a93df314c31f10da7b1345fab07b15b846e28865764178e34124f84dc967152_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:34343f81973c3fbdd8630c32d0fad597745ea10f960ea64236408e58e0f10e14_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:7b3635784ebfb6343a73c9fa6de7bea57b3aacce1c49a0f7f250a471f7b897e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:f0a7fade2853193429bab16922b2e3bbe426e14632423d6550ff7dfb66d42827_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:94950d339fa382d6911f12fc23dcaf2cdb2854c4cab654f6058f5bf0df1bb371_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:bcfbd2284cbeeba5a835aaf5a5590ddd8156bd881ca24fd0fe1465fade1f84c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:bd739ced163053224e5b0ea2f3cd577481c6b6c1162cc0fbc186f1716b4a1fbd_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:d40496f114898985cde3860b9664c34d8c32de85e4d3d846df91a6ba27a2e99c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:3f7cbe7605595d712e14d9a17717fafc6c6e334f2ad3e821c34947ec78411046_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:96775900ea90e57487da6afe59d058b33cb977a0247a1bbeb1bd07bed2816398_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:caa6b121538e074312314d9888d9b423bd225aefa4f25eb145893b9fc548c0ad_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:e59c90cfe8160b28f9d2aa9e59b1d04d742df44d2195210ebc1946ee3cb78b6f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:10c95e5c55ccc1a04e8d2ac28bd1afd3b9bb9a7e9e2a5e3e8efb301421539980_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:60a310d4464b4817845703d14e95729321b883fbfc79fbf2dd8d514bb3c675e9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:70e6c14d72f14d25a90f44043932fbd3f824b30e8ad4b36307100726b24d9c06_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:784129cf69b3bf77a907fe909fd73a2a4d0fbd947fe0037e47aa1d62c6ffcf0b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:26e58654cdd092cb812207cb4473f5f5988ebd708d95c34152c2e8c124f7297d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:40e5d9634aa7469df8247758961d486cfac3e7d7f0b59184e11ed5571b46bf40_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:5b59faed336de07965755c893cb9d0ffc52ec90f61cc8c54487f6c0cac53322e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:b59aea0c9e859025988b0f0c9b6e7748c4acf6d0b4cee35f3fabb7b84feb598b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:2368703206d833e4cb73b7e8750efb9997633a6f9accbf032426bcfcae4c00d9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:80b543b207e724e880ff932c514fe9c6a3925bfede1c31863531e4e69d050d40_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:82405a9a5715db5442dfa3d3f594888bd7b2f9c778d68357a7d8884f5ea46915_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:8fd2bda7b8d94ededf7973f76a159dd61105776a05d961ac9cfd9bee0a988213_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:4def845360282dad99181b96bcd834b4863eab39e246fda2476234c561c652ec_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:b67aec868b6366cf04f3980b15588e1a0af5c88b2248958bc3884261ad390ca0_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:ceacf3491ebec6f5613011fe8d36b66d00f8b3697832615a4d7024e23125085e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:d9f6a520b818dcccbedb94720b5979ef1cdec2e02491c76e3decb3ee18f2085d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:3e6519c0c789b946eb1b811867c41c4f204440bad5734760c0aca4e3fc602e5a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:95684cfaf4d5d91bc9fe8cfbf64a6f113e944e3f0c102d27851be5232eca0dbb_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:9cb20990af88287dd8a27de4e4ef12eb244577a1844482d26107359c6efe8efa_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:a69ebb0c7e817d44cfabd86ad13ef4cc94a8bf5b6e8a607d17b197603d64a224_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:0eea35a3af36d08db945a70c387cc38eb326f75b4ed322f09d8c91863cfe5d02_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:22c48db227cd6f2ecec746674e31ac7f5a983a418679fc91678a0aa0ebb49496_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:8e8d249c39d562f819d347f12610dda7f5c01215c41101bfd5dca008e04edf6e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:f8adb8dd40a204bacb51cd423803097a514ec8e8e9f52209e02ecf14cad622bb_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:03adc6277e2bf409391941c6f4508154abc38a0c043139978754f6d4fd32c5a8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:7e100af30ed11325cb2cbee02af09306e53df5db5847f2a4b733cd307e3cd623_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:91b474b4808b18c279c9f8eb3be8e6d1e1e47cf2b5f9553acd901c74b20bddbc_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:d56f884a9700a4f193d6f3db1895bd54745ec77e02ead3d43bd6e4fe04a2969e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:1f7ed606f69a74943aedb0a956e5a71019f8a1ab53cd3f8166be0f55a69809b9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:4841076eb82f1f1748345556ff6c4e02a17f1f63c661e375eaba720291cbaf6a_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:a79ac7dcae109aa526e2a218327dd8c5dba2b924fc27447a07199b3b2f2f67b3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:dee022821852f2d5ebdbbd9f09c9b97997a905061dadb3f78433291d462d49a7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:1a746b16f362a83f399255d925b322b3440b3d89ae4d64ab7962db3d82ee91a1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:417a31bec11c3ffb70f40fa955069d5160dc12e2426b67e1d2e35ae3f7fa06df_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:89a3cb77fdb3dcbddfe96785a9ba3fa2b6132098fce028f859663b31fcf77a34_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:b1ba0b4cd8f515895af7b9f797f6ea5b661f7254ce019ce5115375639dcd06e9_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:0827c96b922ca185b7a7321a4f504e8a5dc01aadafcfd20443060546981339a8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:b5b732dfc0ce3d740781eda9a72e1542c7a30b28b39d2be6e0ba470af06a9680_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:f74081e5eb03227ccff5717a7d139ceee6c5b610625ff7b99e639a2652bf7663_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:f80976ae4fc332600e1d8e1d70b42c038ea05d76ac2c5b1d7d0cbaddbe89140a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:4029ece83812237ce8b1d394252e9561012e8cd94af40680a90284fbea1bc32a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:63a3465a7539a8a286c846a84d63e3feca9a11758e4c0d697889b0bdeb26a25c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:81c227d7c7599b0d4357ccdc3b567f31b67bbd1198c9e7ddba1864c299bad11b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:f392bde8ce22aca058d77132cc709440442931679dbe725c52516f1cdc97b38d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:4825fab15300bc911e0b2b5c4ae342004bfcff95fa64af0fdb1085fadd132aa2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:68f879679911c2ca828551b900eca1c2f4e8caec7312fbba502fabc4778d1832_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:b4188ac728c746769ef6586663dd6d7d07db984b083397d2c76fe847ef22ea60_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:f2805fc1e6f37bc8acc3187ea8712d38f32151d584c10d5996c0ad7076cd638b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:1c943edcf23df14f254e4aabb93cbc1665bbc7902076b3f04bd80edd2fe324db_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:84c5d2b24caf68c3a6a6d078bd9f66de9fb88e769f6c09c11a248693d463ac21_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:907d6e24922d6d372bceb21ad830c254c6a9c9d6be0ac4f4edf22c236437a09d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:923a3ee0e3d5b7341b96826e465e6856855f2801dbaf381d139a632c77bda1c5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:285d2e2d103b458f0603435aedb4d779d85e48fed2267845b798f4a04a0df4c7_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:44981f5fcbc9086470143fae6e21a5de3baad2258d9f8c81accecb2faad6b2a2_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:5ba248d0bc8fcde70e210319bb962f4043e5e8ab8a5625c8f8f30ec96d47c6b7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:f681cdac28ee9ff6375fb39d7b7d12917a06043db44c16e8f84bdb9e09e7b5e7_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:2057531884d897574fc0648e5d3cf21c4549738ac5f35d8095f400cdb80049cc_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:8be0e50a132a2c974893f36b51f3f40b6d6e1f913ae0f9ee6319ef0d5ec455b7_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:a2edc5d233d1547fa2e1d01f29d8a914930735f7098289892430ba9a17d20ab7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:c81c7aeb3dd05801e279a9fcc8d6c3baf00a2ccc08eab53f8acc8bd4d2d129c4_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:25e17bf203568420587cf5907e84e4167afab84dfce549c91bea99e70290b742_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:277f4e8ac5fc292b9f0f2d123f924c6b5cbc0a2eeba3c87a0e61c5ee2399aaa9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:76766b77ed53513cd254195b25d205ab6964522816e1e3662800e38a105abdf2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:c7ace45f7cb86055e2ba18e27a660f6aa6cb4eff497204294875d5dd1d63cce3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:3780b1bc80ab7ebc3cfed06ce69346d589dc07b53cea65ad3ed92cc912284300_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:681b356709778083448892513b4559f693e002bfda897a57e2d065f736a902b5_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:d110b52ce8ea022b3d35e7c4b0ce3b646f30513cf8abb55327132565ea4a6a87_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:f076ab59f3abe061e4553a61f98a144a472297dba5ed924ca887f130e9372da9_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in OpenSSL. When processing a specially crafted PKCS#7 or S/MIME (Secure/Multipurpose Internet Mail Extensions) signed message, a heap use-after-free vulnerability in the PKCS7_verify() function can be triggered. This occurs if the SignedData digestAlgorithms field is present as an empty ASN.1 SET, leading to incorrect memory deallocation. A remote attacker could exploit this to cause application crashes, memory corruption, or potentially achieve remote code execution.
8.1 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:2b796bf55ecf7a14d1c87d829a2b20d998fc2943686373105b0a50f5053ef836_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:7e960b59f64547f7e9602b7c066a51ab52aba929726aec2bacdf486a9d4d28fd_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:a43e430a2ec0b86fb6ade361677be298b4e27444388a9bca35ddafbf9c77277c_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:d2394b121256985e5ca322aea77bb0bf999ba2d7a6f1627e62bbc125c475dbbd_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
172 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:31bd91156f49687d2efffd3be971d9ee0e16abb420b8e8b958caa88b97770020_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:a6315866c67ba350665f5a92f960a5a44e427ca37ae7505e2072af4e02c42f76_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:b3ad6fa1de658f3a40c8b183ab501ebc66b359d8cc01439d4215aa52769df213_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:bfde9ebea1fcd27b6d104d5f67db62e870878f9517ccbec2f649dd2c1af4a073_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:08fed161d59299881ff7a54db859feaf8ed7bdb8238d6cf12628ccb73575665e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:09436fe2649ca384b1bc1fd8f736fb1d71392733310e66758ed9f289e00471f9_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:3b83670e1c0e9d1f5b76bd7b75d77072bc6208646bc2201bd0bd200dbc59e34a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:927146f966e4c5c2908d29d8ab45a8f3071dbd5ebd9cf0424460a23f814a72a7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:38a3bc59511133cae56827eba879e7c82c5a974bf1f16b6e8d95e1f79821e669_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:3fa04db82e3ce6169270db0ce29107b69d8e044e0a1ab13a2bf1050b8c26d087_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:6041a918713d4464c73560b68c294a12d33f297a980d2f9d0e0cc8c300a96f24_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:98bd72ba69bdfb3070d87b3edcbd7050579a514b72cfd67c2926541ba52dbaf7_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:938abc970731c2eeda8e2b7b73e96d4dfcbf7587330c7b7e52117a577700e426_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:a0876a25ce85d7d4616212813f012422826f152b8d71065e75cd9c3e23034d8a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:c77077a0cca835a503a6529c89ab19c4027f949d361afdf8a5a259e1e87b0d55_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:d5bbf3fe886f27cdc27363dcb175e004487d9c8f36de4f1f8516fbeda3a95224_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:0f5d8cae3ba4ea4fcdc5fb9d08f797d576bc225b92af66f193bd4b1324cda4b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:2d3588825f8a714fa59b1648d0934d064165e333f322f7f31f01f07b940d42d9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:68aa571827f5331f1d5a3bd0c60ad441a18877ba11921aff2633940236bafcd4_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:9b80c9c61d4befefa7f6a65ae8c001ce7e343a1e4f251e5ebe025625d9511730_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:9b2c24401a91903f023096d2b641aa977acff423eb6770a8e4c4a81aecfd4e62_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:9d74585acc098c13f3e9dac5ae7f5ef337fa82bd7119d7f1849c5f8a50e84907_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:a6ee95d0ed82bddef084684d11fa770bd646d9be9bc65b3bc386d7c58b33975c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:f7b8654eb8bf675c8c26f0ad395d790f990308d3ad6683bb61b484c92073bbac_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:2a598e7fd07db27100d9a53a328ac9a0535865883bddd1373f4f1f2705068d2f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:4f8f0b02d0969753e156226a998d442746c238a2a50ea606a49ca0cf695b8925_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:63c02348faa7d4e26e35c69aef5453613dd607a26116823b931b89fe5311e181_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:ae224866f0085d2c00ab18a28d2aed076e455731903989a49a544abf49950d1f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:0a90a13f006ef0b271079b728ef6d54081f36ae19b6d0e9ab4dc24ea52a30fad_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:3a53629645832974a883002e53198df7c28e59dd6d1df99bf321b52d0ef84b61_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:879315f438ca43abb607d6c97f8fbd4ca2d38209b142e2d97cc0598740273252_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:c6c4d01f5fcee6cad3fc870cace92f45000624760e6e93654bb5e814afeed7bb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:50f7647620c78fd6b445379c8762f5e978113fe3552906376a24459263f27459_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:53e641f48ddc05c63da2e6bc24e9e4636a10de2c3599d8f5f78622bdebca07ca_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:57114b7a386c406715e342637558fab57afeef2e193517f99173a441f39401d5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:dcdcaa90f292f2d7ad3f10acbedfab9f7f22f3432c3156055f34760d9bf9429c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:3723b1d5c74f37cba219e203fd2026a718d4821595cb505ec6626684695da65b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:562291f52b6bce98ec8795856b808545c4fe30047b54544c7f6c2ab4678480ff_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:e6dfac9bc3e467e141a425944782f5087ed967ac4d02d8d47442e3d61ba5b882_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:f683186c2cc8be9ec09b8efdec66d6b8b1f991c7f7b9fd398dc7c3f9ab8b3079_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:2471edd63a94473c68cf37ee50de643e40003f2c5bba84063c154e4888a7f0bd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:7cef49d68df5d8efe52061a18920e07e6c7efa3016c0cea7d1747e67851f254a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:d912383405599032acffbad22bc154f63a87dd429ba882fd7a94cb82fe650d8e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:f3034211e16de48af540efe4ee460395dba0a4a544fa4f277a12840a25df1730_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:181d1decb2f16fcf6f5938027ed346aca29126687bbe6cdcc601c25087f70d11_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:ab5e4d27e23448d99a37b8c05442bb1254083cdc4ff325e721d97d80ec27346c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:ac172243d158e126594f28317e0cfb37dc1790c9f2121e95fe52506b5e05fc91_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:fd96b6284d270effa0f838d960ea4218b72b54c4718513eb523658f2f4972682_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:c59d9cd479c62730eda5d482fb2f4e9fbc17a90a5a2861b130aafe1f3a27a333_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:e547f672b14b6e8fc2ffd300b150aedbd3f6b6b36ddcad612f7c992a936a7c82_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:ead1263d538974c48790c65e44cd9cab07a62c2893b2eeb250174e7cf58d7f9d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:ed0457a57c7b39b79fb308176f45ffe678938b25fbb8c15de2cedbe54b916f64_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:9847a5752ec77e17861dcdac5546ee5c53679c80c3569609b21d9080ee3b7ef3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:d3c823e61a0682ddc85e576e86234e580992886de471035630f9c89bbad6ebb7_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:ded425ed0af88a1411a06e5191aee25c4c59f1de85b041eba95c9997686cf09e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:ee63f59942f9df04e95fc4266f0d194cd62a7ca08dd5478283884d0ab6003da7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:724377cabaa284a5197e7505a7150c89631c2f2bcc629e074c7c0be18abd8e6f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:cbf797c9e93413540b20ebee9191375ddd8185ef22dc8c9e23cc3a4c015abaf7_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:d7609d62a801cf07ef639abcd4f193b2d68967fadebbfddf2349003d7e9eaa44_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:f61fe90362f793225591eb7e2a86d5cdc6fb35aa087e9b6a6218a42b1c1d945d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:1c4de9460688800b62bad6fb13653ef4b52bf215e4d41674291193e9b8e71b24_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:4f1e59610b2fbedc56f425b3fbd8f16c9ea6ea96025f18a404fe48f6a49bdc1e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:ab0d28306dd6daa03af79bdc2ea650e59a50a03317987c4cdd0d1ee70f95b597_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:b700a8bb7ea6e4253afb8bcf94e5ad086349980ca0716a87817724d3da3fdce1_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4015f46d2172db26a348635e2e8cbd4bbcdbbaa56a4b12c232676a3d0f5bbee2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4169252c61ec70b91b10c750d5f9ecd53f5c3c906766bba9103afbac3c3f9edf_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4ab72a192553c21de76754f06fe38cf443e686e4b4edc2aa2ceb2b6b9d95bb6c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:579ef0925c6f56ed48f22121767189431bef6c4eaa72b2648a1b91488357a51d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:1868e2ea03d063b4cd64601cb0aaf5c9ea7f55e83eba2e2d4dcf6f830efeafc7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:4bfbf0bdc882979bc94d85a4aeff8caa0ec7887aec7412e32ae1442811325d06_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:844e3d69d3c26914e02612466021592a876e6e2dd6cf77084723a70f567ba0e2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:bbe04eb8fd197f15875f498e3c18b9a7a445380efb5f696422d79df99a34a881_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:2c9f9b47c01c5e5e017c583c6a09c5c52f40ef88acf789689265cb31ef328fb8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:7b5e883efde312c1571c4825b523ff04ab57af6a9f4162a36b80b973f9602c46_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:d896dd89fb924da246fc729041d9debc019d8a4210cfd3de8883834e429cca10_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:ede3e22d4e4de49789622149dec23beaa7e0569a3715ac2262929df543e05bc3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:273a393b8c62fbc4edb4bf4033c47d8b52bda56fc9cafa289d9513210840815b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:71f1b590785ce7f4577ecd687dbab9bc3c5931c568a3108eb84279c7aa892046_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:d1e1b4310eb64891c9456be7c34547bf36b0aafdeb471a49f0892d7eaf8f41f4_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:e0a7514406c7ffae080db6d4db3bbf7b77a606ea4632bf09f8301ce1d3739bb5_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:2a4c6c061d154ed9c74707a7a2e2390fde2a150f36197386c3e49c0612d345b2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:6ffcc051c955e198c6d96b59bda0ef26b5124ebbdef5357d36a84534f2c7097c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:c9258bf58373f9c6859789c8ec272cd7d702c37e063fc2ee53c66d296e7ee3d0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:d83c6bb4f2a91d2c4de3ffbf4aa8ceecb695f8491ba7586d55275c62cd1931e6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:67637c5cba3eca1597885823c6e44c13db445d0ef38751eb8364b69dbf07caac_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:68fb5c2a3c8a0d5e6bbcf2c5568969f6b13e72006d4d54bc5c57cd9a032d1bf6_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:9f5fa40c88b0f5d1ae3634632240817a91f4575f8eae9c005b8e35a55cf38003_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:fcbcee9fc7e0bbf5775a33ae9b7e3d7e48a90e2aa1cb85605e05612b6e4d4e30_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:0c165bb93ce933c7f9998a615908bfcca0b4eb38e32e24a1c823e63791b7604b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:42aa392f82bdc45a3b857d1ed44e224ddfd14db1e3dcbb74dcc850ac0540e964_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:9dcd0c0ecf1523bf05bd296edbecd85841b2753dee7a5c9df32437f9a8e31471_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:c5505c462e6b2c04a6e14bc1e22dfc42dc8adea8f6eaf0615cd58b1973b7d62e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:1a93df314c31f10da7b1345fab07b15b846e28865764178e34124f84dc967152_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:34343f81973c3fbdd8630c32d0fad597745ea10f960ea64236408e58e0f10e14_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:7b3635784ebfb6343a73c9fa6de7bea57b3aacce1c49a0f7f250a471f7b897e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:f0a7fade2853193429bab16922b2e3bbe426e14632423d6550ff7dfb66d42827_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:94950d339fa382d6911f12fc23dcaf2cdb2854c4cab654f6058f5bf0df1bb371_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:bcfbd2284cbeeba5a835aaf5a5590ddd8156bd881ca24fd0fe1465fade1f84c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:bd739ced163053224e5b0ea2f3cd577481c6b6c1162cc0fbc186f1716b4a1fbd_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:d40496f114898985cde3860b9664c34d8c32de85e4d3d846df91a6ba27a2e99c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:3f7cbe7605595d712e14d9a17717fafc6c6e334f2ad3e821c34947ec78411046_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:96775900ea90e57487da6afe59d058b33cb977a0247a1bbeb1bd07bed2816398_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:caa6b121538e074312314d9888d9b423bd225aefa4f25eb145893b9fc548c0ad_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:e59c90cfe8160b28f9d2aa9e59b1d04d742df44d2195210ebc1946ee3cb78b6f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:10c95e5c55ccc1a04e8d2ac28bd1afd3b9bb9a7e9e2a5e3e8efb301421539980_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:60a310d4464b4817845703d14e95729321b883fbfc79fbf2dd8d514bb3c675e9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:70e6c14d72f14d25a90f44043932fbd3f824b30e8ad4b36307100726b24d9c06_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:784129cf69b3bf77a907fe909fd73a2a4d0fbd947fe0037e47aa1d62c6ffcf0b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:26e58654cdd092cb812207cb4473f5f5988ebd708d95c34152c2e8c124f7297d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:40e5d9634aa7469df8247758961d486cfac3e7d7f0b59184e11ed5571b46bf40_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:5b59faed336de07965755c893cb9d0ffc52ec90f61cc8c54487f6c0cac53322e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:b59aea0c9e859025988b0f0c9b6e7748c4acf6d0b4cee35f3fabb7b84feb598b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:2368703206d833e4cb73b7e8750efb9997633a6f9accbf032426bcfcae4c00d9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:80b543b207e724e880ff932c514fe9c6a3925bfede1c31863531e4e69d050d40_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:82405a9a5715db5442dfa3d3f594888bd7b2f9c778d68357a7d8884f5ea46915_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:8fd2bda7b8d94ededf7973f76a159dd61105776a05d961ac9cfd9bee0a988213_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:4def845360282dad99181b96bcd834b4863eab39e246fda2476234c561c652ec_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:b67aec868b6366cf04f3980b15588e1a0af5c88b2248958bc3884261ad390ca0_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:ceacf3491ebec6f5613011fe8d36b66d00f8b3697832615a4d7024e23125085e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:d9f6a520b818dcccbedb94720b5979ef1cdec2e02491c76e3decb3ee18f2085d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:3e6519c0c789b946eb1b811867c41c4f204440bad5734760c0aca4e3fc602e5a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:95684cfaf4d5d91bc9fe8cfbf64a6f113e944e3f0c102d27851be5232eca0dbb_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:9cb20990af88287dd8a27de4e4ef12eb244577a1844482d26107359c6efe8efa_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:a69ebb0c7e817d44cfabd86ad13ef4cc94a8bf5b6e8a607d17b197603d64a224_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:0eea35a3af36d08db945a70c387cc38eb326f75b4ed322f09d8c91863cfe5d02_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:22c48db227cd6f2ecec746674e31ac7f5a983a418679fc91678a0aa0ebb49496_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:8e8d249c39d562f819d347f12610dda7f5c01215c41101bfd5dca008e04edf6e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:f8adb8dd40a204bacb51cd423803097a514ec8e8e9f52209e02ecf14cad622bb_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:03adc6277e2bf409391941c6f4508154abc38a0c043139978754f6d4fd32c5a8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:7e100af30ed11325cb2cbee02af09306e53df5db5847f2a4b733cd307e3cd623_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:91b474b4808b18c279c9f8eb3be8e6d1e1e47cf2b5f9553acd901c74b20bddbc_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:d56f884a9700a4f193d6f3db1895bd54745ec77e02ead3d43bd6e4fe04a2969e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:1f7ed606f69a74943aedb0a956e5a71019f8a1ab53cd3f8166be0f55a69809b9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:4841076eb82f1f1748345556ff6c4e02a17f1f63c661e375eaba720291cbaf6a_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:a79ac7dcae109aa526e2a218327dd8c5dba2b924fc27447a07199b3b2f2f67b3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:dee022821852f2d5ebdbbd9f09c9b97997a905061dadb3f78433291d462d49a7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:1a746b16f362a83f399255d925b322b3440b3d89ae4d64ab7962db3d82ee91a1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:417a31bec11c3ffb70f40fa955069d5160dc12e2426b67e1d2e35ae3f7fa06df_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:89a3cb77fdb3dcbddfe96785a9ba3fa2b6132098fce028f859663b31fcf77a34_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:b1ba0b4cd8f515895af7b9f797f6ea5b661f7254ce019ce5115375639dcd06e9_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:0827c96b922ca185b7a7321a4f504e8a5dc01aadafcfd20443060546981339a8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:b5b732dfc0ce3d740781eda9a72e1542c7a30b28b39d2be6e0ba470af06a9680_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:f74081e5eb03227ccff5717a7d139ceee6c5b610625ff7b99e639a2652bf7663_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:f80976ae4fc332600e1d8e1d70b42c038ea05d76ac2c5b1d7d0cbaddbe89140a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:4029ece83812237ce8b1d394252e9561012e8cd94af40680a90284fbea1bc32a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:63a3465a7539a8a286c846a84d63e3feca9a11758e4c0d697889b0bdeb26a25c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:81c227d7c7599b0d4357ccdc3b567f31b67bbd1198c9e7ddba1864c299bad11b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:f392bde8ce22aca058d77132cc709440442931679dbe725c52516f1cdc97b38d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:4825fab15300bc911e0b2b5c4ae342004bfcff95fa64af0fdb1085fadd132aa2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:68f879679911c2ca828551b900eca1c2f4e8caec7312fbba502fabc4778d1832_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:b4188ac728c746769ef6586663dd6d7d07db984b083397d2c76fe847ef22ea60_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:f2805fc1e6f37bc8acc3187ea8712d38f32151d584c10d5996c0ad7076cd638b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:1c943edcf23df14f254e4aabb93cbc1665bbc7902076b3f04bd80edd2fe324db_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:84c5d2b24caf68c3a6a6d078bd9f66de9fb88e769f6c09c11a248693d463ac21_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:907d6e24922d6d372bceb21ad830c254c6a9c9d6be0ac4f4edf22c236437a09d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:923a3ee0e3d5b7341b96826e465e6856855f2801dbaf381d139a632c77bda1c5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:285d2e2d103b458f0603435aedb4d779d85e48fed2267845b798f4a04a0df4c7_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:44981f5fcbc9086470143fae6e21a5de3baad2258d9f8c81accecb2faad6b2a2_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:5ba248d0bc8fcde70e210319bb962f4043e5e8ab8a5625c8f8f30ec96d47c6b7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:f681cdac28ee9ff6375fb39d7b7d12917a06043db44c16e8f84bdb9e09e7b5e7_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:2057531884d897574fc0648e5d3cf21c4549738ac5f35d8095f400cdb80049cc_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:8be0e50a132a2c974893f36b51f3f40b6d6e1f913ae0f9ee6319ef0d5ec455b7_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:a2edc5d233d1547fa2e1d01f29d8a914930735f7098289892430ba9a17d20ab7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:c81c7aeb3dd05801e279a9fcc8d6c3baf00a2ccc08eab53f8acc8bd4d2d129c4_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:25e17bf203568420587cf5907e84e4167afab84dfce549c91bea99e70290b742_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:277f4e8ac5fc292b9f0f2d123f924c6b5cbc0a2eeba3c87a0e61c5ee2399aaa9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:76766b77ed53513cd254195b25d205ab6964522816e1e3662800e38a105abdf2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:c7ace45f7cb86055e2ba18e27a660f6aa6cb4eff497204294875d5dd1d63cce3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:3780b1bc80ab7ebc3cfed06ce69346d589dc07b53cea65ad3ed92cc912284300_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:681b356709778083448892513b4559f693e002bfda897a57e2d065f736a902b5_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:d110b52ce8ea022b3d35e7c4b0ce3b646f30513cf8abb55327132565ea4a6a87_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:f076ab59f3abe061e4553a61f98a144a472297dba5ed924ca887f130e9372da9_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. Source-address validation can be skipped when an SSH server configuration uses an authentication callback type other than public key, allowing authorization bypass in misconfigured servers. This is a follow-on to incomplete coverage from the CVE-2024-45337 fix.
7.1 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:26e58654cdd092cb812207cb4473f5f5988ebd708d95c34152c2e8c124f7297d_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:40e5d9634aa7469df8247758961d486cfac3e7d7f0b59184e11ed5571b46bf40_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:5b59faed336de07965755c893cb9d0ffc52ec90f61cc8c54487f6c0cac53322e_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:b59aea0c9e859025988b0f0c9b6e7748c4acf6d0b4cee35f3fabb7b84feb598b_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:03adc6277e2bf409391941c6f4508154abc38a0c043139978754f6d4fd32c5a8_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:7e100af30ed11325cb2cbee02af09306e53df5db5847f2a4b733cd307e3cd623_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:91b474b4808b18c279c9f8eb3be8e6d1e1e47cf2b5f9553acd901c74b20bddbc_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:d56f884a9700a4f193d6f3db1895bd54745ec77e02ead3d43bd6e4fe04a2969e_s390x | — |
Vendor Fix
fix
|
Known not affected
168 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:31bd91156f49687d2efffd3be971d9ee0e16abb420b8e8b958caa88b97770020_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:a6315866c67ba350665f5a92f960a5a44e427ca37ae7505e2072af4e02c42f76_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:b3ad6fa1de658f3a40c8b183ab501ebc66b359d8cc01439d4215aa52769df213_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:bfde9ebea1fcd27b6d104d5f67db62e870878f9517ccbec2f649dd2c1af4a073_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:08fed161d59299881ff7a54db859feaf8ed7bdb8238d6cf12628ccb73575665e_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:09436fe2649ca384b1bc1fd8f736fb1d71392733310e66758ed9f289e00471f9_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:3b83670e1c0e9d1f5b76bd7b75d77072bc6208646bc2201bd0bd200dbc59e34a_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:927146f966e4c5c2908d29d8ab45a8f3071dbd5ebd9cf0424460a23f814a72a7_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:38a3bc59511133cae56827eba879e7c82c5a974bf1f16b6e8d95e1f79821e669_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:3fa04db82e3ce6169270db0ce29107b69d8e044e0a1ab13a2bf1050b8c26d087_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:6041a918713d4464c73560b68c294a12d33f297a980d2f9d0e0cc8c300a96f24_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:98bd72ba69bdfb3070d87b3edcbd7050579a514b72cfd67c2926541ba52dbaf7_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:938abc970731c2eeda8e2b7b73e96d4dfcbf7587330c7b7e52117a577700e426_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:a0876a25ce85d7d4616212813f012422826f152b8d71065e75cd9c3e23034d8a_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:c77077a0cca835a503a6529c89ab19c4027f949d361afdf8a5a259e1e87b0d55_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:d5bbf3fe886f27cdc27363dcb175e004487d9c8f36de4f1f8516fbeda3a95224_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:0f5d8cae3ba4ea4fcdc5fb9d08f797d576bc225b92af66f193bd4b1324cda4b9_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:2d3588825f8a714fa59b1648d0934d064165e333f322f7f31f01f07b940d42d9_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:68aa571827f5331f1d5a3bd0c60ad441a18877ba11921aff2633940236bafcd4_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:9b80c9c61d4befefa7f6a65ae8c001ce7e343a1e4f251e5ebe025625d9511730_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:9b2c24401a91903f023096d2b641aa977acff423eb6770a8e4c4a81aecfd4e62_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:9d74585acc098c13f3e9dac5ae7f5ef337fa82bd7119d7f1849c5f8a50e84907_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:a6ee95d0ed82bddef084684d11fa770bd646d9be9bc65b3bc386d7c58b33975c_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:f7b8654eb8bf675c8c26f0ad395d790f990308d3ad6683bb61b484c92073bbac_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:2a598e7fd07db27100d9a53a328ac9a0535865883bddd1373f4f1f2705068d2f_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:4f8f0b02d0969753e156226a998d442746c238a2a50ea606a49ca0cf695b8925_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:63c02348faa7d4e26e35c69aef5453613dd607a26116823b931b89fe5311e181_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:ae224866f0085d2c00ab18a28d2aed076e455731903989a49a544abf49950d1f_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:0a90a13f006ef0b271079b728ef6d54081f36ae19b6d0e9ab4dc24ea52a30fad_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:3a53629645832974a883002e53198df7c28e59dd6d1df99bf321b52d0ef84b61_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:879315f438ca43abb607d6c97f8fbd4ca2d38209b142e2d97cc0598740273252_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:c6c4d01f5fcee6cad3fc870cace92f45000624760e6e93654bb5e814afeed7bb_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:50f7647620c78fd6b445379c8762f5e978113fe3552906376a24459263f27459_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:53e641f48ddc05c63da2e6bc24e9e4636a10de2c3599d8f5f78622bdebca07ca_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:57114b7a386c406715e342637558fab57afeef2e193517f99173a441f39401d5_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:dcdcaa90f292f2d7ad3f10acbedfab9f7f22f3432c3156055f34760d9bf9429c_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:3723b1d5c74f37cba219e203fd2026a718d4821595cb505ec6626684695da65b_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:562291f52b6bce98ec8795856b808545c4fe30047b54544c7f6c2ab4678480ff_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:e6dfac9bc3e467e141a425944782f5087ed967ac4d02d8d47442e3d61ba5b882_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:f683186c2cc8be9ec09b8efdec66d6b8b1f991c7f7b9fd398dc7c3f9ab8b3079_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:2471edd63a94473c68cf37ee50de643e40003f2c5bba84063c154e4888a7f0bd_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:7cef49d68df5d8efe52061a18920e07e6c7efa3016c0cea7d1747e67851f254a_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:d912383405599032acffbad22bc154f63a87dd429ba882fd7a94cb82fe650d8e_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:f3034211e16de48af540efe4ee460395dba0a4a544fa4f277a12840a25df1730_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:181d1decb2f16fcf6f5938027ed346aca29126687bbe6cdcc601c25087f70d11_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:ab5e4d27e23448d99a37b8c05442bb1254083cdc4ff325e721d97d80ec27346c_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:ac172243d158e126594f28317e0cfb37dc1790c9f2121e95fe52506b5e05fc91_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:fd96b6284d270effa0f838d960ea4218b72b54c4718513eb523658f2f4972682_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:c59d9cd479c62730eda5d482fb2f4e9fbc17a90a5a2861b130aafe1f3a27a333_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:e547f672b14b6e8fc2ffd300b150aedbd3f6b6b36ddcad612f7c992a936a7c82_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:ead1263d538974c48790c65e44cd9cab07a62c2893b2eeb250174e7cf58d7f9d_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:ed0457a57c7b39b79fb308176f45ffe678938b25fbb8c15de2cedbe54b916f64_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:9847a5752ec77e17861dcdac5546ee5c53679c80c3569609b21d9080ee3b7ef3_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:d3c823e61a0682ddc85e576e86234e580992886de471035630f9c89bbad6ebb7_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:ded425ed0af88a1411a06e5191aee25c4c59f1de85b041eba95c9997686cf09e_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:ee63f59942f9df04e95fc4266f0d194cd62a7ca08dd5478283884d0ab6003da7_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:724377cabaa284a5197e7505a7150c89631c2f2bcc629e074c7c0be18abd8e6f_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:cbf797c9e93413540b20ebee9191375ddd8185ef22dc8c9e23cc3a4c015abaf7_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:d7609d62a801cf07ef639abcd4f193b2d68967fadebbfddf2349003d7e9eaa44_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:f61fe90362f793225591eb7e2a86d5cdc6fb35aa087e9b6a6218a42b1c1d945d_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:1c4de9460688800b62bad6fb13653ef4b52bf215e4d41674291193e9b8e71b24_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:4f1e59610b2fbedc56f425b3fbd8f16c9ea6ea96025f18a404fe48f6a49bdc1e_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:ab0d28306dd6daa03af79bdc2ea650e59a50a03317987c4cdd0d1ee70f95b597_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:b700a8bb7ea6e4253afb8bcf94e5ad086349980ca0716a87817724d3da3fdce1_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4015f46d2172db26a348635e2e8cbd4bbcdbbaa56a4b12c232676a3d0f5bbee2_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4169252c61ec70b91b10c750d5f9ecd53f5c3c906766bba9103afbac3c3f9edf_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4ab72a192553c21de76754f06fe38cf443e686e4b4edc2aa2ceb2b6b9d95bb6c_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:579ef0925c6f56ed48f22121767189431bef6c4eaa72b2648a1b91488357a51d_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:2b796bf55ecf7a14d1c87d829a2b20d998fc2943686373105b0a50f5053ef836_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:7e960b59f64547f7e9602b7c066a51ab52aba929726aec2bacdf486a9d4d28fd_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:a43e430a2ec0b86fb6ade361677be298b4e27444388a9bca35ddafbf9c77277c_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:d2394b121256985e5ca322aea77bb0bf999ba2d7a6f1627e62bbc125c475dbbd_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:1868e2ea03d063b4cd64601cb0aaf5c9ea7f55e83eba2e2d4dcf6f830efeafc7_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:4bfbf0bdc882979bc94d85a4aeff8caa0ec7887aec7412e32ae1442811325d06_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:844e3d69d3c26914e02612466021592a876e6e2dd6cf77084723a70f567ba0e2_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:bbe04eb8fd197f15875f498e3c18b9a7a445380efb5f696422d79df99a34a881_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:2c9f9b47c01c5e5e017c583c6a09c5c52f40ef88acf789689265cb31ef328fb8_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:7b5e883efde312c1571c4825b523ff04ab57af6a9f4162a36b80b973f9602c46_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:d896dd89fb924da246fc729041d9debc019d8a4210cfd3de8883834e429cca10_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:ede3e22d4e4de49789622149dec23beaa7e0569a3715ac2262929df543e05bc3_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:273a393b8c62fbc4edb4bf4033c47d8b52bda56fc9cafa289d9513210840815b_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:71f1b590785ce7f4577ecd687dbab9bc3c5931c568a3108eb84279c7aa892046_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:d1e1b4310eb64891c9456be7c34547bf36b0aafdeb471a49f0892d7eaf8f41f4_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:e0a7514406c7ffae080db6d4db3bbf7b77a606ea4632bf09f8301ce1d3739bb5_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:2a4c6c061d154ed9c74707a7a2e2390fde2a150f36197386c3e49c0612d345b2_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:6ffcc051c955e198c6d96b59bda0ef26b5124ebbdef5357d36a84534f2c7097c_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:c9258bf58373f9c6859789c8ec272cd7d702c37e063fc2ee53c66d296e7ee3d0_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:d83c6bb4f2a91d2c4de3ffbf4aa8ceecb695f8491ba7586d55275c62cd1931e6_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:67637c5cba3eca1597885823c6e44c13db445d0ef38751eb8364b69dbf07caac_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:68fb5c2a3c8a0d5e6bbcf2c5568969f6b13e72006d4d54bc5c57cd9a032d1bf6_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:9f5fa40c88b0f5d1ae3634632240817a91f4575f8eae9c005b8e35a55cf38003_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:fcbcee9fc7e0bbf5775a33ae9b7e3d7e48a90e2aa1cb85605e05612b6e4d4e30_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:0c165bb93ce933c7f9998a615908bfcca0b4eb38e32e24a1c823e63791b7604b_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:42aa392f82bdc45a3b857d1ed44e224ddfd14db1e3dcbb74dcc850ac0540e964_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:9dcd0c0ecf1523bf05bd296edbecd85841b2753dee7a5c9df32437f9a8e31471_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:c5505c462e6b2c04a6e14bc1e22dfc42dc8adea8f6eaf0615cd58b1973b7d62e_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:1a93df314c31f10da7b1345fab07b15b846e28865764178e34124f84dc967152_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:34343f81973c3fbdd8630c32d0fad597745ea10f960ea64236408e58e0f10e14_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:7b3635784ebfb6343a73c9fa6de7bea57b3aacce1c49a0f7f250a471f7b897e3_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:f0a7fade2853193429bab16922b2e3bbe426e14632423d6550ff7dfb66d42827_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:94950d339fa382d6911f12fc23dcaf2cdb2854c4cab654f6058f5bf0df1bb371_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:bcfbd2284cbeeba5a835aaf5a5590ddd8156bd881ca24fd0fe1465fade1f84c2_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:bd739ced163053224e5b0ea2f3cd577481c6b6c1162cc0fbc186f1716b4a1fbd_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:d40496f114898985cde3860b9664c34d8c32de85e4d3d846df91a6ba27a2e99c_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:3f7cbe7605595d712e14d9a17717fafc6c6e334f2ad3e821c34947ec78411046_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:96775900ea90e57487da6afe59d058b33cb977a0247a1bbeb1bd07bed2816398_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:caa6b121538e074312314d9888d9b423bd225aefa4f25eb145893b9fc548c0ad_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:e59c90cfe8160b28f9d2aa9e59b1d04d742df44d2195210ebc1946ee3cb78b6f_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:10c95e5c55ccc1a04e8d2ac28bd1afd3b9bb9a7e9e2a5e3e8efb301421539980_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:60a310d4464b4817845703d14e95729321b883fbfc79fbf2dd8d514bb3c675e9_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:70e6c14d72f14d25a90f44043932fbd3f824b30e8ad4b36307100726b24d9c06_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:784129cf69b3bf77a907fe909fd73a2a4d0fbd947fe0037e47aa1d62c6ffcf0b_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:2368703206d833e4cb73b7e8750efb9997633a6f9accbf032426bcfcae4c00d9_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:80b543b207e724e880ff932c514fe9c6a3925bfede1c31863531e4e69d050d40_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:82405a9a5715db5442dfa3d3f594888bd7b2f9c778d68357a7d8884f5ea46915_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:8fd2bda7b8d94ededf7973f76a159dd61105776a05d961ac9cfd9bee0a988213_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:4def845360282dad99181b96bcd834b4863eab39e246fda2476234c561c652ec_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:b67aec868b6366cf04f3980b15588e1a0af5c88b2248958bc3884261ad390ca0_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:ceacf3491ebec6f5613011fe8d36b66d00f8b3697832615a4d7024e23125085e_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:d9f6a520b818dcccbedb94720b5979ef1cdec2e02491c76e3decb3ee18f2085d_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:3e6519c0c789b946eb1b811867c41c4f204440bad5734760c0aca4e3fc602e5a_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:95684cfaf4d5d91bc9fe8cfbf64a6f113e944e3f0c102d27851be5232eca0dbb_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:9cb20990af88287dd8a27de4e4ef12eb244577a1844482d26107359c6efe8efa_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:a69ebb0c7e817d44cfabd86ad13ef4cc94a8bf5b6e8a607d17b197603d64a224_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:0eea35a3af36d08db945a70c387cc38eb326f75b4ed322f09d8c91863cfe5d02_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:22c48db227cd6f2ecec746674e31ac7f5a983a418679fc91678a0aa0ebb49496_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:8e8d249c39d562f819d347f12610dda7f5c01215c41101bfd5dca008e04edf6e_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:f8adb8dd40a204bacb51cd423803097a514ec8e8e9f52209e02ecf14cad622bb_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:1f7ed606f69a74943aedb0a956e5a71019f8a1ab53cd3f8166be0f55a69809b9_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:4841076eb82f1f1748345556ff6c4e02a17f1f63c661e375eaba720291cbaf6a_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:a79ac7dcae109aa526e2a218327dd8c5dba2b924fc27447a07199b3b2f2f67b3_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:dee022821852f2d5ebdbbd9f09c9b97997a905061dadb3f78433291d462d49a7_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:1a746b16f362a83f399255d925b322b3440b3d89ae4d64ab7962db3d82ee91a1_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:417a31bec11c3ffb70f40fa955069d5160dc12e2426b67e1d2e35ae3f7fa06df_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:89a3cb77fdb3dcbddfe96785a9ba3fa2b6132098fce028f859663b31fcf77a34_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:b1ba0b4cd8f515895af7b9f797f6ea5b661f7254ce019ce5115375639dcd06e9_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:0827c96b922ca185b7a7321a4f504e8a5dc01aadafcfd20443060546981339a8_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:b5b732dfc0ce3d740781eda9a72e1542c7a30b28b39d2be6e0ba470af06a9680_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:f74081e5eb03227ccff5717a7d139ceee6c5b610625ff7b99e639a2652bf7663_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:f80976ae4fc332600e1d8e1d70b42c038ea05d76ac2c5b1d7d0cbaddbe89140a_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:4029ece83812237ce8b1d394252e9561012e8cd94af40680a90284fbea1bc32a_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:63a3465a7539a8a286c846a84d63e3feca9a11758e4c0d697889b0bdeb26a25c_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:81c227d7c7599b0d4357ccdc3b567f31b67bbd1198c9e7ddba1864c299bad11b_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:f392bde8ce22aca058d77132cc709440442931679dbe725c52516f1cdc97b38d_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:4825fab15300bc911e0b2b5c4ae342004bfcff95fa64af0fdb1085fadd132aa2_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:68f879679911c2ca828551b900eca1c2f4e8caec7312fbba502fabc4778d1832_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:b4188ac728c746769ef6586663dd6d7d07db984b083397d2c76fe847ef22ea60_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:f2805fc1e6f37bc8acc3187ea8712d38f32151d584c10d5996c0ad7076cd638b_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:1c943edcf23df14f254e4aabb93cbc1665bbc7902076b3f04bd80edd2fe324db_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:84c5d2b24caf68c3a6a6d078bd9f66de9fb88e769f6c09c11a248693d463ac21_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:907d6e24922d6d372bceb21ad830c254c6a9c9d6be0ac4f4edf22c236437a09d_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:923a3ee0e3d5b7341b96826e465e6856855f2801dbaf381d139a632c77bda1c5_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:285d2e2d103b458f0603435aedb4d779d85e48fed2267845b798f4a04a0df4c7_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:44981f5fcbc9086470143fae6e21a5de3baad2258d9f8c81accecb2faad6b2a2_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:5ba248d0bc8fcde70e210319bb962f4043e5e8ab8a5625c8f8f30ec96d47c6b7_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:f681cdac28ee9ff6375fb39d7b7d12917a06043db44c16e8f84bdb9e09e7b5e7_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:2057531884d897574fc0648e5d3cf21c4549738ac5f35d8095f400cdb80049cc_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:8be0e50a132a2c974893f36b51f3f40b6d6e1f913ae0f9ee6319ef0d5ec455b7_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:a2edc5d233d1547fa2e1d01f29d8a914930735f7098289892430ba9a17d20ab7_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:c81c7aeb3dd05801e279a9fcc8d6c3baf00a2ccc08eab53f8acc8bd4d2d129c4_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:25e17bf203568420587cf5907e84e4167afab84dfce549c91bea99e70290b742_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:277f4e8ac5fc292b9f0f2d123f924c6b5cbc0a2eeba3c87a0e61c5ee2399aaa9_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:76766b77ed53513cd254195b25d205ab6964522816e1e3662800e38a105abdf2_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:c7ace45f7cb86055e2ba18e27a660f6aa6cb4eff497204294875d5dd1d63cce3_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:3780b1bc80ab7ebc3cfed06ce69346d589dc07b53cea65ad3ed92cc912284300_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:681b356709778083448892513b4559f693e002bfda897a57e2d065f736a902b5_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:d110b52ce8ea022b3d35e7c4b0ce3b646f30513cf8abb55327132565ea4a6a87_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:f076ab59f3abe061e4553a61f98a144a472297dba5ed924ca887f130e9372da9_s390x | — |
Threats
Impact
Important
A flaw was found in oras-go. During the monolithic blob upload process, oras-go reuses the Authorization header for subsequent requests, even if a malicious registry provides a cross-host Location header. This vulnerability allows an attacker-controlled endpoint to receive the caller's credentials, leading to information disclosure. Additionally, it can enable client-side Server-Side Request Forgery (SSRF) to a cross-host target.
5.9 (Medium)
Affected products
Fixed
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:26e58654cdd092cb812207cb4473f5f5988ebd708d95c34152c2e8c124f7297d_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:40e5d9634aa7469df8247758961d486cfac3e7d7f0b59184e11ed5571b46bf40_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:5b59faed336de07965755c893cb9d0ffc52ec90f61cc8c54487f6c0cac53322e_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:b59aea0c9e859025988b0f0c9b6e7748c4acf6d0b4cee35f3fabb7b84feb598b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:3e6519c0c789b946eb1b811867c41c4f204440bad5734760c0aca4e3fc602e5a_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:95684cfaf4d5d91bc9fe8cfbf64a6f113e944e3f0c102d27851be5232eca0dbb_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:9cb20990af88287dd8a27de4e4ef12eb244577a1844482d26107359c6efe8efa_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:a69ebb0c7e817d44cfabd86ad13ef4cc94a8bf5b6e8a607d17b197603d64a224_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:0eea35a3af36d08db945a70c387cc38eb326f75b4ed322f09d8c91863cfe5d02_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:22c48db227cd6f2ecec746674e31ac7f5a983a418679fc91678a0aa0ebb49496_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:8e8d249c39d562f819d347f12610dda7f5c01215c41101bfd5dca008e04edf6e_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:f8adb8dd40a204bacb51cd423803097a514ec8e8e9f52209e02ecf14cad622bb_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
164 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:31bd91156f49687d2efffd3be971d9ee0e16abb420b8e8b958caa88b97770020_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:a6315866c67ba350665f5a92f960a5a44e427ca37ae7505e2072af4e02c42f76_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:b3ad6fa1de658f3a40c8b183ab501ebc66b359d8cc01439d4215aa52769df213_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:bfde9ebea1fcd27b6d104d5f67db62e870878f9517ccbec2f649dd2c1af4a073_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:08fed161d59299881ff7a54db859feaf8ed7bdb8238d6cf12628ccb73575665e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:09436fe2649ca384b1bc1fd8f736fb1d71392733310e66758ed9f289e00471f9_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:3b83670e1c0e9d1f5b76bd7b75d77072bc6208646bc2201bd0bd200dbc59e34a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:927146f966e4c5c2908d29d8ab45a8f3071dbd5ebd9cf0424460a23f814a72a7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:38a3bc59511133cae56827eba879e7c82c5a974bf1f16b6e8d95e1f79821e669_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:3fa04db82e3ce6169270db0ce29107b69d8e044e0a1ab13a2bf1050b8c26d087_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:6041a918713d4464c73560b68c294a12d33f297a980d2f9d0e0cc8c300a96f24_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:98bd72ba69bdfb3070d87b3edcbd7050579a514b72cfd67c2926541ba52dbaf7_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:938abc970731c2eeda8e2b7b73e96d4dfcbf7587330c7b7e52117a577700e426_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:a0876a25ce85d7d4616212813f012422826f152b8d71065e75cd9c3e23034d8a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:c77077a0cca835a503a6529c89ab19c4027f949d361afdf8a5a259e1e87b0d55_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:d5bbf3fe886f27cdc27363dcb175e004487d9c8f36de4f1f8516fbeda3a95224_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:0f5d8cae3ba4ea4fcdc5fb9d08f797d576bc225b92af66f193bd4b1324cda4b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:2d3588825f8a714fa59b1648d0934d064165e333f322f7f31f01f07b940d42d9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:68aa571827f5331f1d5a3bd0c60ad441a18877ba11921aff2633940236bafcd4_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:9b80c9c61d4befefa7f6a65ae8c001ce7e343a1e4f251e5ebe025625d9511730_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:9b2c24401a91903f023096d2b641aa977acff423eb6770a8e4c4a81aecfd4e62_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:9d74585acc098c13f3e9dac5ae7f5ef337fa82bd7119d7f1849c5f8a50e84907_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:a6ee95d0ed82bddef084684d11fa770bd646d9be9bc65b3bc386d7c58b33975c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:f7b8654eb8bf675c8c26f0ad395d790f990308d3ad6683bb61b484c92073bbac_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:2a598e7fd07db27100d9a53a328ac9a0535865883bddd1373f4f1f2705068d2f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:4f8f0b02d0969753e156226a998d442746c238a2a50ea606a49ca0cf695b8925_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:63c02348faa7d4e26e35c69aef5453613dd607a26116823b931b89fe5311e181_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:ae224866f0085d2c00ab18a28d2aed076e455731903989a49a544abf49950d1f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:0a90a13f006ef0b271079b728ef6d54081f36ae19b6d0e9ab4dc24ea52a30fad_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:3a53629645832974a883002e53198df7c28e59dd6d1df99bf321b52d0ef84b61_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:879315f438ca43abb607d6c97f8fbd4ca2d38209b142e2d97cc0598740273252_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:c6c4d01f5fcee6cad3fc870cace92f45000624760e6e93654bb5e814afeed7bb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:50f7647620c78fd6b445379c8762f5e978113fe3552906376a24459263f27459_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:53e641f48ddc05c63da2e6bc24e9e4636a10de2c3599d8f5f78622bdebca07ca_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:57114b7a386c406715e342637558fab57afeef2e193517f99173a441f39401d5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:dcdcaa90f292f2d7ad3f10acbedfab9f7f22f3432c3156055f34760d9bf9429c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:3723b1d5c74f37cba219e203fd2026a718d4821595cb505ec6626684695da65b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:562291f52b6bce98ec8795856b808545c4fe30047b54544c7f6c2ab4678480ff_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:e6dfac9bc3e467e141a425944782f5087ed967ac4d02d8d47442e3d61ba5b882_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:f683186c2cc8be9ec09b8efdec66d6b8b1f991c7f7b9fd398dc7c3f9ab8b3079_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:2471edd63a94473c68cf37ee50de643e40003f2c5bba84063c154e4888a7f0bd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:7cef49d68df5d8efe52061a18920e07e6c7efa3016c0cea7d1747e67851f254a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:d912383405599032acffbad22bc154f63a87dd429ba882fd7a94cb82fe650d8e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:f3034211e16de48af540efe4ee460395dba0a4a544fa4f277a12840a25df1730_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:181d1decb2f16fcf6f5938027ed346aca29126687bbe6cdcc601c25087f70d11_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:ab5e4d27e23448d99a37b8c05442bb1254083cdc4ff325e721d97d80ec27346c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:ac172243d158e126594f28317e0cfb37dc1790c9f2121e95fe52506b5e05fc91_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:fd96b6284d270effa0f838d960ea4218b72b54c4718513eb523658f2f4972682_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:c59d9cd479c62730eda5d482fb2f4e9fbc17a90a5a2861b130aafe1f3a27a333_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:e547f672b14b6e8fc2ffd300b150aedbd3f6b6b36ddcad612f7c992a936a7c82_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:ead1263d538974c48790c65e44cd9cab07a62c2893b2eeb250174e7cf58d7f9d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:ed0457a57c7b39b79fb308176f45ffe678938b25fbb8c15de2cedbe54b916f64_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:9847a5752ec77e17861dcdac5546ee5c53679c80c3569609b21d9080ee3b7ef3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:d3c823e61a0682ddc85e576e86234e580992886de471035630f9c89bbad6ebb7_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:ded425ed0af88a1411a06e5191aee25c4c59f1de85b041eba95c9997686cf09e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:ee63f59942f9df04e95fc4266f0d194cd62a7ca08dd5478283884d0ab6003da7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:724377cabaa284a5197e7505a7150c89631c2f2bcc629e074c7c0be18abd8e6f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:cbf797c9e93413540b20ebee9191375ddd8185ef22dc8c9e23cc3a4c015abaf7_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:d7609d62a801cf07ef639abcd4f193b2d68967fadebbfddf2349003d7e9eaa44_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:f61fe90362f793225591eb7e2a86d5cdc6fb35aa087e9b6a6218a42b1c1d945d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:1c4de9460688800b62bad6fb13653ef4b52bf215e4d41674291193e9b8e71b24_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:4f1e59610b2fbedc56f425b3fbd8f16c9ea6ea96025f18a404fe48f6a49bdc1e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:ab0d28306dd6daa03af79bdc2ea650e59a50a03317987c4cdd0d1ee70f95b597_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:b700a8bb7ea6e4253afb8bcf94e5ad086349980ca0716a87817724d3da3fdce1_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4015f46d2172db26a348635e2e8cbd4bbcdbbaa56a4b12c232676a3d0f5bbee2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4169252c61ec70b91b10c750d5f9ecd53f5c3c906766bba9103afbac3c3f9edf_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4ab72a192553c21de76754f06fe38cf443e686e4b4edc2aa2ceb2b6b9d95bb6c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:579ef0925c6f56ed48f22121767189431bef6c4eaa72b2648a1b91488357a51d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:2b796bf55ecf7a14d1c87d829a2b20d998fc2943686373105b0a50f5053ef836_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:7e960b59f64547f7e9602b7c066a51ab52aba929726aec2bacdf486a9d4d28fd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:a43e430a2ec0b86fb6ade361677be298b4e27444388a9bca35ddafbf9c77277c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:d2394b121256985e5ca322aea77bb0bf999ba2d7a6f1627e62bbc125c475dbbd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:1868e2ea03d063b4cd64601cb0aaf5c9ea7f55e83eba2e2d4dcf6f830efeafc7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:4bfbf0bdc882979bc94d85a4aeff8caa0ec7887aec7412e32ae1442811325d06_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:844e3d69d3c26914e02612466021592a876e6e2dd6cf77084723a70f567ba0e2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:bbe04eb8fd197f15875f498e3c18b9a7a445380efb5f696422d79df99a34a881_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:2c9f9b47c01c5e5e017c583c6a09c5c52f40ef88acf789689265cb31ef328fb8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:7b5e883efde312c1571c4825b523ff04ab57af6a9f4162a36b80b973f9602c46_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:d896dd89fb924da246fc729041d9debc019d8a4210cfd3de8883834e429cca10_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:ede3e22d4e4de49789622149dec23beaa7e0569a3715ac2262929df543e05bc3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:273a393b8c62fbc4edb4bf4033c47d8b52bda56fc9cafa289d9513210840815b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:71f1b590785ce7f4577ecd687dbab9bc3c5931c568a3108eb84279c7aa892046_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:d1e1b4310eb64891c9456be7c34547bf36b0aafdeb471a49f0892d7eaf8f41f4_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:e0a7514406c7ffae080db6d4db3bbf7b77a606ea4632bf09f8301ce1d3739bb5_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:2a4c6c061d154ed9c74707a7a2e2390fde2a150f36197386c3e49c0612d345b2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:6ffcc051c955e198c6d96b59bda0ef26b5124ebbdef5357d36a84534f2c7097c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:c9258bf58373f9c6859789c8ec272cd7d702c37e063fc2ee53c66d296e7ee3d0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:d83c6bb4f2a91d2c4de3ffbf4aa8ceecb695f8491ba7586d55275c62cd1931e6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:67637c5cba3eca1597885823c6e44c13db445d0ef38751eb8364b69dbf07caac_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:68fb5c2a3c8a0d5e6bbcf2c5568969f6b13e72006d4d54bc5c57cd9a032d1bf6_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:9f5fa40c88b0f5d1ae3634632240817a91f4575f8eae9c005b8e35a55cf38003_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:fcbcee9fc7e0bbf5775a33ae9b7e3d7e48a90e2aa1cb85605e05612b6e4d4e30_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:0c165bb93ce933c7f9998a615908bfcca0b4eb38e32e24a1c823e63791b7604b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:42aa392f82bdc45a3b857d1ed44e224ddfd14db1e3dcbb74dcc850ac0540e964_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:9dcd0c0ecf1523bf05bd296edbecd85841b2753dee7a5c9df32437f9a8e31471_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:c5505c462e6b2c04a6e14bc1e22dfc42dc8adea8f6eaf0615cd58b1973b7d62e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:1a93df314c31f10da7b1345fab07b15b846e28865764178e34124f84dc967152_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:34343f81973c3fbdd8630c32d0fad597745ea10f960ea64236408e58e0f10e14_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:7b3635784ebfb6343a73c9fa6de7bea57b3aacce1c49a0f7f250a471f7b897e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:f0a7fade2853193429bab16922b2e3bbe426e14632423d6550ff7dfb66d42827_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:94950d339fa382d6911f12fc23dcaf2cdb2854c4cab654f6058f5bf0df1bb371_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:bcfbd2284cbeeba5a835aaf5a5590ddd8156bd881ca24fd0fe1465fade1f84c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:bd739ced163053224e5b0ea2f3cd577481c6b6c1162cc0fbc186f1716b4a1fbd_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:d40496f114898985cde3860b9664c34d8c32de85e4d3d846df91a6ba27a2e99c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:3f7cbe7605595d712e14d9a17717fafc6c6e334f2ad3e821c34947ec78411046_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:96775900ea90e57487da6afe59d058b33cb977a0247a1bbeb1bd07bed2816398_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:caa6b121538e074312314d9888d9b423bd225aefa4f25eb145893b9fc548c0ad_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:e59c90cfe8160b28f9d2aa9e59b1d04d742df44d2195210ebc1946ee3cb78b6f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:10c95e5c55ccc1a04e8d2ac28bd1afd3b9bb9a7e9e2a5e3e8efb301421539980_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:60a310d4464b4817845703d14e95729321b883fbfc79fbf2dd8d514bb3c675e9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:70e6c14d72f14d25a90f44043932fbd3f824b30e8ad4b36307100726b24d9c06_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:784129cf69b3bf77a907fe909fd73a2a4d0fbd947fe0037e47aa1d62c6ffcf0b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:2368703206d833e4cb73b7e8750efb9997633a6f9accbf032426bcfcae4c00d9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:80b543b207e724e880ff932c514fe9c6a3925bfede1c31863531e4e69d050d40_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:82405a9a5715db5442dfa3d3f594888bd7b2f9c778d68357a7d8884f5ea46915_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:8fd2bda7b8d94ededf7973f76a159dd61105776a05d961ac9cfd9bee0a988213_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:4def845360282dad99181b96bcd834b4863eab39e246fda2476234c561c652ec_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:b67aec868b6366cf04f3980b15588e1a0af5c88b2248958bc3884261ad390ca0_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:ceacf3491ebec6f5613011fe8d36b66d00f8b3697832615a4d7024e23125085e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:d9f6a520b818dcccbedb94720b5979ef1cdec2e02491c76e3decb3ee18f2085d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:03adc6277e2bf409391941c6f4508154abc38a0c043139978754f6d4fd32c5a8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:7e100af30ed11325cb2cbee02af09306e53df5db5847f2a4b733cd307e3cd623_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:91b474b4808b18c279c9f8eb3be8e6d1e1e47cf2b5f9553acd901c74b20bddbc_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:d56f884a9700a4f193d6f3db1895bd54745ec77e02ead3d43bd6e4fe04a2969e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:1f7ed606f69a74943aedb0a956e5a71019f8a1ab53cd3f8166be0f55a69809b9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:4841076eb82f1f1748345556ff6c4e02a17f1f63c661e375eaba720291cbaf6a_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:a79ac7dcae109aa526e2a218327dd8c5dba2b924fc27447a07199b3b2f2f67b3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:dee022821852f2d5ebdbbd9f09c9b97997a905061dadb3f78433291d462d49a7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:1a746b16f362a83f399255d925b322b3440b3d89ae4d64ab7962db3d82ee91a1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:417a31bec11c3ffb70f40fa955069d5160dc12e2426b67e1d2e35ae3f7fa06df_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:89a3cb77fdb3dcbddfe96785a9ba3fa2b6132098fce028f859663b31fcf77a34_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:b1ba0b4cd8f515895af7b9f797f6ea5b661f7254ce019ce5115375639dcd06e9_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:0827c96b922ca185b7a7321a4f504e8a5dc01aadafcfd20443060546981339a8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:b5b732dfc0ce3d740781eda9a72e1542c7a30b28b39d2be6e0ba470af06a9680_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:f74081e5eb03227ccff5717a7d139ceee6c5b610625ff7b99e639a2652bf7663_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:f80976ae4fc332600e1d8e1d70b42c038ea05d76ac2c5b1d7d0cbaddbe89140a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:4029ece83812237ce8b1d394252e9561012e8cd94af40680a90284fbea1bc32a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:63a3465a7539a8a286c846a84d63e3feca9a11758e4c0d697889b0bdeb26a25c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:81c227d7c7599b0d4357ccdc3b567f31b67bbd1198c9e7ddba1864c299bad11b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:f392bde8ce22aca058d77132cc709440442931679dbe725c52516f1cdc97b38d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:4825fab15300bc911e0b2b5c4ae342004bfcff95fa64af0fdb1085fadd132aa2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:68f879679911c2ca828551b900eca1c2f4e8caec7312fbba502fabc4778d1832_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:b4188ac728c746769ef6586663dd6d7d07db984b083397d2c76fe847ef22ea60_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:f2805fc1e6f37bc8acc3187ea8712d38f32151d584c10d5996c0ad7076cd638b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:1c943edcf23df14f254e4aabb93cbc1665bbc7902076b3f04bd80edd2fe324db_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:84c5d2b24caf68c3a6a6d078bd9f66de9fb88e769f6c09c11a248693d463ac21_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:907d6e24922d6d372bceb21ad830c254c6a9c9d6be0ac4f4edf22c236437a09d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:923a3ee0e3d5b7341b96826e465e6856855f2801dbaf381d139a632c77bda1c5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:285d2e2d103b458f0603435aedb4d779d85e48fed2267845b798f4a04a0df4c7_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:44981f5fcbc9086470143fae6e21a5de3baad2258d9f8c81accecb2faad6b2a2_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:5ba248d0bc8fcde70e210319bb962f4043e5e8ab8a5625c8f8f30ec96d47c6b7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:f681cdac28ee9ff6375fb39d7b7d12917a06043db44c16e8f84bdb9e09e7b5e7_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:2057531884d897574fc0648e5d3cf21c4549738ac5f35d8095f400cdb80049cc_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:8be0e50a132a2c974893f36b51f3f40b6d6e1f913ae0f9ee6319ef0d5ec455b7_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:a2edc5d233d1547fa2e1d01f29d8a914930735f7098289892430ba9a17d20ab7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:c81c7aeb3dd05801e279a9fcc8d6c3baf00a2ccc08eab53f8acc8bd4d2d129c4_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:25e17bf203568420587cf5907e84e4167afab84dfce549c91bea99e70290b742_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:277f4e8ac5fc292b9f0f2d123f924c6b5cbc0a2eeba3c87a0e61c5ee2399aaa9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:76766b77ed53513cd254195b25d205ab6964522816e1e3662800e38a105abdf2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:c7ace45f7cb86055e2ba18e27a660f6aa6cb4eff497204294875d5dd1d63cce3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:3780b1bc80ab7ebc3cfed06ce69346d589dc07b53cea65ad3ed92cc912284300_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:681b356709778083448892513b4559f693e002bfda897a57e2d065f736a902b5_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:d110b52ce8ea022b3d35e7c4b0ce3b646f30513cf8abb55327132565ea4a6a87_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:f076ab59f3abe061e4553a61f98a144a472297dba5ed924ca887f130e9372da9_s390x | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in containerd, an open-source container runtime. The Container Runtime Interface (CRI) plugin, which manages container operations, fails to validate labels propagated from an image configuration to a container. This oversight could enable an attacker to execute arbitrary commands on the host system through a plugin that processes these unvalidated labels. The primary impact is host-root command execution, allowing unauthorized control over the underlying system.
8.8 (High)
Affected products
Fixed
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:26e58654cdd092cb812207cb4473f5f5988ebd708d95c34152c2e8c124f7297d_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:40e5d9634aa7469df8247758961d486cfac3e7d7f0b59184e11ed5571b46bf40_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:5b59faed336de07965755c893cb9d0ffc52ec90f61cc8c54487f6c0cac53322e_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:b59aea0c9e859025988b0f0c9b6e7748c4acf6d0b4cee35f3fabb7b84feb598b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:3e6519c0c789b946eb1b811867c41c4f204440bad5734760c0aca4e3fc602e5a_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:95684cfaf4d5d91bc9fe8cfbf64a6f113e944e3f0c102d27851be5232eca0dbb_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:9cb20990af88287dd8a27de4e4ef12eb244577a1844482d26107359c6efe8efa_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:a69ebb0c7e817d44cfabd86ad13ef4cc94a8bf5b6e8a607d17b197603d64a224_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:0eea35a3af36d08db945a70c387cc38eb326f75b4ed322f09d8c91863cfe5d02_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:22c48db227cd6f2ecec746674e31ac7f5a983a418679fc91678a0aa0ebb49496_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:8e8d249c39d562f819d347f12610dda7f5c01215c41101bfd5dca008e04edf6e_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:f8adb8dd40a204bacb51cd423803097a514ec8e8e9f52209e02ecf14cad622bb_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
164 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:31bd91156f49687d2efffd3be971d9ee0e16abb420b8e8b958caa88b97770020_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:a6315866c67ba350665f5a92f960a5a44e427ca37ae7505e2072af4e02c42f76_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:b3ad6fa1de658f3a40c8b183ab501ebc66b359d8cc01439d4215aa52769df213_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:bfde9ebea1fcd27b6d104d5f67db62e870878f9517ccbec2f649dd2c1af4a073_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:08fed161d59299881ff7a54db859feaf8ed7bdb8238d6cf12628ccb73575665e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:09436fe2649ca384b1bc1fd8f736fb1d71392733310e66758ed9f289e00471f9_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:3b83670e1c0e9d1f5b76bd7b75d77072bc6208646bc2201bd0bd200dbc59e34a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:927146f966e4c5c2908d29d8ab45a8f3071dbd5ebd9cf0424460a23f814a72a7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:38a3bc59511133cae56827eba879e7c82c5a974bf1f16b6e8d95e1f79821e669_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:3fa04db82e3ce6169270db0ce29107b69d8e044e0a1ab13a2bf1050b8c26d087_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:6041a918713d4464c73560b68c294a12d33f297a980d2f9d0e0cc8c300a96f24_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:98bd72ba69bdfb3070d87b3edcbd7050579a514b72cfd67c2926541ba52dbaf7_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:938abc970731c2eeda8e2b7b73e96d4dfcbf7587330c7b7e52117a577700e426_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:a0876a25ce85d7d4616212813f012422826f152b8d71065e75cd9c3e23034d8a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:c77077a0cca835a503a6529c89ab19c4027f949d361afdf8a5a259e1e87b0d55_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:d5bbf3fe886f27cdc27363dcb175e004487d9c8f36de4f1f8516fbeda3a95224_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:0f5d8cae3ba4ea4fcdc5fb9d08f797d576bc225b92af66f193bd4b1324cda4b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:2d3588825f8a714fa59b1648d0934d064165e333f322f7f31f01f07b940d42d9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:68aa571827f5331f1d5a3bd0c60ad441a18877ba11921aff2633940236bafcd4_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:9b80c9c61d4befefa7f6a65ae8c001ce7e343a1e4f251e5ebe025625d9511730_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:9b2c24401a91903f023096d2b641aa977acff423eb6770a8e4c4a81aecfd4e62_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:9d74585acc098c13f3e9dac5ae7f5ef337fa82bd7119d7f1849c5f8a50e84907_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:a6ee95d0ed82bddef084684d11fa770bd646d9be9bc65b3bc386d7c58b33975c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:f7b8654eb8bf675c8c26f0ad395d790f990308d3ad6683bb61b484c92073bbac_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:2a598e7fd07db27100d9a53a328ac9a0535865883bddd1373f4f1f2705068d2f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:4f8f0b02d0969753e156226a998d442746c238a2a50ea606a49ca0cf695b8925_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:63c02348faa7d4e26e35c69aef5453613dd607a26116823b931b89fe5311e181_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:ae224866f0085d2c00ab18a28d2aed076e455731903989a49a544abf49950d1f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:0a90a13f006ef0b271079b728ef6d54081f36ae19b6d0e9ab4dc24ea52a30fad_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:3a53629645832974a883002e53198df7c28e59dd6d1df99bf321b52d0ef84b61_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:879315f438ca43abb607d6c97f8fbd4ca2d38209b142e2d97cc0598740273252_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:c6c4d01f5fcee6cad3fc870cace92f45000624760e6e93654bb5e814afeed7bb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:50f7647620c78fd6b445379c8762f5e978113fe3552906376a24459263f27459_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:53e641f48ddc05c63da2e6bc24e9e4636a10de2c3599d8f5f78622bdebca07ca_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:57114b7a386c406715e342637558fab57afeef2e193517f99173a441f39401d5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:dcdcaa90f292f2d7ad3f10acbedfab9f7f22f3432c3156055f34760d9bf9429c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:3723b1d5c74f37cba219e203fd2026a718d4821595cb505ec6626684695da65b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:562291f52b6bce98ec8795856b808545c4fe30047b54544c7f6c2ab4678480ff_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:e6dfac9bc3e467e141a425944782f5087ed967ac4d02d8d47442e3d61ba5b882_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:f683186c2cc8be9ec09b8efdec66d6b8b1f991c7f7b9fd398dc7c3f9ab8b3079_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:2471edd63a94473c68cf37ee50de643e40003f2c5bba84063c154e4888a7f0bd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:7cef49d68df5d8efe52061a18920e07e6c7efa3016c0cea7d1747e67851f254a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:d912383405599032acffbad22bc154f63a87dd429ba882fd7a94cb82fe650d8e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:f3034211e16de48af540efe4ee460395dba0a4a544fa4f277a12840a25df1730_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:181d1decb2f16fcf6f5938027ed346aca29126687bbe6cdcc601c25087f70d11_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:ab5e4d27e23448d99a37b8c05442bb1254083cdc4ff325e721d97d80ec27346c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:ac172243d158e126594f28317e0cfb37dc1790c9f2121e95fe52506b5e05fc91_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:fd96b6284d270effa0f838d960ea4218b72b54c4718513eb523658f2f4972682_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:c59d9cd479c62730eda5d482fb2f4e9fbc17a90a5a2861b130aafe1f3a27a333_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:e547f672b14b6e8fc2ffd300b150aedbd3f6b6b36ddcad612f7c992a936a7c82_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:ead1263d538974c48790c65e44cd9cab07a62c2893b2eeb250174e7cf58d7f9d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:ed0457a57c7b39b79fb308176f45ffe678938b25fbb8c15de2cedbe54b916f64_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:9847a5752ec77e17861dcdac5546ee5c53679c80c3569609b21d9080ee3b7ef3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:d3c823e61a0682ddc85e576e86234e580992886de471035630f9c89bbad6ebb7_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:ded425ed0af88a1411a06e5191aee25c4c59f1de85b041eba95c9997686cf09e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:ee63f59942f9df04e95fc4266f0d194cd62a7ca08dd5478283884d0ab6003da7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:724377cabaa284a5197e7505a7150c89631c2f2bcc629e074c7c0be18abd8e6f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:cbf797c9e93413540b20ebee9191375ddd8185ef22dc8c9e23cc3a4c015abaf7_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:d7609d62a801cf07ef639abcd4f193b2d68967fadebbfddf2349003d7e9eaa44_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:f61fe90362f793225591eb7e2a86d5cdc6fb35aa087e9b6a6218a42b1c1d945d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:1c4de9460688800b62bad6fb13653ef4b52bf215e4d41674291193e9b8e71b24_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:4f1e59610b2fbedc56f425b3fbd8f16c9ea6ea96025f18a404fe48f6a49bdc1e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:ab0d28306dd6daa03af79bdc2ea650e59a50a03317987c4cdd0d1ee70f95b597_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:b700a8bb7ea6e4253afb8bcf94e5ad086349980ca0716a87817724d3da3fdce1_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4015f46d2172db26a348635e2e8cbd4bbcdbbaa56a4b12c232676a3d0f5bbee2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4169252c61ec70b91b10c750d5f9ecd53f5c3c906766bba9103afbac3c3f9edf_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4ab72a192553c21de76754f06fe38cf443e686e4b4edc2aa2ceb2b6b9d95bb6c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:579ef0925c6f56ed48f22121767189431bef6c4eaa72b2648a1b91488357a51d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:2b796bf55ecf7a14d1c87d829a2b20d998fc2943686373105b0a50f5053ef836_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:7e960b59f64547f7e9602b7c066a51ab52aba929726aec2bacdf486a9d4d28fd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:a43e430a2ec0b86fb6ade361677be298b4e27444388a9bca35ddafbf9c77277c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:d2394b121256985e5ca322aea77bb0bf999ba2d7a6f1627e62bbc125c475dbbd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:1868e2ea03d063b4cd64601cb0aaf5c9ea7f55e83eba2e2d4dcf6f830efeafc7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:4bfbf0bdc882979bc94d85a4aeff8caa0ec7887aec7412e32ae1442811325d06_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:844e3d69d3c26914e02612466021592a876e6e2dd6cf77084723a70f567ba0e2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:bbe04eb8fd197f15875f498e3c18b9a7a445380efb5f696422d79df99a34a881_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:2c9f9b47c01c5e5e017c583c6a09c5c52f40ef88acf789689265cb31ef328fb8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:7b5e883efde312c1571c4825b523ff04ab57af6a9f4162a36b80b973f9602c46_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:d896dd89fb924da246fc729041d9debc019d8a4210cfd3de8883834e429cca10_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:ede3e22d4e4de49789622149dec23beaa7e0569a3715ac2262929df543e05bc3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:273a393b8c62fbc4edb4bf4033c47d8b52bda56fc9cafa289d9513210840815b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:71f1b590785ce7f4577ecd687dbab9bc3c5931c568a3108eb84279c7aa892046_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:d1e1b4310eb64891c9456be7c34547bf36b0aafdeb471a49f0892d7eaf8f41f4_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:e0a7514406c7ffae080db6d4db3bbf7b77a606ea4632bf09f8301ce1d3739bb5_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:2a4c6c061d154ed9c74707a7a2e2390fde2a150f36197386c3e49c0612d345b2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:6ffcc051c955e198c6d96b59bda0ef26b5124ebbdef5357d36a84534f2c7097c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:c9258bf58373f9c6859789c8ec272cd7d702c37e063fc2ee53c66d296e7ee3d0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:d83c6bb4f2a91d2c4de3ffbf4aa8ceecb695f8491ba7586d55275c62cd1931e6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:67637c5cba3eca1597885823c6e44c13db445d0ef38751eb8364b69dbf07caac_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:68fb5c2a3c8a0d5e6bbcf2c5568969f6b13e72006d4d54bc5c57cd9a032d1bf6_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:9f5fa40c88b0f5d1ae3634632240817a91f4575f8eae9c005b8e35a55cf38003_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:fcbcee9fc7e0bbf5775a33ae9b7e3d7e48a90e2aa1cb85605e05612b6e4d4e30_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:0c165bb93ce933c7f9998a615908bfcca0b4eb38e32e24a1c823e63791b7604b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:42aa392f82bdc45a3b857d1ed44e224ddfd14db1e3dcbb74dcc850ac0540e964_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:9dcd0c0ecf1523bf05bd296edbecd85841b2753dee7a5c9df32437f9a8e31471_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:c5505c462e6b2c04a6e14bc1e22dfc42dc8adea8f6eaf0615cd58b1973b7d62e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:1a93df314c31f10da7b1345fab07b15b846e28865764178e34124f84dc967152_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:34343f81973c3fbdd8630c32d0fad597745ea10f960ea64236408e58e0f10e14_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:7b3635784ebfb6343a73c9fa6de7bea57b3aacce1c49a0f7f250a471f7b897e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:f0a7fade2853193429bab16922b2e3bbe426e14632423d6550ff7dfb66d42827_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:94950d339fa382d6911f12fc23dcaf2cdb2854c4cab654f6058f5bf0df1bb371_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:bcfbd2284cbeeba5a835aaf5a5590ddd8156bd881ca24fd0fe1465fade1f84c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:bd739ced163053224e5b0ea2f3cd577481c6b6c1162cc0fbc186f1716b4a1fbd_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:d40496f114898985cde3860b9664c34d8c32de85e4d3d846df91a6ba27a2e99c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:3f7cbe7605595d712e14d9a17717fafc6c6e334f2ad3e821c34947ec78411046_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:96775900ea90e57487da6afe59d058b33cb977a0247a1bbeb1bd07bed2816398_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:caa6b121538e074312314d9888d9b423bd225aefa4f25eb145893b9fc548c0ad_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:e59c90cfe8160b28f9d2aa9e59b1d04d742df44d2195210ebc1946ee3cb78b6f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:10c95e5c55ccc1a04e8d2ac28bd1afd3b9bb9a7e9e2a5e3e8efb301421539980_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:60a310d4464b4817845703d14e95729321b883fbfc79fbf2dd8d514bb3c675e9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:70e6c14d72f14d25a90f44043932fbd3f824b30e8ad4b36307100726b24d9c06_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:784129cf69b3bf77a907fe909fd73a2a4d0fbd947fe0037e47aa1d62c6ffcf0b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:2368703206d833e4cb73b7e8750efb9997633a6f9accbf032426bcfcae4c00d9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:80b543b207e724e880ff932c514fe9c6a3925bfede1c31863531e4e69d050d40_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:82405a9a5715db5442dfa3d3f594888bd7b2f9c778d68357a7d8884f5ea46915_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:8fd2bda7b8d94ededf7973f76a159dd61105776a05d961ac9cfd9bee0a988213_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:4def845360282dad99181b96bcd834b4863eab39e246fda2476234c561c652ec_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:b67aec868b6366cf04f3980b15588e1a0af5c88b2248958bc3884261ad390ca0_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:ceacf3491ebec6f5613011fe8d36b66d00f8b3697832615a4d7024e23125085e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:d9f6a520b818dcccbedb94720b5979ef1cdec2e02491c76e3decb3ee18f2085d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:03adc6277e2bf409391941c6f4508154abc38a0c043139978754f6d4fd32c5a8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:7e100af30ed11325cb2cbee02af09306e53df5db5847f2a4b733cd307e3cd623_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:91b474b4808b18c279c9f8eb3be8e6d1e1e47cf2b5f9553acd901c74b20bddbc_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:d56f884a9700a4f193d6f3db1895bd54745ec77e02ead3d43bd6e4fe04a2969e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:1f7ed606f69a74943aedb0a956e5a71019f8a1ab53cd3f8166be0f55a69809b9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:4841076eb82f1f1748345556ff6c4e02a17f1f63c661e375eaba720291cbaf6a_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:a79ac7dcae109aa526e2a218327dd8c5dba2b924fc27447a07199b3b2f2f67b3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:dee022821852f2d5ebdbbd9f09c9b97997a905061dadb3f78433291d462d49a7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:1a746b16f362a83f399255d925b322b3440b3d89ae4d64ab7962db3d82ee91a1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:417a31bec11c3ffb70f40fa955069d5160dc12e2426b67e1d2e35ae3f7fa06df_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:89a3cb77fdb3dcbddfe96785a9ba3fa2b6132098fce028f859663b31fcf77a34_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:b1ba0b4cd8f515895af7b9f797f6ea5b661f7254ce019ce5115375639dcd06e9_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:0827c96b922ca185b7a7321a4f504e8a5dc01aadafcfd20443060546981339a8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:b5b732dfc0ce3d740781eda9a72e1542c7a30b28b39d2be6e0ba470af06a9680_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:f74081e5eb03227ccff5717a7d139ceee6c5b610625ff7b99e639a2652bf7663_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:f80976ae4fc332600e1d8e1d70b42c038ea05d76ac2c5b1d7d0cbaddbe89140a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:4029ece83812237ce8b1d394252e9561012e8cd94af40680a90284fbea1bc32a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:63a3465a7539a8a286c846a84d63e3feca9a11758e4c0d697889b0bdeb26a25c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:81c227d7c7599b0d4357ccdc3b567f31b67bbd1198c9e7ddba1864c299bad11b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:f392bde8ce22aca058d77132cc709440442931679dbe725c52516f1cdc97b38d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:4825fab15300bc911e0b2b5c4ae342004bfcff95fa64af0fdb1085fadd132aa2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:68f879679911c2ca828551b900eca1c2f4e8caec7312fbba502fabc4778d1832_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:b4188ac728c746769ef6586663dd6d7d07db984b083397d2c76fe847ef22ea60_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:f2805fc1e6f37bc8acc3187ea8712d38f32151d584c10d5996c0ad7076cd638b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:1c943edcf23df14f254e4aabb93cbc1665bbc7902076b3f04bd80edd2fe324db_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:84c5d2b24caf68c3a6a6d078bd9f66de9fb88e769f6c09c11a248693d463ac21_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:907d6e24922d6d372bceb21ad830c254c6a9c9d6be0ac4f4edf22c236437a09d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:923a3ee0e3d5b7341b96826e465e6856855f2801dbaf381d139a632c77bda1c5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:285d2e2d103b458f0603435aedb4d779d85e48fed2267845b798f4a04a0df4c7_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:44981f5fcbc9086470143fae6e21a5de3baad2258d9f8c81accecb2faad6b2a2_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:5ba248d0bc8fcde70e210319bb962f4043e5e8ab8a5625c8f8f30ec96d47c6b7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:f681cdac28ee9ff6375fb39d7b7d12917a06043db44c16e8f84bdb9e09e7b5e7_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:2057531884d897574fc0648e5d3cf21c4549738ac5f35d8095f400cdb80049cc_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:8be0e50a132a2c974893f36b51f3f40b6d6e1f913ae0f9ee6319ef0d5ec455b7_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:a2edc5d233d1547fa2e1d01f29d8a914930735f7098289892430ba9a17d20ab7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:c81c7aeb3dd05801e279a9fcc8d6c3baf00a2ccc08eab53f8acc8bd4d2d129c4_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:25e17bf203568420587cf5907e84e4167afab84dfce549c91bea99e70290b742_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:277f4e8ac5fc292b9f0f2d123f924c6b5cbc0a2eeba3c87a0e61c5ee2399aaa9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:76766b77ed53513cd254195b25d205ab6964522816e1e3662800e38a105abdf2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:c7ace45f7cb86055e2ba18e27a660f6aa6cb4eff497204294875d5dd1d63cce3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:3780b1bc80ab7ebc3cfed06ce69346d589dc07b53cea65ad3ed92cc912284300_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:681b356709778083448892513b4559f693e002bfda897a57e2d065f736a902b5_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:d110b52ce8ea022b3d35e7c4b0ce3b646f30513cf8abb55327132565ea4a6a87_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:f076ab59f3abe061e4553a61f98a144a472297dba5ed924ca887f130e9372da9_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in js-yaml, a JavaScript YAML parser and dumper. A remote attacker could exploit this vulnerability by providing a specially crafted YAML document containing a chain of mappings with merge keys. This could cause the parser to consume excessive CPU resources, leading to a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:2b796bf55ecf7a14d1c87d829a2b20d998fc2943686373105b0a50f5053ef836_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:7e960b59f64547f7e9602b7c066a51ab52aba929726aec2bacdf486a9d4d28fd_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:a43e430a2ec0b86fb6ade361677be298b4e27444388a9bca35ddafbf9c77277c_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:d2394b121256985e5ca322aea77bb0bf999ba2d7a6f1627e62bbc125c475dbbd_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
172 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:31bd91156f49687d2efffd3be971d9ee0e16abb420b8e8b958caa88b97770020_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:a6315866c67ba350665f5a92f960a5a44e427ca37ae7505e2072af4e02c42f76_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:b3ad6fa1de658f3a40c8b183ab501ebc66b359d8cc01439d4215aa52769df213_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:bfde9ebea1fcd27b6d104d5f67db62e870878f9517ccbec2f649dd2c1af4a073_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:08fed161d59299881ff7a54db859feaf8ed7bdb8238d6cf12628ccb73575665e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:09436fe2649ca384b1bc1fd8f736fb1d71392733310e66758ed9f289e00471f9_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:3b83670e1c0e9d1f5b76bd7b75d77072bc6208646bc2201bd0bd200dbc59e34a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:927146f966e4c5c2908d29d8ab45a8f3071dbd5ebd9cf0424460a23f814a72a7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:38a3bc59511133cae56827eba879e7c82c5a974bf1f16b6e8d95e1f79821e669_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:3fa04db82e3ce6169270db0ce29107b69d8e044e0a1ab13a2bf1050b8c26d087_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:6041a918713d4464c73560b68c294a12d33f297a980d2f9d0e0cc8c300a96f24_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:98bd72ba69bdfb3070d87b3edcbd7050579a514b72cfd67c2926541ba52dbaf7_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:938abc970731c2eeda8e2b7b73e96d4dfcbf7587330c7b7e52117a577700e426_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:a0876a25ce85d7d4616212813f012422826f152b8d71065e75cd9c3e23034d8a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:c77077a0cca835a503a6529c89ab19c4027f949d361afdf8a5a259e1e87b0d55_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:d5bbf3fe886f27cdc27363dcb175e004487d9c8f36de4f1f8516fbeda3a95224_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:0f5d8cae3ba4ea4fcdc5fb9d08f797d576bc225b92af66f193bd4b1324cda4b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:2d3588825f8a714fa59b1648d0934d064165e333f322f7f31f01f07b940d42d9_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:68aa571827f5331f1d5a3bd0c60ad441a18877ba11921aff2633940236bafcd4_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:9b80c9c61d4befefa7f6a65ae8c001ce7e343a1e4f251e5ebe025625d9511730_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:9b2c24401a91903f023096d2b641aa977acff423eb6770a8e4c4a81aecfd4e62_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:9d74585acc098c13f3e9dac5ae7f5ef337fa82bd7119d7f1849c5f8a50e84907_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:a6ee95d0ed82bddef084684d11fa770bd646d9be9bc65b3bc386d7c58b33975c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:f7b8654eb8bf675c8c26f0ad395d790f990308d3ad6683bb61b484c92073bbac_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:2a598e7fd07db27100d9a53a328ac9a0535865883bddd1373f4f1f2705068d2f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:4f8f0b02d0969753e156226a998d442746c238a2a50ea606a49ca0cf695b8925_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:63c02348faa7d4e26e35c69aef5453613dd607a26116823b931b89fe5311e181_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:ae224866f0085d2c00ab18a28d2aed076e455731903989a49a544abf49950d1f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:0a90a13f006ef0b271079b728ef6d54081f36ae19b6d0e9ab4dc24ea52a30fad_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:3a53629645832974a883002e53198df7c28e59dd6d1df99bf321b52d0ef84b61_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:879315f438ca43abb607d6c97f8fbd4ca2d38209b142e2d97cc0598740273252_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:c6c4d01f5fcee6cad3fc870cace92f45000624760e6e93654bb5e814afeed7bb_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:50f7647620c78fd6b445379c8762f5e978113fe3552906376a24459263f27459_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:53e641f48ddc05c63da2e6bc24e9e4636a10de2c3599d8f5f78622bdebca07ca_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:57114b7a386c406715e342637558fab57afeef2e193517f99173a441f39401d5_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:dcdcaa90f292f2d7ad3f10acbedfab9f7f22f3432c3156055f34760d9bf9429c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:3723b1d5c74f37cba219e203fd2026a718d4821595cb505ec6626684695da65b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:562291f52b6bce98ec8795856b808545c4fe30047b54544c7f6c2ab4678480ff_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:e6dfac9bc3e467e141a425944782f5087ed967ac4d02d8d47442e3d61ba5b882_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:f683186c2cc8be9ec09b8efdec66d6b8b1f991c7f7b9fd398dc7c3f9ab8b3079_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:2471edd63a94473c68cf37ee50de643e40003f2c5bba84063c154e4888a7f0bd_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:7cef49d68df5d8efe52061a18920e07e6c7efa3016c0cea7d1747e67851f254a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:d912383405599032acffbad22bc154f63a87dd429ba882fd7a94cb82fe650d8e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:f3034211e16de48af540efe4ee460395dba0a4a544fa4f277a12840a25df1730_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:181d1decb2f16fcf6f5938027ed346aca29126687bbe6cdcc601c25087f70d11_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:ab5e4d27e23448d99a37b8c05442bb1254083cdc4ff325e721d97d80ec27346c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:ac172243d158e126594f28317e0cfb37dc1790c9f2121e95fe52506b5e05fc91_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:fd96b6284d270effa0f838d960ea4218b72b54c4718513eb523658f2f4972682_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:c59d9cd479c62730eda5d482fb2f4e9fbc17a90a5a2861b130aafe1f3a27a333_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:e547f672b14b6e8fc2ffd300b150aedbd3f6b6b36ddcad612f7c992a936a7c82_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:ead1263d538974c48790c65e44cd9cab07a62c2893b2eeb250174e7cf58d7f9d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:ed0457a57c7b39b79fb308176f45ffe678938b25fbb8c15de2cedbe54b916f64_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:9847a5752ec77e17861dcdac5546ee5c53679c80c3569609b21d9080ee3b7ef3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:d3c823e61a0682ddc85e576e86234e580992886de471035630f9c89bbad6ebb7_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:ded425ed0af88a1411a06e5191aee25c4c59f1de85b041eba95c9997686cf09e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:ee63f59942f9df04e95fc4266f0d194cd62a7ca08dd5478283884d0ab6003da7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:724377cabaa284a5197e7505a7150c89631c2f2bcc629e074c7c0be18abd8e6f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:cbf797c9e93413540b20ebee9191375ddd8185ef22dc8c9e23cc3a4c015abaf7_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:d7609d62a801cf07ef639abcd4f193b2d68967fadebbfddf2349003d7e9eaa44_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:f61fe90362f793225591eb7e2a86d5cdc6fb35aa087e9b6a6218a42b1c1d945d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:1c4de9460688800b62bad6fb13653ef4b52bf215e4d41674291193e9b8e71b24_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:4f1e59610b2fbedc56f425b3fbd8f16c9ea6ea96025f18a404fe48f6a49bdc1e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:ab0d28306dd6daa03af79bdc2ea650e59a50a03317987c4cdd0d1ee70f95b597_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:b700a8bb7ea6e4253afb8bcf94e5ad086349980ca0716a87817724d3da3fdce1_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4015f46d2172db26a348635e2e8cbd4bbcdbbaa56a4b12c232676a3d0f5bbee2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4169252c61ec70b91b10c750d5f9ecd53f5c3c906766bba9103afbac3c3f9edf_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4ab72a192553c21de76754f06fe38cf443e686e4b4edc2aa2ceb2b6b9d95bb6c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:579ef0925c6f56ed48f22121767189431bef6c4eaa72b2648a1b91488357a51d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:1868e2ea03d063b4cd64601cb0aaf5c9ea7f55e83eba2e2d4dcf6f830efeafc7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:4bfbf0bdc882979bc94d85a4aeff8caa0ec7887aec7412e32ae1442811325d06_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:844e3d69d3c26914e02612466021592a876e6e2dd6cf77084723a70f567ba0e2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:bbe04eb8fd197f15875f498e3c18b9a7a445380efb5f696422d79df99a34a881_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:2c9f9b47c01c5e5e017c583c6a09c5c52f40ef88acf789689265cb31ef328fb8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:7b5e883efde312c1571c4825b523ff04ab57af6a9f4162a36b80b973f9602c46_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:d896dd89fb924da246fc729041d9debc019d8a4210cfd3de8883834e429cca10_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:ede3e22d4e4de49789622149dec23beaa7e0569a3715ac2262929df543e05bc3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:273a393b8c62fbc4edb4bf4033c47d8b52bda56fc9cafa289d9513210840815b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:71f1b590785ce7f4577ecd687dbab9bc3c5931c568a3108eb84279c7aa892046_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:d1e1b4310eb64891c9456be7c34547bf36b0aafdeb471a49f0892d7eaf8f41f4_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:e0a7514406c7ffae080db6d4db3bbf7b77a606ea4632bf09f8301ce1d3739bb5_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:2a4c6c061d154ed9c74707a7a2e2390fde2a150f36197386c3e49c0612d345b2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:6ffcc051c955e198c6d96b59bda0ef26b5124ebbdef5357d36a84534f2c7097c_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:c9258bf58373f9c6859789c8ec272cd7d702c37e063fc2ee53c66d296e7ee3d0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:d83c6bb4f2a91d2c4de3ffbf4aa8ceecb695f8491ba7586d55275c62cd1931e6_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:67637c5cba3eca1597885823c6e44c13db445d0ef38751eb8364b69dbf07caac_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:68fb5c2a3c8a0d5e6bbcf2c5568969f6b13e72006d4d54bc5c57cd9a032d1bf6_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:9f5fa40c88b0f5d1ae3634632240817a91f4575f8eae9c005b8e35a55cf38003_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:fcbcee9fc7e0bbf5775a33ae9b7e3d7e48a90e2aa1cb85605e05612b6e4d4e30_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:0c165bb93ce933c7f9998a615908bfcca0b4eb38e32e24a1c823e63791b7604b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:42aa392f82bdc45a3b857d1ed44e224ddfd14db1e3dcbb74dcc850ac0540e964_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:9dcd0c0ecf1523bf05bd296edbecd85841b2753dee7a5c9df32437f9a8e31471_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:c5505c462e6b2c04a6e14bc1e22dfc42dc8adea8f6eaf0615cd58b1973b7d62e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:1a93df314c31f10da7b1345fab07b15b846e28865764178e34124f84dc967152_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:34343f81973c3fbdd8630c32d0fad597745ea10f960ea64236408e58e0f10e14_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:7b3635784ebfb6343a73c9fa6de7bea57b3aacce1c49a0f7f250a471f7b897e3_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:f0a7fade2853193429bab16922b2e3bbe426e14632423d6550ff7dfb66d42827_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:94950d339fa382d6911f12fc23dcaf2cdb2854c4cab654f6058f5bf0df1bb371_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:bcfbd2284cbeeba5a835aaf5a5590ddd8156bd881ca24fd0fe1465fade1f84c2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:bd739ced163053224e5b0ea2f3cd577481c6b6c1162cc0fbc186f1716b4a1fbd_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:d40496f114898985cde3860b9664c34d8c32de85e4d3d846df91a6ba27a2e99c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:3f7cbe7605595d712e14d9a17717fafc6c6e334f2ad3e821c34947ec78411046_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:96775900ea90e57487da6afe59d058b33cb977a0247a1bbeb1bd07bed2816398_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:caa6b121538e074312314d9888d9b423bd225aefa4f25eb145893b9fc548c0ad_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:e59c90cfe8160b28f9d2aa9e59b1d04d742df44d2195210ebc1946ee3cb78b6f_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:10c95e5c55ccc1a04e8d2ac28bd1afd3b9bb9a7e9e2a5e3e8efb301421539980_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:60a310d4464b4817845703d14e95729321b883fbfc79fbf2dd8d514bb3c675e9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:70e6c14d72f14d25a90f44043932fbd3f824b30e8ad4b36307100726b24d9c06_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:784129cf69b3bf77a907fe909fd73a2a4d0fbd947fe0037e47aa1d62c6ffcf0b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:26e58654cdd092cb812207cb4473f5f5988ebd708d95c34152c2e8c124f7297d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:40e5d9634aa7469df8247758961d486cfac3e7d7f0b59184e11ed5571b46bf40_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:5b59faed336de07965755c893cb9d0ffc52ec90f61cc8c54487f6c0cac53322e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:b59aea0c9e859025988b0f0c9b6e7748c4acf6d0b4cee35f3fabb7b84feb598b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:2368703206d833e4cb73b7e8750efb9997633a6f9accbf032426bcfcae4c00d9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:80b543b207e724e880ff932c514fe9c6a3925bfede1c31863531e4e69d050d40_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:82405a9a5715db5442dfa3d3f594888bd7b2f9c778d68357a7d8884f5ea46915_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:8fd2bda7b8d94ededf7973f76a159dd61105776a05d961ac9cfd9bee0a988213_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:4def845360282dad99181b96bcd834b4863eab39e246fda2476234c561c652ec_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:b67aec868b6366cf04f3980b15588e1a0af5c88b2248958bc3884261ad390ca0_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:ceacf3491ebec6f5613011fe8d36b66d00f8b3697832615a4d7024e23125085e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:d9f6a520b818dcccbedb94720b5979ef1cdec2e02491c76e3decb3ee18f2085d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:3e6519c0c789b946eb1b811867c41c4f204440bad5734760c0aca4e3fc602e5a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:95684cfaf4d5d91bc9fe8cfbf64a6f113e944e3f0c102d27851be5232eca0dbb_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:9cb20990af88287dd8a27de4e4ef12eb244577a1844482d26107359c6efe8efa_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:a69ebb0c7e817d44cfabd86ad13ef4cc94a8bf5b6e8a607d17b197603d64a224_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:0eea35a3af36d08db945a70c387cc38eb326f75b4ed322f09d8c91863cfe5d02_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:22c48db227cd6f2ecec746674e31ac7f5a983a418679fc91678a0aa0ebb49496_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:8e8d249c39d562f819d347f12610dda7f5c01215c41101bfd5dca008e04edf6e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:f8adb8dd40a204bacb51cd423803097a514ec8e8e9f52209e02ecf14cad622bb_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:03adc6277e2bf409391941c6f4508154abc38a0c043139978754f6d4fd32c5a8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:7e100af30ed11325cb2cbee02af09306e53df5db5847f2a4b733cd307e3cd623_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:91b474b4808b18c279c9f8eb3be8e6d1e1e47cf2b5f9553acd901c74b20bddbc_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:d56f884a9700a4f193d6f3db1895bd54745ec77e02ead3d43bd6e4fe04a2969e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:1f7ed606f69a74943aedb0a956e5a71019f8a1ab53cd3f8166be0f55a69809b9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:4841076eb82f1f1748345556ff6c4e02a17f1f63c661e375eaba720291cbaf6a_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:a79ac7dcae109aa526e2a218327dd8c5dba2b924fc27447a07199b3b2f2f67b3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:dee022821852f2d5ebdbbd9f09c9b97997a905061dadb3f78433291d462d49a7_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:1a746b16f362a83f399255d925b322b3440b3d89ae4d64ab7962db3d82ee91a1_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:417a31bec11c3ffb70f40fa955069d5160dc12e2426b67e1d2e35ae3f7fa06df_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:89a3cb77fdb3dcbddfe96785a9ba3fa2b6132098fce028f859663b31fcf77a34_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:b1ba0b4cd8f515895af7b9f797f6ea5b661f7254ce019ce5115375639dcd06e9_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:0827c96b922ca185b7a7321a4f504e8a5dc01aadafcfd20443060546981339a8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:b5b732dfc0ce3d740781eda9a72e1542c7a30b28b39d2be6e0ba470af06a9680_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:f74081e5eb03227ccff5717a7d139ceee6c5b610625ff7b99e639a2652bf7663_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:f80976ae4fc332600e1d8e1d70b42c038ea05d76ac2c5b1d7d0cbaddbe89140a_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:4029ece83812237ce8b1d394252e9561012e8cd94af40680a90284fbea1bc32a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:63a3465a7539a8a286c846a84d63e3feca9a11758e4c0d697889b0bdeb26a25c_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:81c227d7c7599b0d4357ccdc3b567f31b67bbd1198c9e7ddba1864c299bad11b_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:f392bde8ce22aca058d77132cc709440442931679dbe725c52516f1cdc97b38d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:4825fab15300bc911e0b2b5c4ae342004bfcff95fa64af0fdb1085fadd132aa2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:68f879679911c2ca828551b900eca1c2f4e8caec7312fbba502fabc4778d1832_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:b4188ac728c746769ef6586663dd6d7d07db984b083397d2c76fe847ef22ea60_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:f2805fc1e6f37bc8acc3187ea8712d38f32151d584c10d5996c0ad7076cd638b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:1c943edcf23df14f254e4aabb93cbc1665bbc7902076b3f04bd80edd2fe324db_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:84c5d2b24caf68c3a6a6d078bd9f66de9fb88e769f6c09c11a248693d463ac21_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:907d6e24922d6d372bceb21ad830c254c6a9c9d6be0ac4f4edf22c236437a09d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:923a3ee0e3d5b7341b96826e465e6856855f2801dbaf381d139a632c77bda1c5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:285d2e2d103b458f0603435aedb4d779d85e48fed2267845b798f4a04a0df4c7_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:44981f5fcbc9086470143fae6e21a5de3baad2258d9f8c81accecb2faad6b2a2_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:5ba248d0bc8fcde70e210319bb962f4043e5e8ab8a5625c8f8f30ec96d47c6b7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:f681cdac28ee9ff6375fb39d7b7d12917a06043db44c16e8f84bdb9e09e7b5e7_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:2057531884d897574fc0648e5d3cf21c4549738ac5f35d8095f400cdb80049cc_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:8be0e50a132a2c974893f36b51f3f40b6d6e1f913ae0f9ee6319ef0d5ec455b7_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:a2edc5d233d1547fa2e1d01f29d8a914930735f7098289892430ba9a17d20ab7_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:c81c7aeb3dd05801e279a9fcc8d6c3baf00a2ccc08eab53f8acc8bd4d2d129c4_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:25e17bf203568420587cf5907e84e4167afab84dfce549c91bea99e70290b742_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:277f4e8ac5fc292b9f0f2d123f924c6b5cbc0a2eeba3c87a0e61c5ee2399aaa9_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:76766b77ed53513cd254195b25d205ab6964522816e1e3662800e38a105abdf2_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:c7ace45f7cb86055e2ba18e27a660f6aa6cb4eff497204294875d5dd1d63cce3_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:3780b1bc80ab7ebc3cfed06ce69346d589dc07b53cea65ad3ed92cc912284300_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:681b356709778083448892513b4559f693e002bfda897a57e2d065f736a902b5_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:d110b52ce8ea022b3d35e7c4b0ce3b646f30513cf8abb55327132565ea4a6a87_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:f076ab59f3abe061e4553a61f98a144a472297dba5ed924ca887f130e9372da9_s390x | — |
Workaround
|
Threats
Impact
Important
References
88 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat Advanced Cluster Management for Kubernetes v2.13 general availability release images, which provide security fixes, bug fixes, and updated container images.\n\nRed Hat Product Security has rated this update as having a security impact of Important.\nA Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat Advanced Cluster Management for Kubernetes provides the\ncapabilities to address common challenges that administrators and site\nreliability engineers face as they work across a range of public and\nprivate cloud environments. Clusters and applications are all visible and\nmanaged from a single console\u2014with security policy built in.\n\nThis advisory contains the container images for Red Hat Advanced Cluster\nManagement for Kubernetes, which add new features and enhancements, bug\nfixes, and updated container images. See the following\nRelease Notes documentation, which will be updated shortly for this\nrelease, for additional details about this release:\n\nhttps://docs.redhat.com/en/documentation/red_hat_advanced_cluster_management_for_kubernetes/2.13/html-single/release_notes/index#acm-release-notes",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:47737",
"url": "https://access.redhat.com/errata/RHSA-2026:47737"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-27136",
"url": "https://access.redhat.com/security/cve/CVE-2026-27136"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-27145",
"url": "https://access.redhat.com/security/cve/CVE-2026-27145"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39821",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42508",
"url": "https://access.redhat.com/security/cve/CVE-2026-42508"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44740",
"url": "https://access.redhat.com/security/cve/CVE-2026-44740"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44990",
"url": "https://access.redhat.com/security/cve/CVE-2026-44990"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-45447",
"url": "https://access.redhat.com/security/cve/CVE-2026-45447"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-46595",
"url": "https://access.redhat.com/security/cve/CVE-2026-46595"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-50151",
"url": "https://access.redhat.com/security/cve/CVE-2026-50151"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-53488",
"url": "https://access.redhat.com/security/cve/CVE-2026-53488"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-59869",
"url": "https://access.redhat.com/security/cve/CVE-2026-59869"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_47737.json"
}
],
"title": "Red Hat Security Advisory: Red Hat Advanced Cluster Management for Kubernetes v2.13.10 security update",
"tracking": {
"current_release_date": "2026-08-22T08:39:20+00:00",
"generator": {
"date": "2026-08-22T08:39:20+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.16"
}
},
"id": "RHSA-2026:47737",
"initial_release_date": "2026-07-29T07:47:11+00:00",
"revision_history": [
{
"date": "2026-07-29T07:47:11+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-15T05:55:47+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-22T08:39:20+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product": {
"name": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:acm:2.13::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat Advanced Cluster Management for Kubernetes"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:31bd91156f49687d2efffd3be971d9ee0e16abb420b8e8b958caa88b97770020_amd64",
"product": {
"name": "registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:31bd91156f49687d2efffd3be971d9ee0e16abb420b8e8b958caa88b97770020_amd64",
"product_id": "registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:31bd91156f49687d2efffd3be971d9ee0e16abb420b8e8b958caa88b97770020_amd64",
"product_identification_helper": {
"purl": "pkg:oci/acm-cli-rhel9@sha256%3A31bd91156f49687d2efffd3be971d9ee0e16abb420b8e8b958caa88b97770020?arch=amd64\u0026repository_url=registry.redhat.io/rhacm2/acm-cli-rhel9\u0026tag=1784904649"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:cbf797c9e93413540b20ebee9191375ddd8185ef22dc8c9e23cc3a4c015abaf7_amd64",
"product": {
"name": "registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:cbf797c9e93413540b20ebee9191375ddd8185ef22dc8c9e23cc3a4c015abaf7_amd64",
"product_id": "registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:cbf797c9e93413540b20ebee9191375ddd8185ef22dc8c9e23cc3a4c015abaf7_amd64",
"product_identification_helper": {
"purl": "pkg:oci/cert-policy-controller-rhel9@sha256%3Acbf797c9e93413540b20ebee9191375ddd8185ef22dc8c9e23cc3a4c015abaf7?arch=amd64\u0026repository_url=registry.redhat.io/rhacm2/cert-policy-controller-rhel9\u0026tag=1784417900"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:ab0d28306dd6daa03af79bdc2ea650e59a50a03317987c4cdd0d1ee70f95b597_amd64",
"product": {
"name": "registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:ab0d28306dd6daa03af79bdc2ea650e59a50a03317987c4cdd0d1ee70f95b597_amd64",
"product_id": "registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:ab0d28306dd6daa03af79bdc2ea650e59a50a03317987c4cdd0d1ee70f95b597_amd64",
"product_identification_helper": {
"purl": "pkg:oci/cluster-backup-rhel9-operator@sha256%3Aab0d28306dd6daa03af79bdc2ea650e59a50a03317987c4cdd0d1ee70f95b597?arch=amd64\u0026repository_url=registry.redhat.io/rhacm2/cluster-backup-rhel9-operator\u0026tag=1784223569"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:3b83670e1c0e9d1f5b76bd7b75d77072bc6208646bc2201bd0bd200dbc59e34a_amd64",
"product": {
"name": "registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:3b83670e1c0e9d1f5b76bd7b75d77072bc6208646bc2201bd0bd200dbc59e34a_amd64",
"product_id": "registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:3b83670e1c0e9d1f5b76bd7b75d77072bc6208646bc2201bd0bd200dbc59e34a_amd64",
"product_identification_helper": {
"purl": "pkg:oci/acm-cluster-permission-rhel9@sha256%3A3b83670e1c0e9d1f5b76bd7b75d77072bc6208646bc2201bd0bd200dbc59e34a?arch=amd64\u0026repository_url=registry.redhat.io/rhacm2/acm-cluster-permission-rhel9\u0026tag=1784341151"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4015f46d2172db26a348635e2e8cbd4bbcdbbaa56a4b12c232676a3d0f5bbee2_amd64",
"product": {
"name": "registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4015f46d2172db26a348635e2e8cbd4bbcdbbaa56a4b12c232676a3d0f5bbee2_amd64",
"product_id": "registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4015f46d2172db26a348635e2e8cbd4bbcdbbaa56a4b12c232676a3d0f5bbee2_amd64",
"product_identification_helper": {
"purl": "pkg:oci/config-policy-controller-rhel9@sha256%3A4015f46d2172db26a348635e2e8cbd4bbcdbbaa56a4b12c232676a3d0f5bbee2?arch=amd64\u0026repository_url=registry.redhat.io/rhacm2/config-policy-controller-rhel9\u0026tag=1784417909"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/console-rhel9@sha256:d2394b121256985e5ca322aea77bb0bf999ba2d7a6f1627e62bbc125c475dbbd_amd64",
"product": {
"name": "registry.redhat.io/rhacm2/console-rhel9@sha256:d2394b121256985e5ca322aea77bb0bf999ba2d7a6f1627e62bbc125c475dbbd_amd64",
"product_id": "registry.redhat.io/rhacm2/console-rhel9@sha256:d2394b121256985e5ca322aea77bb0bf999ba2d7a6f1627e62bbc125c475dbbd_amd64",
"product_identification_helper": {
"purl": "pkg:oci/console-rhel9@sha256%3Ad2394b121256985e5ca322aea77bb0bf999ba2d7a6f1627e62bbc125c475dbbd?arch=amd64\u0026repository_url=registry.redhat.io/rhacm2/console-rhel9\u0026tag=1785078581"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:844e3d69d3c26914e02612466021592a876e6e2dd6cf77084723a70f567ba0e2_amd64",
"product": {
"name": "registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:844e3d69d3c26914e02612466021592a876e6e2dd6cf77084723a70f567ba0e2_amd64",
"product_id": "registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:844e3d69d3c26914e02612466021592a876e6e2dd6cf77084723a70f567ba0e2_amd64",
"product_identification_helper": {
"purl": "pkg:oci/endpoint-monitoring-rhel9-operator@sha256%3A844e3d69d3c26914e02612466021592a876e6e2dd6cf77084723a70f567ba0e2?arch=amd64\u0026repository_url=registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator\u0026tag=1784590746"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:ceacf3491ebec6f5613011fe8d36b66d00f8b3697832615a4d7024e23125085e_amd64",
"product": {
"name": "registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:ceacf3491ebec6f5613011fe8d36b66d00f8b3697832615a4d7024e23125085e_amd64",
"product_id": "registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:ceacf3491ebec6f5613011fe8d36b66d00f8b3697832615a4d7024e23125085e_amd64",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-operators-application-rhel9@sha256%3Aceacf3491ebec6f5613011fe8d36b66d00f8b3697832615a4d7024e23125085e?arch=amd64\u0026repository_url=registry.redhat.io/rhacm2/multicluster-operators-application-rhel9\u0026tag=1784504307"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:a69ebb0c7e817d44cfabd86ad13ef4cc94a8bf5b6e8a607d17b197603d64a224_amd64",
"product": {
"name": "registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:a69ebb0c7e817d44cfabd86ad13ef4cc94a8bf5b6e8a607d17b197603d64a224_amd64",
"product_id": "registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:a69ebb0c7e817d44cfabd86ad13ef4cc94a8bf5b6e8a607d17b197603d64a224_amd64",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-operators-channel-rhel9@sha256%3Aa69ebb0c7e817d44cfabd86ad13ef4cc94a8bf5b6e8a607d17b197603d64a224?arch=amd64\u0026repository_url=registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9\u0026tag=1784741269"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:22c48db227cd6f2ecec746674e31ac7f5a983a418679fc91678a0aa0ebb49496_amd64",
"product": {
"name": "registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:22c48db227cd6f2ecec746674e31ac7f5a983a418679fc91678a0aa0ebb49496_amd64",
"product_id": "registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:22c48db227cd6f2ecec746674e31ac7f5a983a418679fc91678a0aa0ebb49496_amd64",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-operators-subscription-rhel9@sha256%3A22c48db227cd6f2ecec746674e31ac7f5a983a418679fc91678a0aa0ebb49496?arch=amd64\u0026repository_url=registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9\u0026tag=1784740143"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:03adc6277e2bf409391941c6f4508154abc38a0c043139978754f6d4fd32c5a8_amd64",
"product": {
"name": "registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:03adc6277e2bf409391941c6f4508154abc38a0c043139978754f6d4fd32c5a8_amd64",
"product_id": "registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:03adc6277e2bf409391941c6f4508154abc38a0c043139978754f6d4fd32c5a8_amd64",
"product_identification_helper": {
"purl": "pkg:oci/multiclusterhub-rhel9@sha256%3A03adc6277e2bf409391941c6f4508154abc38a0c043139978754f6d4fd32c5a8?arch=amd64\u0026repository_url=registry.redhat.io/rhacm2/multiclusterhub-rhel9\u0026tag=1784638644"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:4f8f0b02d0969753e156226a998d442746c238a2a50ea606a49ca0cf695b8925_amd64",
"product": {
"name": "registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:4f8f0b02d0969753e156226a998d442746c238a2a50ea606a49ca0cf695b8925_amd64",
"product_id": "registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:4f8f0b02d0969753e156226a998d442746c238a2a50ea606a49ca0cf695b8925_amd64",
"product_identification_helper": {
"purl": "pkg:oci/acm-must-gather-rhel9@sha256%3A4f8f0b02d0969753e156226a998d442746c238a2a50ea606a49ca0cf695b8925?arch=amd64\u0026repository_url=registry.redhat.io/rhacm2/acm-must-gather-rhel9\u0026tag=1784563192"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:a79ac7dcae109aa526e2a218327dd8c5dba2b924fc27447a07199b3b2f2f67b3_amd64",
"product": {
"name": "registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:a79ac7dcae109aa526e2a218327dd8c5dba2b924fc27447a07199b3b2f2f67b3_amd64",
"product_id": "registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:a79ac7dcae109aa526e2a218327dd8c5dba2b924fc27447a07199b3b2f2f67b3_amd64",
"product_identification_helper": {
"purl": "pkg:oci/node-exporter-rhel9@sha256%3Aa79ac7dcae109aa526e2a218327dd8c5dba2b924fc27447a07199b3b2f2f67b3?arch=amd64\u0026repository_url=registry.redhat.io/rhacm2/node-exporter-rhel9\u0026tag=1784763530"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/observatorium-rhel9@sha256:f80976ae4fc332600e1d8e1d70b42c038ea05d76ac2c5b1d7d0cbaddbe89140a_amd64",
"product": {
"name": "registry.redhat.io/rhacm2/observatorium-rhel9@sha256:f80976ae4fc332600e1d8e1d70b42c038ea05d76ac2c5b1d7d0cbaddbe89140a_amd64",
"product_id": "registry.redhat.io/rhacm2/observatorium-rhel9@sha256:f80976ae4fc332600e1d8e1d70b42c038ea05d76ac2c5b1d7d0cbaddbe89140a_amd64",
"product_identification_helper": {
"purl": "pkg:oci/observatorium-rhel9@sha256%3Af80976ae4fc332600e1d8e1d70b42c038ea05d76ac2c5b1d7d0cbaddbe89140a?arch=amd64\u0026repository_url=registry.redhat.io/rhacm2/observatorium-rhel9\u0026tag=1784677189"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:89a3cb77fdb3dcbddfe96785a9ba3fa2b6132098fce028f859663b31fcf77a34_amd64",
"product": {
"name": "registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:89a3cb77fdb3dcbddfe96785a9ba3fa2b6132098fce028f859663b31fcf77a34_amd64",
"product_id": "registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:89a3cb77fdb3dcbddfe96785a9ba3fa2b6132098fce028f859663b31fcf77a34_amd64",
"product_identification_helper": {
"purl": "pkg:oci/observatorium-rhel9-operator@sha256%3A89a3cb77fdb3dcbddfe96785a9ba3fa2b6132098fce028f859663b31fcf77a34?arch=amd64\u0026repository_url=registry.redhat.io/rhacm2/observatorium-rhel9-operator\u0026tag=1784331518"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/prometheus-rhel9@sha256:4825fab15300bc911e0b2b5c4ae342004bfcff95fa64af0fdb1085fadd132aa2_amd64",
"product": {
"name": "registry.redhat.io/rhacm2/prometheus-rhel9@sha256:4825fab15300bc911e0b2b5c4ae342004bfcff95fa64af0fdb1085fadd132aa2_amd64",
"product_id": "registry.redhat.io/rhacm2/prometheus-rhel9@sha256:4825fab15300bc911e0b2b5c4ae342004bfcff95fa64af0fdb1085fadd132aa2_amd64",
"product_identification_helper": {
"purl": "pkg:oci/prometheus-rhel9@sha256%3A4825fab15300bc911e0b2b5c4ae342004bfcff95fa64af0fdb1085fadd132aa2?arch=amd64\u0026repository_url=registry.redhat.io/rhacm2/prometheus-rhel9\u0026tag=1785022718"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:63a3465a7539a8a286c846a84d63e3feca9a11758e4c0d697889b0bdeb26a25c_amd64",
"product": {
"name": "registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:63a3465a7539a8a286c846a84d63e3feca9a11758e4c0d697889b0bdeb26a25c_amd64",
"product_id": "registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:63a3465a7539a8a286c846a84d63e3feca9a11758e4c0d697889b0bdeb26a25c_amd64",
"product_identification_helper": {
"purl": "pkg:oci/prometheus-alertmanager-rhel9@sha256%3A63a3465a7539a8a286c846a84d63e3feca9a11758e4c0d697889b0bdeb26a25c?arch=amd64\u0026repository_url=registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9\u0026tag=1784816309"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/thanos-rhel9@sha256:3780b1bc80ab7ebc3cfed06ce69346d589dc07b53cea65ad3ed92cc912284300_amd64",
"product": {
"name": "registry.redhat.io/rhacm2/thanos-rhel9@sha256:3780b1bc80ab7ebc3cfed06ce69346d589dc07b53cea65ad3ed92cc912284300_amd64",
"product_id": "registry.redhat.io/rhacm2/thanos-rhel9@sha256:3780b1bc80ab7ebc3cfed06ce69346d589dc07b53cea65ad3ed92cc912284300_amd64",
"product_identification_helper": {
"purl": "pkg:oci/thanos-rhel9@sha256%3A3780b1bc80ab7ebc3cfed06ce69346d589dc07b53cea65ad3ed92cc912284300?arch=amd64\u0026repository_url=registry.redhat.io/rhacm2/thanos-rhel9\u0026tag=1784677282"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:76766b77ed53513cd254195b25d205ab6964522816e1e3662800e38a105abdf2_amd64",
"product": {
"name": "registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:76766b77ed53513cd254195b25d205ab6964522816e1e3662800e38a105abdf2_amd64",
"product_id": "registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:76766b77ed53513cd254195b25d205ab6964522816e1e3662800e38a105abdf2_amd64",
"product_identification_helper": {
"purl": "pkg:oci/thanos-receive-controller-rhel9@sha256%3A76766b77ed53513cd254195b25d205ab6964522816e1e3662800e38a105abdf2?arch=amd64\u0026repository_url=registry.redhat.io/rhacm2/thanos-receive-controller-rhel9\u0026tag=1784331568"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:ded425ed0af88a1411a06e5191aee25c4c59f1de85b041eba95c9997686cf09e_amd64",
"product": {
"name": "registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:ded425ed0af88a1411a06e5191aee25c4c59f1de85b041eba95c9997686cf09e_amd64",
"product_id": "registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:ded425ed0af88a1411a06e5191aee25c4c59f1de85b041eba95c9997686cf09e_amd64",
"product_identification_helper": {
"purl": "pkg:oci/acm-volsync-addon-controller-rhel9@sha256%3Aded425ed0af88a1411a06e5191aee25c4c59f1de85b041eba95c9997686cf09e?arch=amd64\u0026repository_url=registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9\u0026tag=1784136942"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:c6c4d01f5fcee6cad3fc870cace92f45000624760e6e93654bb5e814afeed7bb_amd64",
"product": {
"name": "registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:c6c4d01f5fcee6cad3fc870cace92f45000624760e6e93654bb5e814afeed7bb_amd64",
"product_id": "registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:c6c4d01f5fcee6cad3fc870cace92f45000624760e6e93654bb5e814afeed7bb_amd64",
"product_identification_helper": {
"purl": "pkg:oci/acm-prometheus-config-reloader-rhel9@sha256%3Ac6c4d01f5fcee6cad3fc870cace92f45000624760e6e93654bb5e814afeed7bb?arch=amd64\u0026repository_url=registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9\u0026tag=1784636929"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:57114b7a386c406715e342637558fab57afeef2e193517f99173a441f39401d5_amd64",
"product": {
"name": "registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:57114b7a386c406715e342637558fab57afeef2e193517f99173a441f39401d5_amd64",
"product_id": "registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:57114b7a386c406715e342637558fab57afeef2e193517f99173a441f39401d5_amd64",
"product_identification_helper": {
"purl": "pkg:oci/acm-prometheus-rhel9@sha256%3A57114b7a386c406715e342637558fab57afeef2e193517f99173a441f39401d5?arch=amd64\u0026repository_url=registry.redhat.io/rhacm2/acm-prometheus-rhel9\u0026tag=1784636997"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:1c943edcf23df14f254e4aabb93cbc1665bbc7902076b3f04bd80edd2fe324db_amd64",
"product": {
"name": "registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:1c943edcf23df14f254e4aabb93cbc1665bbc7902076b3f04bd80edd2fe324db_amd64",
"product_id": "registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:1c943edcf23df14f254e4aabb93cbc1665bbc7902076b3f04bd80edd2fe324db_amd64",
"product_identification_helper": {
"purl": "pkg:oci/rbac-query-proxy-rhel9@sha256%3A1c943edcf23df14f254e4aabb93cbc1665bbc7902076b3f04bd80edd2fe324db?arch=amd64\u0026repository_url=registry.redhat.io/rhacm2/rbac-query-proxy-rhel9\u0026tag=1784677225"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/search-collector-rhel9@sha256:f681cdac28ee9ff6375fb39d7b7d12917a06043db44c16e8f84bdb9e09e7b5e7_amd64",
"product": {
"name": "registry.redhat.io/rhacm2/search-collector-rhel9@sha256:f681cdac28ee9ff6375fb39d7b7d12917a06043db44c16e8f84bdb9e09e7b5e7_amd64",
"product_id": "registry.redhat.io/rhacm2/search-collector-rhel9@sha256:f681cdac28ee9ff6375fb39d7b7d12917a06043db44c16e8f84bdb9e09e7b5e7_amd64",
"product_identification_helper": {
"purl": "pkg:oci/search-collector-rhel9@sha256%3Af681cdac28ee9ff6375fb39d7b7d12917a06043db44c16e8f84bdb9e09e7b5e7?arch=amd64\u0026repository_url=registry.redhat.io/rhacm2/search-collector-rhel9\u0026tag=1784566813"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:3723b1d5c74f37cba219e203fd2026a718d4821595cb505ec6626684695da65b_amd64",
"product": {
"name": "registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:3723b1d5c74f37cba219e203fd2026a718d4821595cb505ec6626684695da65b_amd64",
"product_id": "registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:3723b1d5c74f37cba219e203fd2026a718d4821595cb505ec6626684695da65b_amd64",
"product_identification_helper": {
"purl": "pkg:oci/acm-search-indexer-rhel9@sha256%3A3723b1d5c74f37cba219e203fd2026a718d4821595cb505ec6626684695da65b?arch=amd64\u0026repository_url=registry.redhat.io/rhacm2/acm-search-indexer-rhel9\u0026tag=1784567106"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:2471edd63a94473c68cf37ee50de643e40003f2c5bba84063c154e4888a7f0bd_amd64",
"product": {
"name": "registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:2471edd63a94473c68cf37ee50de643e40003f2c5bba84063c154e4888a7f0bd_amd64",
"product_id": "registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:2471edd63a94473c68cf37ee50de643e40003f2c5bba84063c154e4888a7f0bd_amd64",
"product_identification_helper": {
"purl": "pkg:oci/acm-search-v2-api-rhel9@sha256%3A2471edd63a94473c68cf37ee50de643e40003f2c5bba84063c154e4888a7f0bd?arch=amd64\u0026repository_url=registry.redhat.io/rhacm2/acm-search-v2-api-rhel9\u0026tag=1784569468"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:fd96b6284d270effa0f838d960ea4218b72b54c4718513eb523658f2f4972682_amd64",
"product": {
"name": "registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:fd96b6284d270effa0f838d960ea4218b72b54c4718513eb523658f2f4972682_amd64",
"product_id": "registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:fd96b6284d270effa0f838d960ea4218b72b54c4718513eb523658f2f4972682_amd64",
"product_identification_helper": {
"purl": "pkg:oci/acm-search-v2-rhel9@sha256%3Afd96b6284d270effa0f838d960ea4218b72b54c4718513eb523658f2f4972682?arch=amd64\u0026repository_url=registry.redhat.io/rhacm2/acm-search-v2-rhel9\u0026tag=1784569967"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:c59d9cd479c62730eda5d482fb2f4e9fbc17a90a5a2861b130aafe1f3a27a333_amd64",
"product": {
"name": "registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:c59d9cd479c62730eda5d482fb2f4e9fbc17a90a5a2861b130aafe1f3a27a333_amd64",
"product_id": "registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:c59d9cd479c62730eda5d482fb2f4e9fbc17a90a5a2861b130aafe1f3a27a333_amd64",
"product_identification_helper": {
"purl": "pkg:oci/acm-siteconfig-rhel9@sha256%3Ac59d9cd479c62730eda5d482fb2f4e9fbc17a90a5a2861b130aafe1f3a27a333?arch=amd64\u0026repository_url=registry.redhat.io/rhacm2/acm-siteconfig-rhel9\u0026tag=1784790404"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:8be0e50a132a2c974893f36b51f3f40b6d6e1f913ae0f9ee6319ef0d5ec455b7_amd64",
"product": {
"name": "registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:8be0e50a132a2c974893f36b51f3f40b6d6e1f913ae0f9ee6319ef0d5ec455b7_amd64",
"product_id": "registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:8be0e50a132a2c974893f36b51f3f40b6d6e1f913ae0f9ee6319ef0d5ec455b7_amd64",
"product_identification_helper": {
"purl": "pkg:oci/submariner-addon-rhel9@sha256%3A8be0e50a132a2c974893f36b51f3f40b6d6e1f913ae0f9ee6319ef0d5ec455b7?arch=amd64\u0026repository_url=registry.redhat.io/rhacm2/submariner-addon-rhel9\u0026tag=1784331562"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/insights-client-rhel9@sha256:2a4c6c061d154ed9c74707a7a2e2390fde2a150f36197386c3e49c0612d345b2_amd64",
"product": {
"name": "registry.redhat.io/rhacm2/insights-client-rhel9@sha256:2a4c6c061d154ed9c74707a7a2e2390fde2a150f36197386c3e49c0612d345b2_amd64",
"product_id": "registry.redhat.io/rhacm2/insights-client-rhel9@sha256:2a4c6c061d154ed9c74707a7a2e2390fde2a150f36197386c3e49c0612d345b2_amd64",
"product_identification_helper": {
"purl": "pkg:oci/insights-client-rhel9@sha256%3A2a4c6c061d154ed9c74707a7a2e2390fde2a150f36197386c3e49c0612d345b2?arch=amd64\u0026repository_url=registry.redhat.io/rhacm2/insights-client-rhel9\u0026tag=1784569567"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:fcbcee9fc7e0bbf5775a33ae9b7e3d7e48a90e2aa1cb85605e05612b6e4d4e30_amd64",
"product": {
"name": "registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:fcbcee9fc7e0bbf5775a33ae9b7e3d7e48a90e2aa1cb85605e05612b6e4d4e30_amd64",
"product_id": "registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:fcbcee9fc7e0bbf5775a33ae9b7e3d7e48a90e2aa1cb85605e05612b6e4d4e30_amd64",
"product_identification_helper": {
"purl": "pkg:oci/insights-metrics-rhel9@sha256%3Afcbcee9fc7e0bbf5775a33ae9b7e3d7e48a90e2aa1cb85605e05612b6e4d4e30?arch=amd64\u0026repository_url=registry.redhat.io/rhacm2/insights-metrics-rhel9\u0026tag=1784569300"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:c5505c462e6b2c04a6e14bc1e22dfc42dc8adea8f6eaf0615cd58b1973b7d62e_amd64",
"product": {
"name": "registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:c5505c462e6b2c04a6e14bc1e22dfc42dc8adea8f6eaf0615cd58b1973b7d62e_amd64",
"product_id": "registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:c5505c462e6b2c04a6e14bc1e22dfc42dc8adea8f6eaf0615cd58b1973b7d62e_amd64",
"product_identification_helper": {
"purl": "pkg:oci/klusterlet-addon-controller-rhel9@sha256%3Ac5505c462e6b2c04a6e14bc1e22dfc42dc8adea8f6eaf0615cd58b1973b7d62e?arch=amd64\u0026repository_url=registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9\u0026tag=1784158688"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:1a93df314c31f10da7b1345fab07b15b846e28865764178e34124f84dc967152_amd64",
"product": {
"name": "registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:1a93df314c31f10da7b1345fab07b15b846e28865764178e34124f84dc967152_amd64",
"product_id": "registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:1a93df314c31f10da7b1345fab07b15b846e28865764178e34124f84dc967152_amd64",
"product_identification_helper": {
"purl": "pkg:oci/kube-rbac-proxy-rhel9@sha256%3A1a93df314c31f10da7b1345fab07b15b846e28865764178e34124f84dc967152?arch=amd64\u0026repository_url=registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9\u0026tag=1784677172"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:d40496f114898985cde3860b9664c34d8c32de85e4d3d846df91a6ba27a2e99c_amd64",
"product": {
"name": "registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:d40496f114898985cde3860b9664c34d8c32de85e4d3d846df91a6ba27a2e99c_amd64",
"product_id": "registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:d40496f114898985cde3860b9664c34d8c32de85e4d3d846df91a6ba27a2e99c_amd64",
"product_identification_helper": {
"purl": "pkg:oci/kube-state-metrics-rhel9@sha256%3Ad40496f114898985cde3860b9664c34d8c32de85e4d3d846df91a6ba27a2e99c?arch=amd64\u0026repository_url=registry.redhat.io/rhacm2/kube-state-metrics-rhel9\u0026tag=1784811720"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:3f7cbe7605595d712e14d9a17717fafc6c6e334f2ad3e821c34947ec78411046_amd64",
"product": {
"name": "registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:3f7cbe7605595d712e14d9a17717fafc6c6e334f2ad3e821c34947ec78411046_amd64",
"product_id": "registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:3f7cbe7605595d712e14d9a17717fafc6c6e334f2ad3e821c34947ec78411046_amd64",
"product_identification_helper": {
"purl": "pkg:oci/memcached-exporter-rhel9@sha256%3A3f7cbe7605595d712e14d9a17717fafc6c6e334f2ad3e821c34947ec78411046?arch=amd64\u0026repository_url=registry.redhat.io/rhacm2/memcached-exporter-rhel9\u0026tag=1784551283"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:70e6c14d72f14d25a90f44043932fbd3f824b30e8ad4b36307100726b24d9c06_amd64",
"product": {
"name": "registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:70e6c14d72f14d25a90f44043932fbd3f824b30e8ad4b36307100726b24d9c06_amd64",
"product_id": "registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:70e6c14d72f14d25a90f44043932fbd3f824b30e8ad4b36307100726b24d9c06_amd64",
"product_identification_helper": {
"purl": "pkg:oci/metrics-collector-rhel9@sha256%3A70e6c14d72f14d25a90f44043932fbd3f824b30e8ad4b36307100726b24d9c06?arch=amd64\u0026repository_url=registry.redhat.io/rhacm2/metrics-collector-rhel9\u0026tag=1784590742"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:26e58654cdd092cb812207cb4473f5f5988ebd708d95c34152c2e8c124f7297d_amd64",
"product": {
"name": "registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:26e58654cdd092cb812207cb4473f5f5988ebd708d95c34152c2e8c124f7297d_amd64",
"product_id": "registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:26e58654cdd092cb812207cb4473f5f5988ebd708d95c34152c2e8c124f7297d_amd64",
"product_identification_helper": {
"purl": "pkg:oci/multicloud-integrations-rhel9@sha256%3A26e58654cdd092cb812207cb4473f5f5988ebd708d95c34152c2e8c124f7297d?arch=amd64\u0026repository_url=registry.redhat.io/rhacm2/multicloud-integrations-rhel9\u0026tag=1784652040"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:9b2c24401a91903f023096d2b641aa977acff423eb6770a8e4c4a81aecfd4e62_amd64",
"product": {
"name": "registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:9b2c24401a91903f023096d2b641aa977acff423eb6770a8e4c4a81aecfd4e62_amd64",
"product_id": "registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:9b2c24401a91903f023096d2b641aa977acff423eb6770a8e4c4a81aecfd4e62_amd64",
"product_identification_helper": {
"purl": "pkg:oci/acm-multicluster-observability-addon-rhel9@sha256%3A9b2c24401a91903f023096d2b641aa977acff423eb6770a8e4c4a81aecfd4e62?arch=amd64\u0026repository_url=registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9\u0026tag=1784331511"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:2368703206d833e4cb73b7e8750efb9997633a6f9accbf032426bcfcae4c00d9_amd64",
"product": {
"name": "registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:2368703206d833e4cb73b7e8750efb9997633a6f9accbf032426bcfcae4c00d9_amd64",
"product_id": "registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:2368703206d833e4cb73b7e8750efb9997633a6f9accbf032426bcfcae4c00d9_amd64",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-observability-rhel9-operator@sha256%3A2368703206d833e4cb73b7e8750efb9997633a6f9accbf032426bcfcae4c00d9?arch=amd64\u0026repository_url=registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator\u0026tag=1784590741"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:6041a918713d4464c73560b68c294a12d33f297a980d2f9d0e0cc8c300a96f24_amd64",
"product": {
"name": "registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:6041a918713d4464c73560b68c294a12d33f297a980d2f9d0e0cc8c300a96f24_amd64",
"product_id": "registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:6041a918713d4464c73560b68c294a12d33f297a980d2f9d0e0cc8c300a96f24_amd64",
"product_identification_helper": {
"purl": "pkg:oci/acm-governance-policy-addon-controller-rhel9@sha256%3A6041a918713d4464c73560b68c294a12d33f297a980d2f9d0e0cc8c300a96f24?arch=amd64\u0026repository_url=registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9\u0026tag=1784331510"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:a0876a25ce85d7d4616212813f012422826f152b8d71065e75cd9c3e23034d8a_amd64",
"product": {
"name": "registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:a0876a25ce85d7d4616212813f012422826f152b8d71065e75cd9c3e23034d8a_amd64",
"product_id": "registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:a0876a25ce85d7d4616212813f012422826f152b8d71065e75cd9c3e23034d8a_amd64",
"product_identification_helper": {
"purl": "pkg:oci/acm-governance-policy-framework-addon-rhel9@sha256%3Aa0876a25ce85d7d4616212813f012422826f152b8d71065e75cd9c3e23034d8a?arch=amd64\u0026repository_url=registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9\u0026tag=1784331509"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:7b5e883efde312c1571c4825b523ff04ab57af6a9f4162a36b80b973f9602c46_amd64",
"product": {
"name": "registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:7b5e883efde312c1571c4825b523ff04ab57af6a9f4162a36b80b973f9602c46_amd64",
"product_id": "registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:7b5e883efde312c1571c4825b523ff04ab57af6a9f4162a36b80b973f9602c46_amd64",
"product_identification_helper": {
"purl": "pkg:oci/governance-policy-propagator-rhel9@sha256%3A7b5e883efde312c1571c4825b523ff04ab57af6a9f4162a36b80b973f9602c46?arch=amd64\u0026repository_url=registry.redhat.io/rhacm2/governance-policy-propagator-rhel9\u0026tag=1784298922"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:0f5d8cae3ba4ea4fcdc5fb9d08f797d576bc225b92af66f193bd4b1324cda4b9_amd64",
"product": {
"name": "registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:0f5d8cae3ba4ea4fcdc5fb9d08f797d576bc225b92af66f193bd4b1324cda4b9_amd64",
"product_id": "registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:0f5d8cae3ba4ea4fcdc5fb9d08f797d576bc225b92af66f193bd4b1324cda4b9_amd64",
"product_identification_helper": {
"purl": "pkg:oci/acm-grafana-rhel9@sha256%3A0f5d8cae3ba4ea4fcdc5fb9d08f797d576bc225b92af66f193bd4b1324cda4b9?arch=amd64\u0026repository_url=registry.redhat.io/rhacm2/acm-grafana-rhel9\u0026tag=1784591168"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:273a393b8c62fbc4edb4bf4033c47d8b52bda56fc9cafa289d9513210840815b_amd64",
"product": {
"name": "registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:273a393b8c62fbc4edb4bf4033c47d8b52bda56fc9cafa289d9513210840815b_amd64",
"product_id": "registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:273a393b8c62fbc4edb4bf4033c47d8b52bda56fc9cafa289d9513210840815b_amd64",
"product_identification_helper": {
"purl": "pkg:oci/grafana-dashboard-loader-rhel9@sha256%3A273a393b8c62fbc4edb4bf4033c47d8b52bda56fc9cafa289d9513210840815b?arch=amd64\u0026repository_url=registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9\u0026tag=1784299028"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:a6315866c67ba350665f5a92f960a5a44e427ca37ae7505e2072af4e02c42f76_arm64",
"product": {
"name": "registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:a6315866c67ba350665f5a92f960a5a44e427ca37ae7505e2072af4e02c42f76_arm64",
"product_id": "registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:a6315866c67ba350665f5a92f960a5a44e427ca37ae7505e2072af4e02c42f76_arm64",
"product_identification_helper": {
"purl": "pkg:oci/acm-cli-rhel9@sha256%3Aa6315866c67ba350665f5a92f960a5a44e427ca37ae7505e2072af4e02c42f76?arch=arm64\u0026repository_url=registry.redhat.io/rhacm2/acm-cli-rhel9\u0026tag=1784904649"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:d7609d62a801cf07ef639abcd4f193b2d68967fadebbfddf2349003d7e9eaa44_arm64",
"product": {
"name": "registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:d7609d62a801cf07ef639abcd4f193b2d68967fadebbfddf2349003d7e9eaa44_arm64",
"product_id": "registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:d7609d62a801cf07ef639abcd4f193b2d68967fadebbfddf2349003d7e9eaa44_arm64",
"product_identification_helper": {
"purl": "pkg:oci/cert-policy-controller-rhel9@sha256%3Ad7609d62a801cf07ef639abcd4f193b2d68967fadebbfddf2349003d7e9eaa44?arch=arm64\u0026repository_url=registry.redhat.io/rhacm2/cert-policy-controller-rhel9\u0026tag=1784417900"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:4f1e59610b2fbedc56f425b3fbd8f16c9ea6ea96025f18a404fe48f6a49bdc1e_arm64",
"product": {
"name": "registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:4f1e59610b2fbedc56f425b3fbd8f16c9ea6ea96025f18a404fe48f6a49bdc1e_arm64",
"product_id": "registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:4f1e59610b2fbedc56f425b3fbd8f16c9ea6ea96025f18a404fe48f6a49bdc1e_arm64",
"product_identification_helper": {
"purl": "pkg:oci/cluster-backup-rhel9-operator@sha256%3A4f1e59610b2fbedc56f425b3fbd8f16c9ea6ea96025f18a404fe48f6a49bdc1e?arch=arm64\u0026repository_url=registry.redhat.io/rhacm2/cluster-backup-rhel9-operator\u0026tag=1784223569"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:08fed161d59299881ff7a54db859feaf8ed7bdb8238d6cf12628ccb73575665e_arm64",
"product": {
"name": "registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:08fed161d59299881ff7a54db859feaf8ed7bdb8238d6cf12628ccb73575665e_arm64",
"product_id": "registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:08fed161d59299881ff7a54db859feaf8ed7bdb8238d6cf12628ccb73575665e_arm64",
"product_identification_helper": {
"purl": "pkg:oci/acm-cluster-permission-rhel9@sha256%3A08fed161d59299881ff7a54db859feaf8ed7bdb8238d6cf12628ccb73575665e?arch=arm64\u0026repository_url=registry.redhat.io/rhacm2/acm-cluster-permission-rhel9\u0026tag=1784341151"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4169252c61ec70b91b10c750d5f9ecd53f5c3c906766bba9103afbac3c3f9edf_arm64",
"product": {
"name": "registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4169252c61ec70b91b10c750d5f9ecd53f5c3c906766bba9103afbac3c3f9edf_arm64",
"product_id": "registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4169252c61ec70b91b10c750d5f9ecd53f5c3c906766bba9103afbac3c3f9edf_arm64",
"product_identification_helper": {
"purl": "pkg:oci/config-policy-controller-rhel9@sha256%3A4169252c61ec70b91b10c750d5f9ecd53f5c3c906766bba9103afbac3c3f9edf?arch=arm64\u0026repository_url=registry.redhat.io/rhacm2/config-policy-controller-rhel9\u0026tag=1784417909"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/console-rhel9@sha256:a43e430a2ec0b86fb6ade361677be298b4e27444388a9bca35ddafbf9c77277c_arm64",
"product": {
"name": "registry.redhat.io/rhacm2/console-rhel9@sha256:a43e430a2ec0b86fb6ade361677be298b4e27444388a9bca35ddafbf9c77277c_arm64",
"product_id": "registry.redhat.io/rhacm2/console-rhel9@sha256:a43e430a2ec0b86fb6ade361677be298b4e27444388a9bca35ddafbf9c77277c_arm64",
"product_identification_helper": {
"purl": "pkg:oci/console-rhel9@sha256%3Aa43e430a2ec0b86fb6ade361677be298b4e27444388a9bca35ddafbf9c77277c?arch=arm64\u0026repository_url=registry.redhat.io/rhacm2/console-rhel9\u0026tag=1785078581"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:bbe04eb8fd197f15875f498e3c18b9a7a445380efb5f696422d79df99a34a881_arm64",
"product": {
"name": "registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:bbe04eb8fd197f15875f498e3c18b9a7a445380efb5f696422d79df99a34a881_arm64",
"product_id": "registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:bbe04eb8fd197f15875f498e3c18b9a7a445380efb5f696422d79df99a34a881_arm64",
"product_identification_helper": {
"purl": "pkg:oci/endpoint-monitoring-rhel9-operator@sha256%3Abbe04eb8fd197f15875f498e3c18b9a7a445380efb5f696422d79df99a34a881?arch=arm64\u0026repository_url=registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator\u0026tag=1784590746"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:80b543b207e724e880ff932c514fe9c6a3925bfede1c31863531e4e69d050d40_arm64",
"product": {
"name": "registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:80b543b207e724e880ff932c514fe9c6a3925bfede1c31863531e4e69d050d40_arm64",
"product_id": "registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:80b543b207e724e880ff932c514fe9c6a3925bfede1c31863531e4e69d050d40_arm64",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-observability-rhel9-operator@sha256%3A80b543b207e724e880ff932c514fe9c6a3925bfede1c31863531e4e69d050d40?arch=arm64\u0026repository_url=registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator\u0026tag=1784590741"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:b67aec868b6366cf04f3980b15588e1a0af5c88b2248958bc3884261ad390ca0_arm64",
"product": {
"name": "registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:b67aec868b6366cf04f3980b15588e1a0af5c88b2248958bc3884261ad390ca0_arm64",
"product_id": "registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:b67aec868b6366cf04f3980b15588e1a0af5c88b2248958bc3884261ad390ca0_arm64",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-operators-application-rhel9@sha256%3Ab67aec868b6366cf04f3980b15588e1a0af5c88b2248958bc3884261ad390ca0?arch=arm64\u0026repository_url=registry.redhat.io/rhacm2/multicluster-operators-application-rhel9\u0026tag=1784504307"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:9cb20990af88287dd8a27de4e4ef12eb244577a1844482d26107359c6efe8efa_arm64",
"product": {
"name": "registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:9cb20990af88287dd8a27de4e4ef12eb244577a1844482d26107359c6efe8efa_arm64",
"product_id": "registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:9cb20990af88287dd8a27de4e4ef12eb244577a1844482d26107359c6efe8efa_arm64",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-operators-channel-rhel9@sha256%3A9cb20990af88287dd8a27de4e4ef12eb244577a1844482d26107359c6efe8efa?arch=arm64\u0026repository_url=registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9\u0026tag=1784741269"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:0eea35a3af36d08db945a70c387cc38eb326f75b4ed322f09d8c91863cfe5d02_arm64",
"product": {
"name": "registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:0eea35a3af36d08db945a70c387cc38eb326f75b4ed322f09d8c91863cfe5d02_arm64",
"product_id": "registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:0eea35a3af36d08db945a70c387cc38eb326f75b4ed322f09d8c91863cfe5d02_arm64",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-operators-subscription-rhel9@sha256%3A0eea35a3af36d08db945a70c387cc38eb326f75b4ed322f09d8c91863cfe5d02?arch=arm64\u0026repository_url=registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9\u0026tag=1784740143"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:91b474b4808b18c279c9f8eb3be8e6d1e1e47cf2b5f9553acd901c74b20bddbc_arm64",
"product": {
"name": "registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:91b474b4808b18c279c9f8eb3be8e6d1e1e47cf2b5f9553acd901c74b20bddbc_arm64",
"product_id": "registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:91b474b4808b18c279c9f8eb3be8e6d1e1e47cf2b5f9553acd901c74b20bddbc_arm64",
"product_identification_helper": {
"purl": "pkg:oci/multiclusterhub-rhel9@sha256%3A91b474b4808b18c279c9f8eb3be8e6d1e1e47cf2b5f9553acd901c74b20bddbc?arch=arm64\u0026repository_url=registry.redhat.io/rhacm2/multiclusterhub-rhel9\u0026tag=1784638644"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:2a598e7fd07db27100d9a53a328ac9a0535865883bddd1373f4f1f2705068d2f_arm64",
"product": {
"name": "registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:2a598e7fd07db27100d9a53a328ac9a0535865883bddd1373f4f1f2705068d2f_arm64",
"product_id": "registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:2a598e7fd07db27100d9a53a328ac9a0535865883bddd1373f4f1f2705068d2f_arm64",
"product_identification_helper": {
"purl": "pkg:oci/acm-must-gather-rhel9@sha256%3A2a598e7fd07db27100d9a53a328ac9a0535865883bddd1373f4f1f2705068d2f?arch=arm64\u0026repository_url=registry.redhat.io/rhacm2/acm-must-gather-rhel9\u0026tag=1784563192"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:dee022821852f2d5ebdbbd9f09c9b97997a905061dadb3f78433291d462d49a7_arm64",
"product": {
"name": "registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:dee022821852f2d5ebdbbd9f09c9b97997a905061dadb3f78433291d462d49a7_arm64",
"product_id": "registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:dee022821852f2d5ebdbbd9f09c9b97997a905061dadb3f78433291d462d49a7_arm64",
"product_identification_helper": {
"purl": "pkg:oci/node-exporter-rhel9@sha256%3Adee022821852f2d5ebdbbd9f09c9b97997a905061dadb3f78433291d462d49a7?arch=arm64\u0026repository_url=registry.redhat.io/rhacm2/node-exporter-rhel9\u0026tag=1784763530"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/observatorium-rhel9@sha256:b5b732dfc0ce3d740781eda9a72e1542c7a30b28b39d2be6e0ba470af06a9680_arm64",
"product": {
"name": "registry.redhat.io/rhacm2/observatorium-rhel9@sha256:b5b732dfc0ce3d740781eda9a72e1542c7a30b28b39d2be6e0ba470af06a9680_arm64",
"product_id": "registry.redhat.io/rhacm2/observatorium-rhel9@sha256:b5b732dfc0ce3d740781eda9a72e1542c7a30b28b39d2be6e0ba470af06a9680_arm64",
"product_identification_helper": {
"purl": "pkg:oci/observatorium-rhel9@sha256%3Ab5b732dfc0ce3d740781eda9a72e1542c7a30b28b39d2be6e0ba470af06a9680?arch=arm64\u0026repository_url=registry.redhat.io/rhacm2/observatorium-rhel9\u0026tag=1784677189"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:1a746b16f362a83f399255d925b322b3440b3d89ae4d64ab7962db3d82ee91a1_arm64",
"product": {
"name": "registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:1a746b16f362a83f399255d925b322b3440b3d89ae4d64ab7962db3d82ee91a1_arm64",
"product_id": "registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:1a746b16f362a83f399255d925b322b3440b3d89ae4d64ab7962db3d82ee91a1_arm64",
"product_identification_helper": {
"purl": "pkg:oci/observatorium-rhel9-operator@sha256%3A1a746b16f362a83f399255d925b322b3440b3d89ae4d64ab7962db3d82ee91a1?arch=arm64\u0026repository_url=registry.redhat.io/rhacm2/observatorium-rhel9-operator\u0026tag=1784331518"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/prometheus-rhel9@sha256:b4188ac728c746769ef6586663dd6d7d07db984b083397d2c76fe847ef22ea60_arm64",
"product": {
"name": "registry.redhat.io/rhacm2/prometheus-rhel9@sha256:b4188ac728c746769ef6586663dd6d7d07db984b083397d2c76fe847ef22ea60_arm64",
"product_id": "registry.redhat.io/rhacm2/prometheus-rhel9@sha256:b4188ac728c746769ef6586663dd6d7d07db984b083397d2c76fe847ef22ea60_arm64",
"product_identification_helper": {
"purl": "pkg:oci/prometheus-rhel9@sha256%3Ab4188ac728c746769ef6586663dd6d7d07db984b083397d2c76fe847ef22ea60?arch=arm64\u0026repository_url=registry.redhat.io/rhacm2/prometheus-rhel9\u0026tag=1785022718"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:81c227d7c7599b0d4357ccdc3b567f31b67bbd1198c9e7ddba1864c299bad11b_arm64",
"product": {
"name": "registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:81c227d7c7599b0d4357ccdc3b567f31b67bbd1198c9e7ddba1864c299bad11b_arm64",
"product_id": "registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:81c227d7c7599b0d4357ccdc3b567f31b67bbd1198c9e7ddba1864c299bad11b_arm64",
"product_identification_helper": {
"purl": "pkg:oci/prometheus-alertmanager-rhel9@sha256%3A81c227d7c7599b0d4357ccdc3b567f31b67bbd1198c9e7ddba1864c299bad11b?arch=arm64\u0026repository_url=registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9\u0026tag=1784816309"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:c81c7aeb3dd05801e279a9fcc8d6c3baf00a2ccc08eab53f8acc8bd4d2d129c4_arm64",
"product": {
"name": "registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:c81c7aeb3dd05801e279a9fcc8d6c3baf00a2ccc08eab53f8acc8bd4d2d129c4_arm64",
"product_id": "registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:c81c7aeb3dd05801e279a9fcc8d6c3baf00a2ccc08eab53f8acc8bd4d2d129c4_arm64",
"product_identification_helper": {
"purl": "pkg:oci/submariner-addon-rhel9@sha256%3Ac81c7aeb3dd05801e279a9fcc8d6c3baf00a2ccc08eab53f8acc8bd4d2d129c4?arch=arm64\u0026repository_url=registry.redhat.io/rhacm2/submariner-addon-rhel9\u0026tag=1784331562"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/thanos-rhel9@sha256:d110b52ce8ea022b3d35e7c4b0ce3b646f30513cf8abb55327132565ea4a6a87_arm64",
"product": {
"name": "registry.redhat.io/rhacm2/thanos-rhel9@sha256:d110b52ce8ea022b3d35e7c4b0ce3b646f30513cf8abb55327132565ea4a6a87_arm64",
"product_id": "registry.redhat.io/rhacm2/thanos-rhel9@sha256:d110b52ce8ea022b3d35e7c4b0ce3b646f30513cf8abb55327132565ea4a6a87_arm64",
"product_identification_helper": {
"purl": "pkg:oci/thanos-rhel9@sha256%3Ad110b52ce8ea022b3d35e7c4b0ce3b646f30513cf8abb55327132565ea4a6a87?arch=arm64\u0026repository_url=registry.redhat.io/rhacm2/thanos-rhel9\u0026tag=1784677282"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:25e17bf203568420587cf5907e84e4167afab84dfce549c91bea99e70290b742_arm64",
"product": {
"name": "registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:25e17bf203568420587cf5907e84e4167afab84dfce549c91bea99e70290b742_arm64",
"product_id": "registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:25e17bf203568420587cf5907e84e4167afab84dfce549c91bea99e70290b742_arm64",
"product_identification_helper": {
"purl": "pkg:oci/thanos-receive-controller-rhel9@sha256%3A25e17bf203568420587cf5907e84e4167afab84dfce549c91bea99e70290b742?arch=arm64\u0026repository_url=registry.redhat.io/rhacm2/thanos-receive-controller-rhel9\u0026tag=1784331568"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:ee63f59942f9df04e95fc4266f0d194cd62a7ca08dd5478283884d0ab6003da7_arm64",
"product": {
"name": "registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:ee63f59942f9df04e95fc4266f0d194cd62a7ca08dd5478283884d0ab6003da7_arm64",
"product_id": "registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:ee63f59942f9df04e95fc4266f0d194cd62a7ca08dd5478283884d0ab6003da7_arm64",
"product_identification_helper": {
"purl": "pkg:oci/acm-volsync-addon-controller-rhel9@sha256%3Aee63f59942f9df04e95fc4266f0d194cd62a7ca08dd5478283884d0ab6003da7?arch=arm64\u0026repository_url=registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9\u0026tag=1784136942"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:0a90a13f006ef0b271079b728ef6d54081f36ae19b6d0e9ab4dc24ea52a30fad_arm64",
"product": {
"name": "registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:0a90a13f006ef0b271079b728ef6d54081f36ae19b6d0e9ab4dc24ea52a30fad_arm64",
"product_id": "registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:0a90a13f006ef0b271079b728ef6d54081f36ae19b6d0e9ab4dc24ea52a30fad_arm64",
"product_identification_helper": {
"purl": "pkg:oci/acm-prometheus-config-reloader-rhel9@sha256%3A0a90a13f006ef0b271079b728ef6d54081f36ae19b6d0e9ab4dc24ea52a30fad?arch=arm64\u0026repository_url=registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9\u0026tag=1784636929"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:dcdcaa90f292f2d7ad3f10acbedfab9f7f22f3432c3156055f34760d9bf9429c_arm64",
"product": {
"name": "registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:dcdcaa90f292f2d7ad3f10acbedfab9f7f22f3432c3156055f34760d9bf9429c_arm64",
"product_id": "registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:dcdcaa90f292f2d7ad3f10acbedfab9f7f22f3432c3156055f34760d9bf9429c_arm64",
"product_identification_helper": {
"purl": "pkg:oci/acm-prometheus-rhel9@sha256%3Adcdcaa90f292f2d7ad3f10acbedfab9f7f22f3432c3156055f34760d9bf9429c?arch=arm64\u0026repository_url=registry.redhat.io/rhacm2/acm-prometheus-rhel9\u0026tag=1784636997"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:84c5d2b24caf68c3a6a6d078bd9f66de9fb88e769f6c09c11a248693d463ac21_arm64",
"product": {
"name": "registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:84c5d2b24caf68c3a6a6d078bd9f66de9fb88e769f6c09c11a248693d463ac21_arm64",
"product_id": "registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:84c5d2b24caf68c3a6a6d078bd9f66de9fb88e769f6c09c11a248693d463ac21_arm64",
"product_identification_helper": {
"purl": "pkg:oci/rbac-query-proxy-rhel9@sha256%3A84c5d2b24caf68c3a6a6d078bd9f66de9fb88e769f6c09c11a248693d463ac21?arch=arm64\u0026repository_url=registry.redhat.io/rhacm2/rbac-query-proxy-rhel9\u0026tag=1784677225"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/search-collector-rhel9@sha256:44981f5fcbc9086470143fae6e21a5de3baad2258d9f8c81accecb2faad6b2a2_arm64",
"product": {
"name": "registry.redhat.io/rhacm2/search-collector-rhel9@sha256:44981f5fcbc9086470143fae6e21a5de3baad2258d9f8c81accecb2faad6b2a2_arm64",
"product_id": "registry.redhat.io/rhacm2/search-collector-rhel9@sha256:44981f5fcbc9086470143fae6e21a5de3baad2258d9f8c81accecb2faad6b2a2_arm64",
"product_identification_helper": {
"purl": "pkg:oci/search-collector-rhel9@sha256%3A44981f5fcbc9086470143fae6e21a5de3baad2258d9f8c81accecb2faad6b2a2?arch=arm64\u0026repository_url=registry.redhat.io/rhacm2/search-collector-rhel9\u0026tag=1784566813"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:e6dfac9bc3e467e141a425944782f5087ed967ac4d02d8d47442e3d61ba5b882_arm64",
"product": {
"name": "registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:e6dfac9bc3e467e141a425944782f5087ed967ac4d02d8d47442e3d61ba5b882_arm64",
"product_id": "registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:e6dfac9bc3e467e141a425944782f5087ed967ac4d02d8d47442e3d61ba5b882_arm64",
"product_identification_helper": {
"purl": "pkg:oci/acm-search-indexer-rhel9@sha256%3Ae6dfac9bc3e467e141a425944782f5087ed967ac4d02d8d47442e3d61ba5b882?arch=arm64\u0026repository_url=registry.redhat.io/rhacm2/acm-search-indexer-rhel9\u0026tag=1784567106"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:f3034211e16de48af540efe4ee460395dba0a4a544fa4f277a12840a25df1730_arm64",
"product": {
"name": "registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:f3034211e16de48af540efe4ee460395dba0a4a544fa4f277a12840a25df1730_arm64",
"product_id": "registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:f3034211e16de48af540efe4ee460395dba0a4a544fa4f277a12840a25df1730_arm64",
"product_identification_helper": {
"purl": "pkg:oci/acm-search-v2-api-rhel9@sha256%3Af3034211e16de48af540efe4ee460395dba0a4a544fa4f277a12840a25df1730?arch=arm64\u0026repository_url=registry.redhat.io/rhacm2/acm-search-v2-api-rhel9\u0026tag=1784569468"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:ac172243d158e126594f28317e0cfb37dc1790c9f2121e95fe52506b5e05fc91_arm64",
"product": {
"name": "registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:ac172243d158e126594f28317e0cfb37dc1790c9f2121e95fe52506b5e05fc91_arm64",
"product_id": "registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:ac172243d158e126594f28317e0cfb37dc1790c9f2121e95fe52506b5e05fc91_arm64",
"product_identification_helper": {
"purl": "pkg:oci/acm-search-v2-rhel9@sha256%3Aac172243d158e126594f28317e0cfb37dc1790c9f2121e95fe52506b5e05fc91?arch=arm64\u0026repository_url=registry.redhat.io/rhacm2/acm-search-v2-rhel9\u0026tag=1784569967"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:ed0457a57c7b39b79fb308176f45ffe678938b25fbb8c15de2cedbe54b916f64_arm64",
"product": {
"name": "registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:ed0457a57c7b39b79fb308176f45ffe678938b25fbb8c15de2cedbe54b916f64_arm64",
"product_id": "registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:ed0457a57c7b39b79fb308176f45ffe678938b25fbb8c15de2cedbe54b916f64_arm64",
"product_identification_helper": {
"purl": "pkg:oci/acm-siteconfig-rhel9@sha256%3Aed0457a57c7b39b79fb308176f45ffe678938b25fbb8c15de2cedbe54b916f64?arch=arm64\u0026repository_url=registry.redhat.io/rhacm2/acm-siteconfig-rhel9\u0026tag=1784790404"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:71f1b590785ce7f4577ecd687dbab9bc3c5931c568a3108eb84279c7aa892046_arm64",
"product": {
"name": "registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:71f1b590785ce7f4577ecd687dbab9bc3c5931c568a3108eb84279c7aa892046_arm64",
"product_id": "registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:71f1b590785ce7f4577ecd687dbab9bc3c5931c568a3108eb84279c7aa892046_arm64",
"product_identification_helper": {
"purl": "pkg:oci/grafana-dashboard-loader-rhel9@sha256%3A71f1b590785ce7f4577ecd687dbab9bc3c5931c568a3108eb84279c7aa892046?arch=arm64\u0026repository_url=registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9\u0026tag=1784299028"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/insights-client-rhel9@sha256:d83c6bb4f2a91d2c4de3ffbf4aa8ceecb695f8491ba7586d55275c62cd1931e6_arm64",
"product": {
"name": "registry.redhat.io/rhacm2/insights-client-rhel9@sha256:d83c6bb4f2a91d2c4de3ffbf4aa8ceecb695f8491ba7586d55275c62cd1931e6_arm64",
"product_id": "registry.redhat.io/rhacm2/insights-client-rhel9@sha256:d83c6bb4f2a91d2c4de3ffbf4aa8ceecb695f8491ba7586d55275c62cd1931e6_arm64",
"product_identification_helper": {
"purl": "pkg:oci/insights-client-rhel9@sha256%3Ad83c6bb4f2a91d2c4de3ffbf4aa8ceecb695f8491ba7586d55275c62cd1931e6?arch=arm64\u0026repository_url=registry.redhat.io/rhacm2/insights-client-rhel9\u0026tag=1784569567"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:9f5fa40c88b0f5d1ae3634632240817a91f4575f8eae9c005b8e35a55cf38003_arm64",
"product": {
"name": "registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:9f5fa40c88b0f5d1ae3634632240817a91f4575f8eae9c005b8e35a55cf38003_arm64",
"product_id": "registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:9f5fa40c88b0f5d1ae3634632240817a91f4575f8eae9c005b8e35a55cf38003_arm64",
"product_identification_helper": {
"purl": "pkg:oci/insights-metrics-rhel9@sha256%3A9f5fa40c88b0f5d1ae3634632240817a91f4575f8eae9c005b8e35a55cf38003?arch=arm64\u0026repository_url=registry.redhat.io/rhacm2/insights-metrics-rhel9\u0026tag=1784569300"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:42aa392f82bdc45a3b857d1ed44e224ddfd14db1e3dcbb74dcc850ac0540e964_arm64",
"product": {
"name": "registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:42aa392f82bdc45a3b857d1ed44e224ddfd14db1e3dcbb74dcc850ac0540e964_arm64",
"product_id": "registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:42aa392f82bdc45a3b857d1ed44e224ddfd14db1e3dcbb74dcc850ac0540e964_arm64",
"product_identification_helper": {
"purl": "pkg:oci/klusterlet-addon-controller-rhel9@sha256%3A42aa392f82bdc45a3b857d1ed44e224ddfd14db1e3dcbb74dcc850ac0540e964?arch=arm64\u0026repository_url=registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9\u0026tag=1784158688"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:34343f81973c3fbdd8630c32d0fad597745ea10f960ea64236408e58e0f10e14_arm64",
"product": {
"name": "registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:34343f81973c3fbdd8630c32d0fad597745ea10f960ea64236408e58e0f10e14_arm64",
"product_id": "registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:34343f81973c3fbdd8630c32d0fad597745ea10f960ea64236408e58e0f10e14_arm64",
"product_identification_helper": {
"purl": "pkg:oci/kube-rbac-proxy-rhel9@sha256%3A34343f81973c3fbdd8630c32d0fad597745ea10f960ea64236408e58e0f10e14?arch=arm64\u0026repository_url=registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9\u0026tag=1784677172"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:bd739ced163053224e5b0ea2f3cd577481c6b6c1162cc0fbc186f1716b4a1fbd_arm64",
"product": {
"name": "registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:bd739ced163053224e5b0ea2f3cd577481c6b6c1162cc0fbc186f1716b4a1fbd_arm64",
"product_id": "registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:bd739ced163053224e5b0ea2f3cd577481c6b6c1162cc0fbc186f1716b4a1fbd_arm64",
"product_identification_helper": {
"purl": "pkg:oci/kube-state-metrics-rhel9@sha256%3Abd739ced163053224e5b0ea2f3cd577481c6b6c1162cc0fbc186f1716b4a1fbd?arch=arm64\u0026repository_url=registry.redhat.io/rhacm2/kube-state-metrics-rhel9\u0026tag=1784811720"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:e59c90cfe8160b28f9d2aa9e59b1d04d742df44d2195210ebc1946ee3cb78b6f_arm64",
"product": {
"name": "registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:e59c90cfe8160b28f9d2aa9e59b1d04d742df44d2195210ebc1946ee3cb78b6f_arm64",
"product_id": "registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:e59c90cfe8160b28f9d2aa9e59b1d04d742df44d2195210ebc1946ee3cb78b6f_arm64",
"product_identification_helper": {
"purl": "pkg:oci/memcached-exporter-rhel9@sha256%3Ae59c90cfe8160b28f9d2aa9e59b1d04d742df44d2195210ebc1946ee3cb78b6f?arch=arm64\u0026repository_url=registry.redhat.io/rhacm2/memcached-exporter-rhel9\u0026tag=1784551283"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:784129cf69b3bf77a907fe909fd73a2a4d0fbd947fe0037e47aa1d62c6ffcf0b_arm64",
"product": {
"name": "registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:784129cf69b3bf77a907fe909fd73a2a4d0fbd947fe0037e47aa1d62c6ffcf0b_arm64",
"product_id": "registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:784129cf69b3bf77a907fe909fd73a2a4d0fbd947fe0037e47aa1d62c6ffcf0b_arm64",
"product_identification_helper": {
"purl": "pkg:oci/metrics-collector-rhel9@sha256%3A784129cf69b3bf77a907fe909fd73a2a4d0fbd947fe0037e47aa1d62c6ffcf0b?arch=arm64\u0026repository_url=registry.redhat.io/rhacm2/metrics-collector-rhel9\u0026tag=1784590742"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:5b59faed336de07965755c893cb9d0ffc52ec90f61cc8c54487f6c0cac53322e_arm64",
"product": {
"name": "registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:5b59faed336de07965755c893cb9d0ffc52ec90f61cc8c54487f6c0cac53322e_arm64",
"product_id": "registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:5b59faed336de07965755c893cb9d0ffc52ec90f61cc8c54487f6c0cac53322e_arm64",
"product_identification_helper": {
"purl": "pkg:oci/multicloud-integrations-rhel9@sha256%3A5b59faed336de07965755c893cb9d0ffc52ec90f61cc8c54487f6c0cac53322e?arch=arm64\u0026repository_url=registry.redhat.io/rhacm2/multicloud-integrations-rhel9\u0026tag=1784652040"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:a6ee95d0ed82bddef084684d11fa770bd646d9be9bc65b3bc386d7c58b33975c_arm64",
"product": {
"name": "registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:a6ee95d0ed82bddef084684d11fa770bd646d9be9bc65b3bc386d7c58b33975c_arm64",
"product_id": "registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:a6ee95d0ed82bddef084684d11fa770bd646d9be9bc65b3bc386d7c58b33975c_arm64",
"product_identification_helper": {
"purl": "pkg:oci/acm-multicluster-observability-addon-rhel9@sha256%3Aa6ee95d0ed82bddef084684d11fa770bd646d9be9bc65b3bc386d7c58b33975c?arch=arm64\u0026repository_url=registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9\u0026tag=1784331511"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:38a3bc59511133cae56827eba879e7c82c5a974bf1f16b6e8d95e1f79821e669_arm64",
"product": {
"name": "registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:38a3bc59511133cae56827eba879e7c82c5a974bf1f16b6e8d95e1f79821e669_arm64",
"product_id": "registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:38a3bc59511133cae56827eba879e7c82c5a974bf1f16b6e8d95e1f79821e669_arm64",
"product_identification_helper": {
"purl": "pkg:oci/acm-governance-policy-addon-controller-rhel9@sha256%3A38a3bc59511133cae56827eba879e7c82c5a974bf1f16b6e8d95e1f79821e669?arch=arm64\u0026repository_url=registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9\u0026tag=1784331510"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:c77077a0cca835a503a6529c89ab19c4027f949d361afdf8a5a259e1e87b0d55_arm64",
"product": {
"name": "registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:c77077a0cca835a503a6529c89ab19c4027f949d361afdf8a5a259e1e87b0d55_arm64",
"product_id": "registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:c77077a0cca835a503a6529c89ab19c4027f949d361afdf8a5a259e1e87b0d55_arm64",
"product_identification_helper": {
"purl": "pkg:oci/acm-governance-policy-framework-addon-rhel9@sha256%3Ac77077a0cca835a503a6529c89ab19c4027f949d361afdf8a5a259e1e87b0d55?arch=arm64\u0026repository_url=registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9\u0026tag=1784331509"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:d896dd89fb924da246fc729041d9debc019d8a4210cfd3de8883834e429cca10_arm64",
"product": {
"name": "registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:d896dd89fb924da246fc729041d9debc019d8a4210cfd3de8883834e429cca10_arm64",
"product_id": "registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:d896dd89fb924da246fc729041d9debc019d8a4210cfd3de8883834e429cca10_arm64",
"product_identification_helper": {
"purl": "pkg:oci/governance-policy-propagator-rhel9@sha256%3Ad896dd89fb924da246fc729041d9debc019d8a4210cfd3de8883834e429cca10?arch=arm64\u0026repository_url=registry.redhat.io/rhacm2/governance-policy-propagator-rhel9\u0026tag=1784298922"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:2d3588825f8a714fa59b1648d0934d064165e333f322f7f31f01f07b940d42d9_arm64",
"product": {
"name": "registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:2d3588825f8a714fa59b1648d0934d064165e333f322f7f31f01f07b940d42d9_arm64",
"product_id": "registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:2d3588825f8a714fa59b1648d0934d064165e333f322f7f31f01f07b940d42d9_arm64",
"product_identification_helper": {
"purl": "pkg:oci/acm-grafana-rhel9@sha256%3A2d3588825f8a714fa59b1648d0934d064165e333f322f7f31f01f07b940d42d9?arch=arm64\u0026repository_url=registry.redhat.io/rhacm2/acm-grafana-rhel9\u0026tag=1784591168"
}
}
}
],
"category": "architecture",
"name": "arm64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:bfde9ebea1fcd27b6d104d5f67db62e870878f9517ccbec2f649dd2c1af4a073_ppc64le",
"product": {
"name": "registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:bfde9ebea1fcd27b6d104d5f67db62e870878f9517ccbec2f649dd2c1af4a073_ppc64le",
"product_id": "registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:bfde9ebea1fcd27b6d104d5f67db62e870878f9517ccbec2f649dd2c1af4a073_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/acm-cli-rhel9@sha256%3Abfde9ebea1fcd27b6d104d5f67db62e870878f9517ccbec2f649dd2c1af4a073?arch=ppc64le\u0026repository_url=registry.redhat.io/rhacm2/acm-cli-rhel9\u0026tag=1784904649"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:724377cabaa284a5197e7505a7150c89631c2f2bcc629e074c7c0be18abd8e6f_ppc64le",
"product": {
"name": "registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:724377cabaa284a5197e7505a7150c89631c2f2bcc629e074c7c0be18abd8e6f_ppc64le",
"product_id": "registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:724377cabaa284a5197e7505a7150c89631c2f2bcc629e074c7c0be18abd8e6f_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/cert-policy-controller-rhel9@sha256%3A724377cabaa284a5197e7505a7150c89631c2f2bcc629e074c7c0be18abd8e6f?arch=ppc64le\u0026repository_url=registry.redhat.io/rhacm2/cert-policy-controller-rhel9\u0026tag=1784417900"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:b700a8bb7ea6e4253afb8bcf94e5ad086349980ca0716a87817724d3da3fdce1_ppc64le",
"product": {
"name": "registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:b700a8bb7ea6e4253afb8bcf94e5ad086349980ca0716a87817724d3da3fdce1_ppc64le",
"product_id": "registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:b700a8bb7ea6e4253afb8bcf94e5ad086349980ca0716a87817724d3da3fdce1_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/cluster-backup-rhel9-operator@sha256%3Ab700a8bb7ea6e4253afb8bcf94e5ad086349980ca0716a87817724d3da3fdce1?arch=ppc64le\u0026repository_url=registry.redhat.io/rhacm2/cluster-backup-rhel9-operator\u0026tag=1784223569"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:927146f966e4c5c2908d29d8ab45a8f3071dbd5ebd9cf0424460a23f814a72a7_ppc64le",
"product": {
"name": "registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:927146f966e4c5c2908d29d8ab45a8f3071dbd5ebd9cf0424460a23f814a72a7_ppc64le",
"product_id": "registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:927146f966e4c5c2908d29d8ab45a8f3071dbd5ebd9cf0424460a23f814a72a7_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/acm-cluster-permission-rhel9@sha256%3A927146f966e4c5c2908d29d8ab45a8f3071dbd5ebd9cf0424460a23f814a72a7?arch=ppc64le\u0026repository_url=registry.redhat.io/rhacm2/acm-cluster-permission-rhel9\u0026tag=1784341151"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4ab72a192553c21de76754f06fe38cf443e686e4b4edc2aa2ceb2b6b9d95bb6c_ppc64le",
"product": {
"name": "registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4ab72a192553c21de76754f06fe38cf443e686e4b4edc2aa2ceb2b6b9d95bb6c_ppc64le",
"product_id": "registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4ab72a192553c21de76754f06fe38cf443e686e4b4edc2aa2ceb2b6b9d95bb6c_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/config-policy-controller-rhel9@sha256%3A4ab72a192553c21de76754f06fe38cf443e686e4b4edc2aa2ceb2b6b9d95bb6c?arch=ppc64le\u0026repository_url=registry.redhat.io/rhacm2/config-policy-controller-rhel9\u0026tag=1784417909"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/console-rhel9@sha256:7e960b59f64547f7e9602b7c066a51ab52aba929726aec2bacdf486a9d4d28fd_ppc64le",
"product": {
"name": "registry.redhat.io/rhacm2/console-rhel9@sha256:7e960b59f64547f7e9602b7c066a51ab52aba929726aec2bacdf486a9d4d28fd_ppc64le",
"product_id": "registry.redhat.io/rhacm2/console-rhel9@sha256:7e960b59f64547f7e9602b7c066a51ab52aba929726aec2bacdf486a9d4d28fd_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/console-rhel9@sha256%3A7e960b59f64547f7e9602b7c066a51ab52aba929726aec2bacdf486a9d4d28fd?arch=ppc64le\u0026repository_url=registry.redhat.io/rhacm2/console-rhel9\u0026tag=1785078581"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:1868e2ea03d063b4cd64601cb0aaf5c9ea7f55e83eba2e2d4dcf6f830efeafc7_ppc64le",
"product": {
"name": "registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:1868e2ea03d063b4cd64601cb0aaf5c9ea7f55e83eba2e2d4dcf6f830efeafc7_ppc64le",
"product_id": "registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:1868e2ea03d063b4cd64601cb0aaf5c9ea7f55e83eba2e2d4dcf6f830efeafc7_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/endpoint-monitoring-rhel9-operator@sha256%3A1868e2ea03d063b4cd64601cb0aaf5c9ea7f55e83eba2e2d4dcf6f830efeafc7?arch=ppc64le\u0026repository_url=registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator\u0026tag=1784590746"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:4def845360282dad99181b96bcd834b4863eab39e246fda2476234c561c652ec_ppc64le",
"product": {
"name": "registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:4def845360282dad99181b96bcd834b4863eab39e246fda2476234c561c652ec_ppc64le",
"product_id": "registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:4def845360282dad99181b96bcd834b4863eab39e246fda2476234c561c652ec_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-operators-application-rhel9@sha256%3A4def845360282dad99181b96bcd834b4863eab39e246fda2476234c561c652ec?arch=ppc64le\u0026repository_url=registry.redhat.io/rhacm2/multicluster-operators-application-rhel9\u0026tag=1784504307"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:3e6519c0c789b946eb1b811867c41c4f204440bad5734760c0aca4e3fc602e5a_ppc64le",
"product": {
"name": "registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:3e6519c0c789b946eb1b811867c41c4f204440bad5734760c0aca4e3fc602e5a_ppc64le",
"product_id": "registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:3e6519c0c789b946eb1b811867c41c4f204440bad5734760c0aca4e3fc602e5a_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-operators-channel-rhel9@sha256%3A3e6519c0c789b946eb1b811867c41c4f204440bad5734760c0aca4e3fc602e5a?arch=ppc64le\u0026repository_url=registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9\u0026tag=1784741269"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:f8adb8dd40a204bacb51cd423803097a514ec8e8e9f52209e02ecf14cad622bb_ppc64le",
"product": {
"name": "registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:f8adb8dd40a204bacb51cd423803097a514ec8e8e9f52209e02ecf14cad622bb_ppc64le",
"product_id": "registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:f8adb8dd40a204bacb51cd423803097a514ec8e8e9f52209e02ecf14cad622bb_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-operators-subscription-rhel9@sha256%3Af8adb8dd40a204bacb51cd423803097a514ec8e8e9f52209e02ecf14cad622bb?arch=ppc64le\u0026repository_url=registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9\u0026tag=1784740143"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:7e100af30ed11325cb2cbee02af09306e53df5db5847f2a4b733cd307e3cd623_ppc64le",
"product": {
"name": "registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:7e100af30ed11325cb2cbee02af09306e53df5db5847f2a4b733cd307e3cd623_ppc64le",
"product_id": "registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:7e100af30ed11325cb2cbee02af09306e53df5db5847f2a4b733cd307e3cd623_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/multiclusterhub-rhel9@sha256%3A7e100af30ed11325cb2cbee02af09306e53df5db5847f2a4b733cd307e3cd623?arch=ppc64le\u0026repository_url=registry.redhat.io/rhacm2/multiclusterhub-rhel9\u0026tag=1784638644"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:63c02348faa7d4e26e35c69aef5453613dd607a26116823b931b89fe5311e181_ppc64le",
"product": {
"name": "registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:63c02348faa7d4e26e35c69aef5453613dd607a26116823b931b89fe5311e181_ppc64le",
"product_id": "registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:63c02348faa7d4e26e35c69aef5453613dd607a26116823b931b89fe5311e181_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/acm-must-gather-rhel9@sha256%3A63c02348faa7d4e26e35c69aef5453613dd607a26116823b931b89fe5311e181?arch=ppc64le\u0026repository_url=registry.redhat.io/rhacm2/acm-must-gather-rhel9\u0026tag=1784563192"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:1f7ed606f69a74943aedb0a956e5a71019f8a1ab53cd3f8166be0f55a69809b9_ppc64le",
"product": {
"name": "registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:1f7ed606f69a74943aedb0a956e5a71019f8a1ab53cd3f8166be0f55a69809b9_ppc64le",
"product_id": "registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:1f7ed606f69a74943aedb0a956e5a71019f8a1ab53cd3f8166be0f55a69809b9_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/node-exporter-rhel9@sha256%3A1f7ed606f69a74943aedb0a956e5a71019f8a1ab53cd3f8166be0f55a69809b9?arch=ppc64le\u0026repository_url=registry.redhat.io/rhacm2/node-exporter-rhel9\u0026tag=1784763530"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/observatorium-rhel9@sha256:0827c96b922ca185b7a7321a4f504e8a5dc01aadafcfd20443060546981339a8_ppc64le",
"product": {
"name": "registry.redhat.io/rhacm2/observatorium-rhel9@sha256:0827c96b922ca185b7a7321a4f504e8a5dc01aadafcfd20443060546981339a8_ppc64le",
"product_id": "registry.redhat.io/rhacm2/observatorium-rhel9@sha256:0827c96b922ca185b7a7321a4f504e8a5dc01aadafcfd20443060546981339a8_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/observatorium-rhel9@sha256%3A0827c96b922ca185b7a7321a4f504e8a5dc01aadafcfd20443060546981339a8?arch=ppc64le\u0026repository_url=registry.redhat.io/rhacm2/observatorium-rhel9\u0026tag=1784677189"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:417a31bec11c3ffb70f40fa955069d5160dc12e2426b67e1d2e35ae3f7fa06df_ppc64le",
"product": {
"name": "registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:417a31bec11c3ffb70f40fa955069d5160dc12e2426b67e1d2e35ae3f7fa06df_ppc64le",
"product_id": "registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:417a31bec11c3ffb70f40fa955069d5160dc12e2426b67e1d2e35ae3f7fa06df_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/observatorium-rhel9-operator@sha256%3A417a31bec11c3ffb70f40fa955069d5160dc12e2426b67e1d2e35ae3f7fa06df?arch=ppc64le\u0026repository_url=registry.redhat.io/rhacm2/observatorium-rhel9-operator\u0026tag=1784331518"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/prometheus-rhel9@sha256:f2805fc1e6f37bc8acc3187ea8712d38f32151d584c10d5996c0ad7076cd638b_ppc64le",
"product": {
"name": "registry.redhat.io/rhacm2/prometheus-rhel9@sha256:f2805fc1e6f37bc8acc3187ea8712d38f32151d584c10d5996c0ad7076cd638b_ppc64le",
"product_id": "registry.redhat.io/rhacm2/prometheus-rhel9@sha256:f2805fc1e6f37bc8acc3187ea8712d38f32151d584c10d5996c0ad7076cd638b_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/prometheus-rhel9@sha256%3Af2805fc1e6f37bc8acc3187ea8712d38f32151d584c10d5996c0ad7076cd638b?arch=ppc64le\u0026repository_url=registry.redhat.io/rhacm2/prometheus-rhel9\u0026tag=1785022718"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:4029ece83812237ce8b1d394252e9561012e8cd94af40680a90284fbea1bc32a_ppc64le",
"product": {
"name": "registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:4029ece83812237ce8b1d394252e9561012e8cd94af40680a90284fbea1bc32a_ppc64le",
"product_id": "registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:4029ece83812237ce8b1d394252e9561012e8cd94af40680a90284fbea1bc32a_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/prometheus-alertmanager-rhel9@sha256%3A4029ece83812237ce8b1d394252e9561012e8cd94af40680a90284fbea1bc32a?arch=ppc64le\u0026repository_url=registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9\u0026tag=1784816309"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:a2edc5d233d1547fa2e1d01f29d8a914930735f7098289892430ba9a17d20ab7_ppc64le",
"product": {
"name": "registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:a2edc5d233d1547fa2e1d01f29d8a914930735f7098289892430ba9a17d20ab7_ppc64le",
"product_id": "registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:a2edc5d233d1547fa2e1d01f29d8a914930735f7098289892430ba9a17d20ab7_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/submariner-addon-rhel9@sha256%3Aa2edc5d233d1547fa2e1d01f29d8a914930735f7098289892430ba9a17d20ab7?arch=ppc64le\u0026repository_url=registry.redhat.io/rhacm2/submariner-addon-rhel9\u0026tag=1784331562"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/thanos-rhel9@sha256:681b356709778083448892513b4559f693e002bfda897a57e2d065f736a902b5_ppc64le",
"product": {
"name": "registry.redhat.io/rhacm2/thanos-rhel9@sha256:681b356709778083448892513b4559f693e002bfda897a57e2d065f736a902b5_ppc64le",
"product_id": "registry.redhat.io/rhacm2/thanos-rhel9@sha256:681b356709778083448892513b4559f693e002bfda897a57e2d065f736a902b5_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/thanos-rhel9@sha256%3A681b356709778083448892513b4559f693e002bfda897a57e2d065f736a902b5?arch=ppc64le\u0026repository_url=registry.redhat.io/rhacm2/thanos-rhel9\u0026tag=1784677282"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:277f4e8ac5fc292b9f0f2d123f924c6b5cbc0a2eeba3c87a0e61c5ee2399aaa9_ppc64le",
"product": {
"name": "registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:277f4e8ac5fc292b9f0f2d123f924c6b5cbc0a2eeba3c87a0e61c5ee2399aaa9_ppc64le",
"product_id": "registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:277f4e8ac5fc292b9f0f2d123f924c6b5cbc0a2eeba3c87a0e61c5ee2399aaa9_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/thanos-receive-controller-rhel9@sha256%3A277f4e8ac5fc292b9f0f2d123f924c6b5cbc0a2eeba3c87a0e61c5ee2399aaa9?arch=ppc64le\u0026repository_url=registry.redhat.io/rhacm2/thanos-receive-controller-rhel9\u0026tag=1784331568"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:9847a5752ec77e17861dcdac5546ee5c53679c80c3569609b21d9080ee3b7ef3_ppc64le",
"product": {
"name": "registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:9847a5752ec77e17861dcdac5546ee5c53679c80c3569609b21d9080ee3b7ef3_ppc64le",
"product_id": "registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:9847a5752ec77e17861dcdac5546ee5c53679c80c3569609b21d9080ee3b7ef3_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/acm-volsync-addon-controller-rhel9@sha256%3A9847a5752ec77e17861dcdac5546ee5c53679c80c3569609b21d9080ee3b7ef3?arch=ppc64le\u0026repository_url=registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9\u0026tag=1784136942"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:3a53629645832974a883002e53198df7c28e59dd6d1df99bf321b52d0ef84b61_ppc64le",
"product": {
"name": "registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:3a53629645832974a883002e53198df7c28e59dd6d1df99bf321b52d0ef84b61_ppc64le",
"product_id": "registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:3a53629645832974a883002e53198df7c28e59dd6d1df99bf321b52d0ef84b61_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/acm-prometheus-config-reloader-rhel9@sha256%3A3a53629645832974a883002e53198df7c28e59dd6d1df99bf321b52d0ef84b61?arch=ppc64le\u0026repository_url=registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9\u0026tag=1784636929"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:53e641f48ddc05c63da2e6bc24e9e4636a10de2c3599d8f5f78622bdebca07ca_ppc64le",
"product": {
"name": "registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:53e641f48ddc05c63da2e6bc24e9e4636a10de2c3599d8f5f78622bdebca07ca_ppc64le",
"product_id": "registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:53e641f48ddc05c63da2e6bc24e9e4636a10de2c3599d8f5f78622bdebca07ca_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/acm-prometheus-rhel9@sha256%3A53e641f48ddc05c63da2e6bc24e9e4636a10de2c3599d8f5f78622bdebca07ca?arch=ppc64le\u0026repository_url=registry.redhat.io/rhacm2/acm-prometheus-rhel9\u0026tag=1784636997"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:907d6e24922d6d372bceb21ad830c254c6a9c9d6be0ac4f4edf22c236437a09d_ppc64le",
"product": {
"name": "registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:907d6e24922d6d372bceb21ad830c254c6a9c9d6be0ac4f4edf22c236437a09d_ppc64le",
"product_id": "registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:907d6e24922d6d372bceb21ad830c254c6a9c9d6be0ac4f4edf22c236437a09d_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/rbac-query-proxy-rhel9@sha256%3A907d6e24922d6d372bceb21ad830c254c6a9c9d6be0ac4f4edf22c236437a09d?arch=ppc64le\u0026repository_url=registry.redhat.io/rhacm2/rbac-query-proxy-rhel9\u0026tag=1784677225"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/search-collector-rhel9@sha256:5ba248d0bc8fcde70e210319bb962f4043e5e8ab8a5625c8f8f30ec96d47c6b7_ppc64le",
"product": {
"name": "registry.redhat.io/rhacm2/search-collector-rhel9@sha256:5ba248d0bc8fcde70e210319bb962f4043e5e8ab8a5625c8f8f30ec96d47c6b7_ppc64le",
"product_id": "registry.redhat.io/rhacm2/search-collector-rhel9@sha256:5ba248d0bc8fcde70e210319bb962f4043e5e8ab8a5625c8f8f30ec96d47c6b7_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/search-collector-rhel9@sha256%3A5ba248d0bc8fcde70e210319bb962f4043e5e8ab8a5625c8f8f30ec96d47c6b7?arch=ppc64le\u0026repository_url=registry.redhat.io/rhacm2/search-collector-rhel9\u0026tag=1784566813"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:562291f52b6bce98ec8795856b808545c4fe30047b54544c7f6c2ab4678480ff_ppc64le",
"product": {
"name": "registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:562291f52b6bce98ec8795856b808545c4fe30047b54544c7f6c2ab4678480ff_ppc64le",
"product_id": "registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:562291f52b6bce98ec8795856b808545c4fe30047b54544c7f6c2ab4678480ff_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/acm-search-indexer-rhel9@sha256%3A562291f52b6bce98ec8795856b808545c4fe30047b54544c7f6c2ab4678480ff?arch=ppc64le\u0026repository_url=registry.redhat.io/rhacm2/acm-search-indexer-rhel9\u0026tag=1784567106"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:7cef49d68df5d8efe52061a18920e07e6c7efa3016c0cea7d1747e67851f254a_ppc64le",
"product": {
"name": "registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:7cef49d68df5d8efe52061a18920e07e6c7efa3016c0cea7d1747e67851f254a_ppc64le",
"product_id": "registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:7cef49d68df5d8efe52061a18920e07e6c7efa3016c0cea7d1747e67851f254a_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/acm-search-v2-api-rhel9@sha256%3A7cef49d68df5d8efe52061a18920e07e6c7efa3016c0cea7d1747e67851f254a?arch=ppc64le\u0026repository_url=registry.redhat.io/rhacm2/acm-search-v2-api-rhel9\u0026tag=1784569468"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:ab5e4d27e23448d99a37b8c05442bb1254083cdc4ff325e721d97d80ec27346c_ppc64le",
"product": {
"name": "registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:ab5e4d27e23448d99a37b8c05442bb1254083cdc4ff325e721d97d80ec27346c_ppc64le",
"product_id": "registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:ab5e4d27e23448d99a37b8c05442bb1254083cdc4ff325e721d97d80ec27346c_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/acm-search-v2-rhel9@sha256%3Aab5e4d27e23448d99a37b8c05442bb1254083cdc4ff325e721d97d80ec27346c?arch=ppc64le\u0026repository_url=registry.redhat.io/rhacm2/acm-search-v2-rhel9\u0026tag=1784569967"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:e547f672b14b6e8fc2ffd300b150aedbd3f6b6b36ddcad612f7c992a936a7c82_ppc64le",
"product": {
"name": "registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:e547f672b14b6e8fc2ffd300b150aedbd3f6b6b36ddcad612f7c992a936a7c82_ppc64le",
"product_id": "registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:e547f672b14b6e8fc2ffd300b150aedbd3f6b6b36ddcad612f7c992a936a7c82_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/acm-siteconfig-rhel9@sha256%3Ae547f672b14b6e8fc2ffd300b150aedbd3f6b6b36ddcad612f7c992a936a7c82?arch=ppc64le\u0026repository_url=registry.redhat.io/rhacm2/acm-siteconfig-rhel9\u0026tag=1784790404"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/insights-client-rhel9@sha256:c9258bf58373f9c6859789c8ec272cd7d702c37e063fc2ee53c66d296e7ee3d0_ppc64le",
"product": {
"name": "registry.redhat.io/rhacm2/insights-client-rhel9@sha256:c9258bf58373f9c6859789c8ec272cd7d702c37e063fc2ee53c66d296e7ee3d0_ppc64le",
"product_id": "registry.redhat.io/rhacm2/insights-client-rhel9@sha256:c9258bf58373f9c6859789c8ec272cd7d702c37e063fc2ee53c66d296e7ee3d0_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/insights-client-rhel9@sha256%3Ac9258bf58373f9c6859789c8ec272cd7d702c37e063fc2ee53c66d296e7ee3d0?arch=ppc64le\u0026repository_url=registry.redhat.io/rhacm2/insights-client-rhel9\u0026tag=1784569567"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:67637c5cba3eca1597885823c6e44c13db445d0ef38751eb8364b69dbf07caac_ppc64le",
"product": {
"name": "registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:67637c5cba3eca1597885823c6e44c13db445d0ef38751eb8364b69dbf07caac_ppc64le",
"product_id": "registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:67637c5cba3eca1597885823c6e44c13db445d0ef38751eb8364b69dbf07caac_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/insights-metrics-rhel9@sha256%3A67637c5cba3eca1597885823c6e44c13db445d0ef38751eb8364b69dbf07caac?arch=ppc64le\u0026repository_url=registry.redhat.io/rhacm2/insights-metrics-rhel9\u0026tag=1784569300"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:0c165bb93ce933c7f9998a615908bfcca0b4eb38e32e24a1c823e63791b7604b_ppc64le",
"product": {
"name": "registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:0c165bb93ce933c7f9998a615908bfcca0b4eb38e32e24a1c823e63791b7604b_ppc64le",
"product_id": "registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:0c165bb93ce933c7f9998a615908bfcca0b4eb38e32e24a1c823e63791b7604b_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/klusterlet-addon-controller-rhel9@sha256%3A0c165bb93ce933c7f9998a615908bfcca0b4eb38e32e24a1c823e63791b7604b?arch=ppc64le\u0026repository_url=registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9\u0026tag=1784158688"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:7b3635784ebfb6343a73c9fa6de7bea57b3aacce1c49a0f7f250a471f7b897e3_ppc64le",
"product": {
"name": "registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:7b3635784ebfb6343a73c9fa6de7bea57b3aacce1c49a0f7f250a471f7b897e3_ppc64le",
"product_id": "registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:7b3635784ebfb6343a73c9fa6de7bea57b3aacce1c49a0f7f250a471f7b897e3_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/kube-rbac-proxy-rhel9@sha256%3A7b3635784ebfb6343a73c9fa6de7bea57b3aacce1c49a0f7f250a471f7b897e3?arch=ppc64le\u0026repository_url=registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9\u0026tag=1784677172"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:bcfbd2284cbeeba5a835aaf5a5590ddd8156bd881ca24fd0fe1465fade1f84c2_ppc64le",
"product": {
"name": "registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:bcfbd2284cbeeba5a835aaf5a5590ddd8156bd881ca24fd0fe1465fade1f84c2_ppc64le",
"product_id": "registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:bcfbd2284cbeeba5a835aaf5a5590ddd8156bd881ca24fd0fe1465fade1f84c2_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/kube-state-metrics-rhel9@sha256%3Abcfbd2284cbeeba5a835aaf5a5590ddd8156bd881ca24fd0fe1465fade1f84c2?arch=ppc64le\u0026repository_url=registry.redhat.io/rhacm2/kube-state-metrics-rhel9\u0026tag=1784811720"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:caa6b121538e074312314d9888d9b423bd225aefa4f25eb145893b9fc548c0ad_ppc64le",
"product": {
"name": "registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:caa6b121538e074312314d9888d9b423bd225aefa4f25eb145893b9fc548c0ad_ppc64le",
"product_id": "registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:caa6b121538e074312314d9888d9b423bd225aefa4f25eb145893b9fc548c0ad_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/memcached-exporter-rhel9@sha256%3Acaa6b121538e074312314d9888d9b423bd225aefa4f25eb145893b9fc548c0ad?arch=ppc64le\u0026repository_url=registry.redhat.io/rhacm2/memcached-exporter-rhel9\u0026tag=1784551283"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:60a310d4464b4817845703d14e95729321b883fbfc79fbf2dd8d514bb3c675e9_ppc64le",
"product": {
"name": "registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:60a310d4464b4817845703d14e95729321b883fbfc79fbf2dd8d514bb3c675e9_ppc64le",
"product_id": "registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:60a310d4464b4817845703d14e95729321b883fbfc79fbf2dd8d514bb3c675e9_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/metrics-collector-rhel9@sha256%3A60a310d4464b4817845703d14e95729321b883fbfc79fbf2dd8d514bb3c675e9?arch=ppc64le\u0026repository_url=registry.redhat.io/rhacm2/metrics-collector-rhel9\u0026tag=1784590742"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:b59aea0c9e859025988b0f0c9b6e7748c4acf6d0b4cee35f3fabb7b84feb598b_ppc64le",
"product": {
"name": "registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:b59aea0c9e859025988b0f0c9b6e7748c4acf6d0b4cee35f3fabb7b84feb598b_ppc64le",
"product_id": "registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:b59aea0c9e859025988b0f0c9b6e7748c4acf6d0b4cee35f3fabb7b84feb598b_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/multicloud-integrations-rhel9@sha256%3Ab59aea0c9e859025988b0f0c9b6e7748c4acf6d0b4cee35f3fabb7b84feb598b?arch=ppc64le\u0026repository_url=registry.redhat.io/rhacm2/multicloud-integrations-rhel9\u0026tag=1784652040"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:f7b8654eb8bf675c8c26f0ad395d790f990308d3ad6683bb61b484c92073bbac_ppc64le",
"product": {
"name": "registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:f7b8654eb8bf675c8c26f0ad395d790f990308d3ad6683bb61b484c92073bbac_ppc64le",
"product_id": "registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:f7b8654eb8bf675c8c26f0ad395d790f990308d3ad6683bb61b484c92073bbac_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/acm-multicluster-observability-addon-rhel9@sha256%3Af7b8654eb8bf675c8c26f0ad395d790f990308d3ad6683bb61b484c92073bbac?arch=ppc64le\u0026repository_url=registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9\u0026tag=1784331511"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:8fd2bda7b8d94ededf7973f76a159dd61105776a05d961ac9cfd9bee0a988213_ppc64le",
"product": {
"name": "registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:8fd2bda7b8d94ededf7973f76a159dd61105776a05d961ac9cfd9bee0a988213_ppc64le",
"product_id": "registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:8fd2bda7b8d94ededf7973f76a159dd61105776a05d961ac9cfd9bee0a988213_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-observability-rhel9-operator@sha256%3A8fd2bda7b8d94ededf7973f76a159dd61105776a05d961ac9cfd9bee0a988213?arch=ppc64le\u0026repository_url=registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator\u0026tag=1784590741"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:3fa04db82e3ce6169270db0ce29107b69d8e044e0a1ab13a2bf1050b8c26d087_ppc64le",
"product": {
"name": "registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:3fa04db82e3ce6169270db0ce29107b69d8e044e0a1ab13a2bf1050b8c26d087_ppc64le",
"product_id": "registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:3fa04db82e3ce6169270db0ce29107b69d8e044e0a1ab13a2bf1050b8c26d087_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/acm-governance-policy-addon-controller-rhel9@sha256%3A3fa04db82e3ce6169270db0ce29107b69d8e044e0a1ab13a2bf1050b8c26d087?arch=ppc64le\u0026repository_url=registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9\u0026tag=1784331510"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:d5bbf3fe886f27cdc27363dcb175e004487d9c8f36de4f1f8516fbeda3a95224_ppc64le",
"product": {
"name": "registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:d5bbf3fe886f27cdc27363dcb175e004487d9c8f36de4f1f8516fbeda3a95224_ppc64le",
"product_id": "registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:d5bbf3fe886f27cdc27363dcb175e004487d9c8f36de4f1f8516fbeda3a95224_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/acm-governance-policy-framework-addon-rhel9@sha256%3Ad5bbf3fe886f27cdc27363dcb175e004487d9c8f36de4f1f8516fbeda3a95224?arch=ppc64le\u0026repository_url=registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9\u0026tag=1784331509"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:2c9f9b47c01c5e5e017c583c6a09c5c52f40ef88acf789689265cb31ef328fb8_ppc64le",
"product": {
"name": "registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:2c9f9b47c01c5e5e017c583c6a09c5c52f40ef88acf789689265cb31ef328fb8_ppc64le",
"product_id": "registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:2c9f9b47c01c5e5e017c583c6a09c5c52f40ef88acf789689265cb31ef328fb8_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/governance-policy-propagator-rhel9@sha256%3A2c9f9b47c01c5e5e017c583c6a09c5c52f40ef88acf789689265cb31ef328fb8?arch=ppc64le\u0026repository_url=registry.redhat.io/rhacm2/governance-policy-propagator-rhel9\u0026tag=1784298922"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:9b80c9c61d4befefa7f6a65ae8c001ce7e343a1e4f251e5ebe025625d9511730_ppc64le",
"product": {
"name": "registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:9b80c9c61d4befefa7f6a65ae8c001ce7e343a1e4f251e5ebe025625d9511730_ppc64le",
"product_id": "registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:9b80c9c61d4befefa7f6a65ae8c001ce7e343a1e4f251e5ebe025625d9511730_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/acm-grafana-rhel9@sha256%3A9b80c9c61d4befefa7f6a65ae8c001ce7e343a1e4f251e5ebe025625d9511730?arch=ppc64le\u0026repository_url=registry.redhat.io/rhacm2/acm-grafana-rhel9\u0026tag=1784591168"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:e0a7514406c7ffae080db6d4db3bbf7b77a606ea4632bf09f8301ce1d3739bb5_ppc64le",
"product": {
"name": "registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:e0a7514406c7ffae080db6d4db3bbf7b77a606ea4632bf09f8301ce1d3739bb5_ppc64le",
"product_id": "registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:e0a7514406c7ffae080db6d4db3bbf7b77a606ea4632bf09f8301ce1d3739bb5_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/grafana-dashboard-loader-rhel9@sha256%3Ae0a7514406c7ffae080db6d4db3bbf7b77a606ea4632bf09f8301ce1d3739bb5?arch=ppc64le\u0026repository_url=registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9\u0026tag=1784299028"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:b3ad6fa1de658f3a40c8b183ab501ebc66b359d8cc01439d4215aa52769df213_s390x",
"product": {
"name": "registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:b3ad6fa1de658f3a40c8b183ab501ebc66b359d8cc01439d4215aa52769df213_s390x",
"product_id": "registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:b3ad6fa1de658f3a40c8b183ab501ebc66b359d8cc01439d4215aa52769df213_s390x",
"product_identification_helper": {
"purl": "pkg:oci/acm-cli-rhel9@sha256%3Ab3ad6fa1de658f3a40c8b183ab501ebc66b359d8cc01439d4215aa52769df213?arch=s390x\u0026repository_url=registry.redhat.io/rhacm2/acm-cli-rhel9\u0026tag=1784904649"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:f61fe90362f793225591eb7e2a86d5cdc6fb35aa087e9b6a6218a42b1c1d945d_s390x",
"product": {
"name": "registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:f61fe90362f793225591eb7e2a86d5cdc6fb35aa087e9b6a6218a42b1c1d945d_s390x",
"product_id": "registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:f61fe90362f793225591eb7e2a86d5cdc6fb35aa087e9b6a6218a42b1c1d945d_s390x",
"product_identification_helper": {
"purl": "pkg:oci/cert-policy-controller-rhel9@sha256%3Af61fe90362f793225591eb7e2a86d5cdc6fb35aa087e9b6a6218a42b1c1d945d?arch=s390x\u0026repository_url=registry.redhat.io/rhacm2/cert-policy-controller-rhel9\u0026tag=1784417900"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:1c4de9460688800b62bad6fb13653ef4b52bf215e4d41674291193e9b8e71b24_s390x",
"product": {
"name": "registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:1c4de9460688800b62bad6fb13653ef4b52bf215e4d41674291193e9b8e71b24_s390x",
"product_id": "registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:1c4de9460688800b62bad6fb13653ef4b52bf215e4d41674291193e9b8e71b24_s390x",
"product_identification_helper": {
"purl": "pkg:oci/cluster-backup-rhel9-operator@sha256%3A1c4de9460688800b62bad6fb13653ef4b52bf215e4d41674291193e9b8e71b24?arch=s390x\u0026repository_url=registry.redhat.io/rhacm2/cluster-backup-rhel9-operator\u0026tag=1784223569"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:09436fe2649ca384b1bc1fd8f736fb1d71392733310e66758ed9f289e00471f9_s390x",
"product": {
"name": "registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:09436fe2649ca384b1bc1fd8f736fb1d71392733310e66758ed9f289e00471f9_s390x",
"product_id": "registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:09436fe2649ca384b1bc1fd8f736fb1d71392733310e66758ed9f289e00471f9_s390x",
"product_identification_helper": {
"purl": "pkg:oci/acm-cluster-permission-rhel9@sha256%3A09436fe2649ca384b1bc1fd8f736fb1d71392733310e66758ed9f289e00471f9?arch=s390x\u0026repository_url=registry.redhat.io/rhacm2/acm-cluster-permission-rhel9\u0026tag=1784341151"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:579ef0925c6f56ed48f22121767189431bef6c4eaa72b2648a1b91488357a51d_s390x",
"product": {
"name": "registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:579ef0925c6f56ed48f22121767189431bef6c4eaa72b2648a1b91488357a51d_s390x",
"product_id": "registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:579ef0925c6f56ed48f22121767189431bef6c4eaa72b2648a1b91488357a51d_s390x",
"product_identification_helper": {
"purl": "pkg:oci/config-policy-controller-rhel9@sha256%3A579ef0925c6f56ed48f22121767189431bef6c4eaa72b2648a1b91488357a51d?arch=s390x\u0026repository_url=registry.redhat.io/rhacm2/config-policy-controller-rhel9\u0026tag=1784417909"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/console-rhel9@sha256:2b796bf55ecf7a14d1c87d829a2b20d998fc2943686373105b0a50f5053ef836_s390x",
"product": {
"name": "registry.redhat.io/rhacm2/console-rhel9@sha256:2b796bf55ecf7a14d1c87d829a2b20d998fc2943686373105b0a50f5053ef836_s390x",
"product_id": "registry.redhat.io/rhacm2/console-rhel9@sha256:2b796bf55ecf7a14d1c87d829a2b20d998fc2943686373105b0a50f5053ef836_s390x",
"product_identification_helper": {
"purl": "pkg:oci/console-rhel9@sha256%3A2b796bf55ecf7a14d1c87d829a2b20d998fc2943686373105b0a50f5053ef836?arch=s390x\u0026repository_url=registry.redhat.io/rhacm2/console-rhel9\u0026tag=1785078581"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:4bfbf0bdc882979bc94d85a4aeff8caa0ec7887aec7412e32ae1442811325d06_s390x",
"product": {
"name": "registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:4bfbf0bdc882979bc94d85a4aeff8caa0ec7887aec7412e32ae1442811325d06_s390x",
"product_id": "registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:4bfbf0bdc882979bc94d85a4aeff8caa0ec7887aec7412e32ae1442811325d06_s390x",
"product_identification_helper": {
"purl": "pkg:oci/endpoint-monitoring-rhel9-operator@sha256%3A4bfbf0bdc882979bc94d85a4aeff8caa0ec7887aec7412e32ae1442811325d06?arch=s390x\u0026repository_url=registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator\u0026tag=1784590746"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:82405a9a5715db5442dfa3d3f594888bd7b2f9c778d68357a7d8884f5ea46915_s390x",
"product": {
"name": "registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:82405a9a5715db5442dfa3d3f594888bd7b2f9c778d68357a7d8884f5ea46915_s390x",
"product_id": "registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:82405a9a5715db5442dfa3d3f594888bd7b2f9c778d68357a7d8884f5ea46915_s390x",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-observability-rhel9-operator@sha256%3A82405a9a5715db5442dfa3d3f594888bd7b2f9c778d68357a7d8884f5ea46915?arch=s390x\u0026repository_url=registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator\u0026tag=1784590741"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:d9f6a520b818dcccbedb94720b5979ef1cdec2e02491c76e3decb3ee18f2085d_s390x",
"product": {
"name": "registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:d9f6a520b818dcccbedb94720b5979ef1cdec2e02491c76e3decb3ee18f2085d_s390x",
"product_id": "registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:d9f6a520b818dcccbedb94720b5979ef1cdec2e02491c76e3decb3ee18f2085d_s390x",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-operators-application-rhel9@sha256%3Ad9f6a520b818dcccbedb94720b5979ef1cdec2e02491c76e3decb3ee18f2085d?arch=s390x\u0026repository_url=registry.redhat.io/rhacm2/multicluster-operators-application-rhel9\u0026tag=1784504307"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:95684cfaf4d5d91bc9fe8cfbf64a6f113e944e3f0c102d27851be5232eca0dbb_s390x",
"product": {
"name": "registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:95684cfaf4d5d91bc9fe8cfbf64a6f113e944e3f0c102d27851be5232eca0dbb_s390x",
"product_id": "registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:95684cfaf4d5d91bc9fe8cfbf64a6f113e944e3f0c102d27851be5232eca0dbb_s390x",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-operators-channel-rhel9@sha256%3A95684cfaf4d5d91bc9fe8cfbf64a6f113e944e3f0c102d27851be5232eca0dbb?arch=s390x\u0026repository_url=registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9\u0026tag=1784741269"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:8e8d249c39d562f819d347f12610dda7f5c01215c41101bfd5dca008e04edf6e_s390x",
"product": {
"name": "registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:8e8d249c39d562f819d347f12610dda7f5c01215c41101bfd5dca008e04edf6e_s390x",
"product_id": "registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:8e8d249c39d562f819d347f12610dda7f5c01215c41101bfd5dca008e04edf6e_s390x",
"product_identification_helper": {
"purl": "pkg:oci/multicluster-operators-subscription-rhel9@sha256%3A8e8d249c39d562f819d347f12610dda7f5c01215c41101bfd5dca008e04edf6e?arch=s390x\u0026repository_url=registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9\u0026tag=1784740143"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:d56f884a9700a4f193d6f3db1895bd54745ec77e02ead3d43bd6e4fe04a2969e_s390x",
"product": {
"name": "registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:d56f884a9700a4f193d6f3db1895bd54745ec77e02ead3d43bd6e4fe04a2969e_s390x",
"product_id": "registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:d56f884a9700a4f193d6f3db1895bd54745ec77e02ead3d43bd6e4fe04a2969e_s390x",
"product_identification_helper": {
"purl": "pkg:oci/multiclusterhub-rhel9@sha256%3Ad56f884a9700a4f193d6f3db1895bd54745ec77e02ead3d43bd6e4fe04a2969e?arch=s390x\u0026repository_url=registry.redhat.io/rhacm2/multiclusterhub-rhel9\u0026tag=1784638644"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:ae224866f0085d2c00ab18a28d2aed076e455731903989a49a544abf49950d1f_s390x",
"product": {
"name": "registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:ae224866f0085d2c00ab18a28d2aed076e455731903989a49a544abf49950d1f_s390x",
"product_id": "registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:ae224866f0085d2c00ab18a28d2aed076e455731903989a49a544abf49950d1f_s390x",
"product_identification_helper": {
"purl": "pkg:oci/acm-must-gather-rhel9@sha256%3Aae224866f0085d2c00ab18a28d2aed076e455731903989a49a544abf49950d1f?arch=s390x\u0026repository_url=registry.redhat.io/rhacm2/acm-must-gather-rhel9\u0026tag=1784563192"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:4841076eb82f1f1748345556ff6c4e02a17f1f63c661e375eaba720291cbaf6a_s390x",
"product": {
"name": "registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:4841076eb82f1f1748345556ff6c4e02a17f1f63c661e375eaba720291cbaf6a_s390x",
"product_id": "registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:4841076eb82f1f1748345556ff6c4e02a17f1f63c661e375eaba720291cbaf6a_s390x",
"product_identification_helper": {
"purl": "pkg:oci/node-exporter-rhel9@sha256%3A4841076eb82f1f1748345556ff6c4e02a17f1f63c661e375eaba720291cbaf6a?arch=s390x\u0026repository_url=registry.redhat.io/rhacm2/node-exporter-rhel9\u0026tag=1784763530"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/observatorium-rhel9@sha256:f74081e5eb03227ccff5717a7d139ceee6c5b610625ff7b99e639a2652bf7663_s390x",
"product": {
"name": "registry.redhat.io/rhacm2/observatorium-rhel9@sha256:f74081e5eb03227ccff5717a7d139ceee6c5b610625ff7b99e639a2652bf7663_s390x",
"product_id": "registry.redhat.io/rhacm2/observatorium-rhel9@sha256:f74081e5eb03227ccff5717a7d139ceee6c5b610625ff7b99e639a2652bf7663_s390x",
"product_identification_helper": {
"purl": "pkg:oci/observatorium-rhel9@sha256%3Af74081e5eb03227ccff5717a7d139ceee6c5b610625ff7b99e639a2652bf7663?arch=s390x\u0026repository_url=registry.redhat.io/rhacm2/observatorium-rhel9\u0026tag=1784677189"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:b1ba0b4cd8f515895af7b9f797f6ea5b661f7254ce019ce5115375639dcd06e9_s390x",
"product": {
"name": "registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:b1ba0b4cd8f515895af7b9f797f6ea5b661f7254ce019ce5115375639dcd06e9_s390x",
"product_id": "registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:b1ba0b4cd8f515895af7b9f797f6ea5b661f7254ce019ce5115375639dcd06e9_s390x",
"product_identification_helper": {
"purl": "pkg:oci/observatorium-rhel9-operator@sha256%3Ab1ba0b4cd8f515895af7b9f797f6ea5b661f7254ce019ce5115375639dcd06e9?arch=s390x\u0026repository_url=registry.redhat.io/rhacm2/observatorium-rhel9-operator\u0026tag=1784331518"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/prometheus-rhel9@sha256:68f879679911c2ca828551b900eca1c2f4e8caec7312fbba502fabc4778d1832_s390x",
"product": {
"name": "registry.redhat.io/rhacm2/prometheus-rhel9@sha256:68f879679911c2ca828551b900eca1c2f4e8caec7312fbba502fabc4778d1832_s390x",
"product_id": "registry.redhat.io/rhacm2/prometheus-rhel9@sha256:68f879679911c2ca828551b900eca1c2f4e8caec7312fbba502fabc4778d1832_s390x",
"product_identification_helper": {
"purl": "pkg:oci/prometheus-rhel9@sha256%3A68f879679911c2ca828551b900eca1c2f4e8caec7312fbba502fabc4778d1832?arch=s390x\u0026repository_url=registry.redhat.io/rhacm2/prometheus-rhel9\u0026tag=1785022718"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:f392bde8ce22aca058d77132cc709440442931679dbe725c52516f1cdc97b38d_s390x",
"product": {
"name": "registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:f392bde8ce22aca058d77132cc709440442931679dbe725c52516f1cdc97b38d_s390x",
"product_id": "registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:f392bde8ce22aca058d77132cc709440442931679dbe725c52516f1cdc97b38d_s390x",
"product_identification_helper": {
"purl": "pkg:oci/prometheus-alertmanager-rhel9@sha256%3Af392bde8ce22aca058d77132cc709440442931679dbe725c52516f1cdc97b38d?arch=s390x\u0026repository_url=registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9\u0026tag=1784816309"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:2057531884d897574fc0648e5d3cf21c4549738ac5f35d8095f400cdb80049cc_s390x",
"product": {
"name": "registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:2057531884d897574fc0648e5d3cf21c4549738ac5f35d8095f400cdb80049cc_s390x",
"product_id": "registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:2057531884d897574fc0648e5d3cf21c4549738ac5f35d8095f400cdb80049cc_s390x",
"product_identification_helper": {
"purl": "pkg:oci/submariner-addon-rhel9@sha256%3A2057531884d897574fc0648e5d3cf21c4549738ac5f35d8095f400cdb80049cc?arch=s390x\u0026repository_url=registry.redhat.io/rhacm2/submariner-addon-rhel9\u0026tag=1784331562"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/thanos-rhel9@sha256:f076ab59f3abe061e4553a61f98a144a472297dba5ed924ca887f130e9372da9_s390x",
"product": {
"name": "registry.redhat.io/rhacm2/thanos-rhel9@sha256:f076ab59f3abe061e4553a61f98a144a472297dba5ed924ca887f130e9372da9_s390x",
"product_id": "registry.redhat.io/rhacm2/thanos-rhel9@sha256:f076ab59f3abe061e4553a61f98a144a472297dba5ed924ca887f130e9372da9_s390x",
"product_identification_helper": {
"purl": "pkg:oci/thanos-rhel9@sha256%3Af076ab59f3abe061e4553a61f98a144a472297dba5ed924ca887f130e9372da9?arch=s390x\u0026repository_url=registry.redhat.io/rhacm2/thanos-rhel9\u0026tag=1784677282"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:c7ace45f7cb86055e2ba18e27a660f6aa6cb4eff497204294875d5dd1d63cce3_s390x",
"product": {
"name": "registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:c7ace45f7cb86055e2ba18e27a660f6aa6cb4eff497204294875d5dd1d63cce3_s390x",
"product_id": "registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:c7ace45f7cb86055e2ba18e27a660f6aa6cb4eff497204294875d5dd1d63cce3_s390x",
"product_identification_helper": {
"purl": "pkg:oci/thanos-receive-controller-rhel9@sha256%3Ac7ace45f7cb86055e2ba18e27a660f6aa6cb4eff497204294875d5dd1d63cce3?arch=s390x\u0026repository_url=registry.redhat.io/rhacm2/thanos-receive-controller-rhel9\u0026tag=1784331568"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:d3c823e61a0682ddc85e576e86234e580992886de471035630f9c89bbad6ebb7_s390x",
"product": {
"name": "registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:d3c823e61a0682ddc85e576e86234e580992886de471035630f9c89bbad6ebb7_s390x",
"product_id": "registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:d3c823e61a0682ddc85e576e86234e580992886de471035630f9c89bbad6ebb7_s390x",
"product_identification_helper": {
"purl": "pkg:oci/acm-volsync-addon-controller-rhel9@sha256%3Ad3c823e61a0682ddc85e576e86234e580992886de471035630f9c89bbad6ebb7?arch=s390x\u0026repository_url=registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9\u0026tag=1784136942"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:879315f438ca43abb607d6c97f8fbd4ca2d38209b142e2d97cc0598740273252_s390x",
"product": {
"name": "registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:879315f438ca43abb607d6c97f8fbd4ca2d38209b142e2d97cc0598740273252_s390x",
"product_id": "registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:879315f438ca43abb607d6c97f8fbd4ca2d38209b142e2d97cc0598740273252_s390x",
"product_identification_helper": {
"purl": "pkg:oci/acm-prometheus-config-reloader-rhel9@sha256%3A879315f438ca43abb607d6c97f8fbd4ca2d38209b142e2d97cc0598740273252?arch=s390x\u0026repository_url=registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9\u0026tag=1784636929"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:50f7647620c78fd6b445379c8762f5e978113fe3552906376a24459263f27459_s390x",
"product": {
"name": "registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:50f7647620c78fd6b445379c8762f5e978113fe3552906376a24459263f27459_s390x",
"product_id": "registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:50f7647620c78fd6b445379c8762f5e978113fe3552906376a24459263f27459_s390x",
"product_identification_helper": {
"purl": "pkg:oci/acm-prometheus-rhel9@sha256%3A50f7647620c78fd6b445379c8762f5e978113fe3552906376a24459263f27459?arch=s390x\u0026repository_url=registry.redhat.io/rhacm2/acm-prometheus-rhel9\u0026tag=1784636997"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:923a3ee0e3d5b7341b96826e465e6856855f2801dbaf381d139a632c77bda1c5_s390x",
"product": {
"name": "registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:923a3ee0e3d5b7341b96826e465e6856855f2801dbaf381d139a632c77bda1c5_s390x",
"product_id": "registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:923a3ee0e3d5b7341b96826e465e6856855f2801dbaf381d139a632c77bda1c5_s390x",
"product_identification_helper": {
"purl": "pkg:oci/rbac-query-proxy-rhel9@sha256%3A923a3ee0e3d5b7341b96826e465e6856855f2801dbaf381d139a632c77bda1c5?arch=s390x\u0026repository_url=registry.redhat.io/rhacm2/rbac-query-proxy-rhel9\u0026tag=1784677225"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/search-collector-rhel9@sha256:285d2e2d103b458f0603435aedb4d779d85e48fed2267845b798f4a04a0df4c7_s390x",
"product": {
"name": "registry.redhat.io/rhacm2/search-collector-rhel9@sha256:285d2e2d103b458f0603435aedb4d779d85e48fed2267845b798f4a04a0df4c7_s390x",
"product_id": "registry.redhat.io/rhacm2/search-collector-rhel9@sha256:285d2e2d103b458f0603435aedb4d779d85e48fed2267845b798f4a04a0df4c7_s390x",
"product_identification_helper": {
"purl": "pkg:oci/search-collector-rhel9@sha256%3A285d2e2d103b458f0603435aedb4d779d85e48fed2267845b798f4a04a0df4c7?arch=s390x\u0026repository_url=registry.redhat.io/rhacm2/search-collector-rhel9\u0026tag=1784566813"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:f683186c2cc8be9ec09b8efdec66d6b8b1f991c7f7b9fd398dc7c3f9ab8b3079_s390x",
"product": {
"name": "registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:f683186c2cc8be9ec09b8efdec66d6b8b1f991c7f7b9fd398dc7c3f9ab8b3079_s390x",
"product_id": "registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:f683186c2cc8be9ec09b8efdec66d6b8b1f991c7f7b9fd398dc7c3f9ab8b3079_s390x",
"product_identification_helper": {
"purl": "pkg:oci/acm-search-indexer-rhel9@sha256%3Af683186c2cc8be9ec09b8efdec66d6b8b1f991c7f7b9fd398dc7c3f9ab8b3079?arch=s390x\u0026repository_url=registry.redhat.io/rhacm2/acm-search-indexer-rhel9\u0026tag=1784567106"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:d912383405599032acffbad22bc154f63a87dd429ba882fd7a94cb82fe650d8e_s390x",
"product": {
"name": "registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:d912383405599032acffbad22bc154f63a87dd429ba882fd7a94cb82fe650d8e_s390x",
"product_id": "registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:d912383405599032acffbad22bc154f63a87dd429ba882fd7a94cb82fe650d8e_s390x",
"product_identification_helper": {
"purl": "pkg:oci/acm-search-v2-api-rhel9@sha256%3Ad912383405599032acffbad22bc154f63a87dd429ba882fd7a94cb82fe650d8e?arch=s390x\u0026repository_url=registry.redhat.io/rhacm2/acm-search-v2-api-rhel9\u0026tag=1784569468"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:181d1decb2f16fcf6f5938027ed346aca29126687bbe6cdcc601c25087f70d11_s390x",
"product": {
"name": "registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:181d1decb2f16fcf6f5938027ed346aca29126687bbe6cdcc601c25087f70d11_s390x",
"product_id": "registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:181d1decb2f16fcf6f5938027ed346aca29126687bbe6cdcc601c25087f70d11_s390x",
"product_identification_helper": {
"purl": "pkg:oci/acm-search-v2-rhel9@sha256%3A181d1decb2f16fcf6f5938027ed346aca29126687bbe6cdcc601c25087f70d11?arch=s390x\u0026repository_url=registry.redhat.io/rhacm2/acm-search-v2-rhel9\u0026tag=1784569967"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:ead1263d538974c48790c65e44cd9cab07a62c2893b2eeb250174e7cf58d7f9d_s390x",
"product": {
"name": "registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:ead1263d538974c48790c65e44cd9cab07a62c2893b2eeb250174e7cf58d7f9d_s390x",
"product_id": "registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:ead1263d538974c48790c65e44cd9cab07a62c2893b2eeb250174e7cf58d7f9d_s390x",
"product_identification_helper": {
"purl": "pkg:oci/acm-siteconfig-rhel9@sha256%3Aead1263d538974c48790c65e44cd9cab07a62c2893b2eeb250174e7cf58d7f9d?arch=s390x\u0026repository_url=registry.redhat.io/rhacm2/acm-siteconfig-rhel9\u0026tag=1784790404"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/insights-client-rhel9@sha256:6ffcc051c955e198c6d96b59bda0ef26b5124ebbdef5357d36a84534f2c7097c_s390x",
"product": {
"name": "registry.redhat.io/rhacm2/insights-client-rhel9@sha256:6ffcc051c955e198c6d96b59bda0ef26b5124ebbdef5357d36a84534f2c7097c_s390x",
"product_id": "registry.redhat.io/rhacm2/insights-client-rhel9@sha256:6ffcc051c955e198c6d96b59bda0ef26b5124ebbdef5357d36a84534f2c7097c_s390x",
"product_identification_helper": {
"purl": "pkg:oci/insights-client-rhel9@sha256%3A6ffcc051c955e198c6d96b59bda0ef26b5124ebbdef5357d36a84534f2c7097c?arch=s390x\u0026repository_url=registry.redhat.io/rhacm2/insights-client-rhel9\u0026tag=1784569567"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:68fb5c2a3c8a0d5e6bbcf2c5568969f6b13e72006d4d54bc5c57cd9a032d1bf6_s390x",
"product": {
"name": "registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:68fb5c2a3c8a0d5e6bbcf2c5568969f6b13e72006d4d54bc5c57cd9a032d1bf6_s390x",
"product_id": "registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:68fb5c2a3c8a0d5e6bbcf2c5568969f6b13e72006d4d54bc5c57cd9a032d1bf6_s390x",
"product_identification_helper": {
"purl": "pkg:oci/insights-metrics-rhel9@sha256%3A68fb5c2a3c8a0d5e6bbcf2c5568969f6b13e72006d4d54bc5c57cd9a032d1bf6?arch=s390x\u0026repository_url=registry.redhat.io/rhacm2/insights-metrics-rhel9\u0026tag=1784569300"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:9dcd0c0ecf1523bf05bd296edbecd85841b2753dee7a5c9df32437f9a8e31471_s390x",
"product": {
"name": "registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:9dcd0c0ecf1523bf05bd296edbecd85841b2753dee7a5c9df32437f9a8e31471_s390x",
"product_id": "registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:9dcd0c0ecf1523bf05bd296edbecd85841b2753dee7a5c9df32437f9a8e31471_s390x",
"product_identification_helper": {
"purl": "pkg:oci/klusterlet-addon-controller-rhel9@sha256%3A9dcd0c0ecf1523bf05bd296edbecd85841b2753dee7a5c9df32437f9a8e31471?arch=s390x\u0026repository_url=registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9\u0026tag=1784158688"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:f0a7fade2853193429bab16922b2e3bbe426e14632423d6550ff7dfb66d42827_s390x",
"product": {
"name": "registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:f0a7fade2853193429bab16922b2e3bbe426e14632423d6550ff7dfb66d42827_s390x",
"product_id": "registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:f0a7fade2853193429bab16922b2e3bbe426e14632423d6550ff7dfb66d42827_s390x",
"product_identification_helper": {
"purl": "pkg:oci/kube-rbac-proxy-rhel9@sha256%3Af0a7fade2853193429bab16922b2e3bbe426e14632423d6550ff7dfb66d42827?arch=s390x\u0026repository_url=registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9\u0026tag=1784677172"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:94950d339fa382d6911f12fc23dcaf2cdb2854c4cab654f6058f5bf0df1bb371_s390x",
"product": {
"name": "registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:94950d339fa382d6911f12fc23dcaf2cdb2854c4cab654f6058f5bf0df1bb371_s390x",
"product_id": "registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:94950d339fa382d6911f12fc23dcaf2cdb2854c4cab654f6058f5bf0df1bb371_s390x",
"product_identification_helper": {
"purl": "pkg:oci/kube-state-metrics-rhel9@sha256%3A94950d339fa382d6911f12fc23dcaf2cdb2854c4cab654f6058f5bf0df1bb371?arch=s390x\u0026repository_url=registry.redhat.io/rhacm2/kube-state-metrics-rhel9\u0026tag=1784811720"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:96775900ea90e57487da6afe59d058b33cb977a0247a1bbeb1bd07bed2816398_s390x",
"product": {
"name": "registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:96775900ea90e57487da6afe59d058b33cb977a0247a1bbeb1bd07bed2816398_s390x",
"product_id": "registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:96775900ea90e57487da6afe59d058b33cb977a0247a1bbeb1bd07bed2816398_s390x",
"product_identification_helper": {
"purl": "pkg:oci/memcached-exporter-rhel9@sha256%3A96775900ea90e57487da6afe59d058b33cb977a0247a1bbeb1bd07bed2816398?arch=s390x\u0026repository_url=registry.redhat.io/rhacm2/memcached-exporter-rhel9\u0026tag=1784551283"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:10c95e5c55ccc1a04e8d2ac28bd1afd3b9bb9a7e9e2a5e3e8efb301421539980_s390x",
"product": {
"name": "registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:10c95e5c55ccc1a04e8d2ac28bd1afd3b9bb9a7e9e2a5e3e8efb301421539980_s390x",
"product_id": "registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:10c95e5c55ccc1a04e8d2ac28bd1afd3b9bb9a7e9e2a5e3e8efb301421539980_s390x",
"product_identification_helper": {
"purl": "pkg:oci/metrics-collector-rhel9@sha256%3A10c95e5c55ccc1a04e8d2ac28bd1afd3b9bb9a7e9e2a5e3e8efb301421539980?arch=s390x\u0026repository_url=registry.redhat.io/rhacm2/metrics-collector-rhel9\u0026tag=1784590742"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:40e5d9634aa7469df8247758961d486cfac3e7d7f0b59184e11ed5571b46bf40_s390x",
"product": {
"name": "registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:40e5d9634aa7469df8247758961d486cfac3e7d7f0b59184e11ed5571b46bf40_s390x",
"product_id": "registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:40e5d9634aa7469df8247758961d486cfac3e7d7f0b59184e11ed5571b46bf40_s390x",
"product_identification_helper": {
"purl": "pkg:oci/multicloud-integrations-rhel9@sha256%3A40e5d9634aa7469df8247758961d486cfac3e7d7f0b59184e11ed5571b46bf40?arch=s390x\u0026repository_url=registry.redhat.io/rhacm2/multicloud-integrations-rhel9\u0026tag=1784652040"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:9d74585acc098c13f3e9dac5ae7f5ef337fa82bd7119d7f1849c5f8a50e84907_s390x",
"product": {
"name": "registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:9d74585acc098c13f3e9dac5ae7f5ef337fa82bd7119d7f1849c5f8a50e84907_s390x",
"product_id": "registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:9d74585acc098c13f3e9dac5ae7f5ef337fa82bd7119d7f1849c5f8a50e84907_s390x",
"product_identification_helper": {
"purl": "pkg:oci/acm-multicluster-observability-addon-rhel9@sha256%3A9d74585acc098c13f3e9dac5ae7f5ef337fa82bd7119d7f1849c5f8a50e84907?arch=s390x\u0026repository_url=registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9\u0026tag=1784331511"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:98bd72ba69bdfb3070d87b3edcbd7050579a514b72cfd67c2926541ba52dbaf7_s390x",
"product": {
"name": "registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:98bd72ba69bdfb3070d87b3edcbd7050579a514b72cfd67c2926541ba52dbaf7_s390x",
"product_id": "registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:98bd72ba69bdfb3070d87b3edcbd7050579a514b72cfd67c2926541ba52dbaf7_s390x",
"product_identification_helper": {
"purl": "pkg:oci/acm-governance-policy-addon-controller-rhel9@sha256%3A98bd72ba69bdfb3070d87b3edcbd7050579a514b72cfd67c2926541ba52dbaf7?arch=s390x\u0026repository_url=registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9\u0026tag=1784331510"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:938abc970731c2eeda8e2b7b73e96d4dfcbf7587330c7b7e52117a577700e426_s390x",
"product": {
"name": "registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:938abc970731c2eeda8e2b7b73e96d4dfcbf7587330c7b7e52117a577700e426_s390x",
"product_id": "registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:938abc970731c2eeda8e2b7b73e96d4dfcbf7587330c7b7e52117a577700e426_s390x",
"product_identification_helper": {
"purl": "pkg:oci/acm-governance-policy-framework-addon-rhel9@sha256%3A938abc970731c2eeda8e2b7b73e96d4dfcbf7587330c7b7e52117a577700e426?arch=s390x\u0026repository_url=registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9\u0026tag=1784331509"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:ede3e22d4e4de49789622149dec23beaa7e0569a3715ac2262929df543e05bc3_s390x",
"product": {
"name": "registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:ede3e22d4e4de49789622149dec23beaa7e0569a3715ac2262929df543e05bc3_s390x",
"product_id": "registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:ede3e22d4e4de49789622149dec23beaa7e0569a3715ac2262929df543e05bc3_s390x",
"product_identification_helper": {
"purl": "pkg:oci/governance-policy-propagator-rhel9@sha256%3Aede3e22d4e4de49789622149dec23beaa7e0569a3715ac2262929df543e05bc3?arch=s390x\u0026repository_url=registry.redhat.io/rhacm2/governance-policy-propagator-rhel9\u0026tag=1784298922"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:68aa571827f5331f1d5a3bd0c60ad441a18877ba11921aff2633940236bafcd4_s390x",
"product": {
"name": "registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:68aa571827f5331f1d5a3bd0c60ad441a18877ba11921aff2633940236bafcd4_s390x",
"product_id": "registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:68aa571827f5331f1d5a3bd0c60ad441a18877ba11921aff2633940236bafcd4_s390x",
"product_identification_helper": {
"purl": "pkg:oci/acm-grafana-rhel9@sha256%3A68aa571827f5331f1d5a3bd0c60ad441a18877ba11921aff2633940236bafcd4?arch=s390x\u0026repository_url=registry.redhat.io/rhacm2/acm-grafana-rhel9\u0026tag=1784591168"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:d1e1b4310eb64891c9456be7c34547bf36b0aafdeb471a49f0892d7eaf8f41f4_s390x",
"product": {
"name": "registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:d1e1b4310eb64891c9456be7c34547bf36b0aafdeb471a49f0892d7eaf8f41f4_s390x",
"product_id": "registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:d1e1b4310eb64891c9456be7c34547bf36b0aafdeb471a49f0892d7eaf8f41f4_s390x",
"product_identification_helper": {
"purl": "pkg:oci/grafana-dashboard-loader-rhel9@sha256%3Ad1e1b4310eb64891c9456be7c34547bf36b0aafdeb471a49f0892d7eaf8f41f4?arch=s390x\u0026repository_url=registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9\u0026tag=1784299028"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:31bd91156f49687d2efffd3be971d9ee0e16abb420b8e8b958caa88b97770020_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:31bd91156f49687d2efffd3be971d9ee0e16abb420b8e8b958caa88b97770020_amd64"
},
"product_reference": "registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:31bd91156f49687d2efffd3be971d9ee0e16abb420b8e8b958caa88b97770020_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:a6315866c67ba350665f5a92f960a5a44e427ca37ae7505e2072af4e02c42f76_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:a6315866c67ba350665f5a92f960a5a44e427ca37ae7505e2072af4e02c42f76_arm64"
},
"product_reference": "registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:a6315866c67ba350665f5a92f960a5a44e427ca37ae7505e2072af4e02c42f76_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:b3ad6fa1de658f3a40c8b183ab501ebc66b359d8cc01439d4215aa52769df213_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:b3ad6fa1de658f3a40c8b183ab501ebc66b359d8cc01439d4215aa52769df213_s390x"
},
"product_reference": "registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:b3ad6fa1de658f3a40c8b183ab501ebc66b359d8cc01439d4215aa52769df213_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:bfde9ebea1fcd27b6d104d5f67db62e870878f9517ccbec2f649dd2c1af4a073_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:bfde9ebea1fcd27b6d104d5f67db62e870878f9517ccbec2f649dd2c1af4a073_ppc64le"
},
"product_reference": "registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:bfde9ebea1fcd27b6d104d5f67db62e870878f9517ccbec2f649dd2c1af4a073_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:08fed161d59299881ff7a54db859feaf8ed7bdb8238d6cf12628ccb73575665e_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:08fed161d59299881ff7a54db859feaf8ed7bdb8238d6cf12628ccb73575665e_arm64"
},
"product_reference": "registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:08fed161d59299881ff7a54db859feaf8ed7bdb8238d6cf12628ccb73575665e_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:09436fe2649ca384b1bc1fd8f736fb1d71392733310e66758ed9f289e00471f9_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:09436fe2649ca384b1bc1fd8f736fb1d71392733310e66758ed9f289e00471f9_s390x"
},
"product_reference": "registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:09436fe2649ca384b1bc1fd8f736fb1d71392733310e66758ed9f289e00471f9_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:3b83670e1c0e9d1f5b76bd7b75d77072bc6208646bc2201bd0bd200dbc59e34a_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:3b83670e1c0e9d1f5b76bd7b75d77072bc6208646bc2201bd0bd200dbc59e34a_amd64"
},
"product_reference": "registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:3b83670e1c0e9d1f5b76bd7b75d77072bc6208646bc2201bd0bd200dbc59e34a_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:927146f966e4c5c2908d29d8ab45a8f3071dbd5ebd9cf0424460a23f814a72a7_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:927146f966e4c5c2908d29d8ab45a8f3071dbd5ebd9cf0424460a23f814a72a7_ppc64le"
},
"product_reference": "registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:927146f966e4c5c2908d29d8ab45a8f3071dbd5ebd9cf0424460a23f814a72a7_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:38a3bc59511133cae56827eba879e7c82c5a974bf1f16b6e8d95e1f79821e669_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:38a3bc59511133cae56827eba879e7c82c5a974bf1f16b6e8d95e1f79821e669_arm64"
},
"product_reference": "registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:38a3bc59511133cae56827eba879e7c82c5a974bf1f16b6e8d95e1f79821e669_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:3fa04db82e3ce6169270db0ce29107b69d8e044e0a1ab13a2bf1050b8c26d087_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:3fa04db82e3ce6169270db0ce29107b69d8e044e0a1ab13a2bf1050b8c26d087_ppc64le"
},
"product_reference": "registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:3fa04db82e3ce6169270db0ce29107b69d8e044e0a1ab13a2bf1050b8c26d087_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:6041a918713d4464c73560b68c294a12d33f297a980d2f9d0e0cc8c300a96f24_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:6041a918713d4464c73560b68c294a12d33f297a980d2f9d0e0cc8c300a96f24_amd64"
},
"product_reference": "registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:6041a918713d4464c73560b68c294a12d33f297a980d2f9d0e0cc8c300a96f24_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:98bd72ba69bdfb3070d87b3edcbd7050579a514b72cfd67c2926541ba52dbaf7_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:98bd72ba69bdfb3070d87b3edcbd7050579a514b72cfd67c2926541ba52dbaf7_s390x"
},
"product_reference": "registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:98bd72ba69bdfb3070d87b3edcbd7050579a514b72cfd67c2926541ba52dbaf7_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:938abc970731c2eeda8e2b7b73e96d4dfcbf7587330c7b7e52117a577700e426_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:938abc970731c2eeda8e2b7b73e96d4dfcbf7587330c7b7e52117a577700e426_s390x"
},
"product_reference": "registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:938abc970731c2eeda8e2b7b73e96d4dfcbf7587330c7b7e52117a577700e426_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:a0876a25ce85d7d4616212813f012422826f152b8d71065e75cd9c3e23034d8a_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:a0876a25ce85d7d4616212813f012422826f152b8d71065e75cd9c3e23034d8a_amd64"
},
"product_reference": "registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:a0876a25ce85d7d4616212813f012422826f152b8d71065e75cd9c3e23034d8a_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:c77077a0cca835a503a6529c89ab19c4027f949d361afdf8a5a259e1e87b0d55_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:c77077a0cca835a503a6529c89ab19c4027f949d361afdf8a5a259e1e87b0d55_arm64"
},
"product_reference": "registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:c77077a0cca835a503a6529c89ab19c4027f949d361afdf8a5a259e1e87b0d55_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:d5bbf3fe886f27cdc27363dcb175e004487d9c8f36de4f1f8516fbeda3a95224_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:d5bbf3fe886f27cdc27363dcb175e004487d9c8f36de4f1f8516fbeda3a95224_ppc64le"
},
"product_reference": "registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:d5bbf3fe886f27cdc27363dcb175e004487d9c8f36de4f1f8516fbeda3a95224_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:0f5d8cae3ba4ea4fcdc5fb9d08f797d576bc225b92af66f193bd4b1324cda4b9_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:0f5d8cae3ba4ea4fcdc5fb9d08f797d576bc225b92af66f193bd4b1324cda4b9_amd64"
},
"product_reference": "registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:0f5d8cae3ba4ea4fcdc5fb9d08f797d576bc225b92af66f193bd4b1324cda4b9_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:2d3588825f8a714fa59b1648d0934d064165e333f322f7f31f01f07b940d42d9_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:2d3588825f8a714fa59b1648d0934d064165e333f322f7f31f01f07b940d42d9_arm64"
},
"product_reference": "registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:2d3588825f8a714fa59b1648d0934d064165e333f322f7f31f01f07b940d42d9_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:68aa571827f5331f1d5a3bd0c60ad441a18877ba11921aff2633940236bafcd4_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:68aa571827f5331f1d5a3bd0c60ad441a18877ba11921aff2633940236bafcd4_s390x"
},
"product_reference": "registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:68aa571827f5331f1d5a3bd0c60ad441a18877ba11921aff2633940236bafcd4_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:9b80c9c61d4befefa7f6a65ae8c001ce7e343a1e4f251e5ebe025625d9511730_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:9b80c9c61d4befefa7f6a65ae8c001ce7e343a1e4f251e5ebe025625d9511730_ppc64le"
},
"product_reference": "registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:9b80c9c61d4befefa7f6a65ae8c001ce7e343a1e4f251e5ebe025625d9511730_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:9b2c24401a91903f023096d2b641aa977acff423eb6770a8e4c4a81aecfd4e62_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:9b2c24401a91903f023096d2b641aa977acff423eb6770a8e4c4a81aecfd4e62_amd64"
},
"product_reference": "registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:9b2c24401a91903f023096d2b641aa977acff423eb6770a8e4c4a81aecfd4e62_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:9d74585acc098c13f3e9dac5ae7f5ef337fa82bd7119d7f1849c5f8a50e84907_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:9d74585acc098c13f3e9dac5ae7f5ef337fa82bd7119d7f1849c5f8a50e84907_s390x"
},
"product_reference": "registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:9d74585acc098c13f3e9dac5ae7f5ef337fa82bd7119d7f1849c5f8a50e84907_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:a6ee95d0ed82bddef084684d11fa770bd646d9be9bc65b3bc386d7c58b33975c_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:a6ee95d0ed82bddef084684d11fa770bd646d9be9bc65b3bc386d7c58b33975c_arm64"
},
"product_reference": "registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:a6ee95d0ed82bddef084684d11fa770bd646d9be9bc65b3bc386d7c58b33975c_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:f7b8654eb8bf675c8c26f0ad395d790f990308d3ad6683bb61b484c92073bbac_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:f7b8654eb8bf675c8c26f0ad395d790f990308d3ad6683bb61b484c92073bbac_ppc64le"
},
"product_reference": "registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:f7b8654eb8bf675c8c26f0ad395d790f990308d3ad6683bb61b484c92073bbac_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:2a598e7fd07db27100d9a53a328ac9a0535865883bddd1373f4f1f2705068d2f_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:2a598e7fd07db27100d9a53a328ac9a0535865883bddd1373f4f1f2705068d2f_arm64"
},
"product_reference": "registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:2a598e7fd07db27100d9a53a328ac9a0535865883bddd1373f4f1f2705068d2f_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:4f8f0b02d0969753e156226a998d442746c238a2a50ea606a49ca0cf695b8925_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:4f8f0b02d0969753e156226a998d442746c238a2a50ea606a49ca0cf695b8925_amd64"
},
"product_reference": "registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:4f8f0b02d0969753e156226a998d442746c238a2a50ea606a49ca0cf695b8925_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:63c02348faa7d4e26e35c69aef5453613dd607a26116823b931b89fe5311e181_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:63c02348faa7d4e26e35c69aef5453613dd607a26116823b931b89fe5311e181_ppc64le"
},
"product_reference": "registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:63c02348faa7d4e26e35c69aef5453613dd607a26116823b931b89fe5311e181_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:ae224866f0085d2c00ab18a28d2aed076e455731903989a49a544abf49950d1f_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:ae224866f0085d2c00ab18a28d2aed076e455731903989a49a544abf49950d1f_s390x"
},
"product_reference": "registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:ae224866f0085d2c00ab18a28d2aed076e455731903989a49a544abf49950d1f_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:0a90a13f006ef0b271079b728ef6d54081f36ae19b6d0e9ab4dc24ea52a30fad_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:0a90a13f006ef0b271079b728ef6d54081f36ae19b6d0e9ab4dc24ea52a30fad_arm64"
},
"product_reference": "registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:0a90a13f006ef0b271079b728ef6d54081f36ae19b6d0e9ab4dc24ea52a30fad_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:3a53629645832974a883002e53198df7c28e59dd6d1df99bf321b52d0ef84b61_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:3a53629645832974a883002e53198df7c28e59dd6d1df99bf321b52d0ef84b61_ppc64le"
},
"product_reference": "registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:3a53629645832974a883002e53198df7c28e59dd6d1df99bf321b52d0ef84b61_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:879315f438ca43abb607d6c97f8fbd4ca2d38209b142e2d97cc0598740273252_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:879315f438ca43abb607d6c97f8fbd4ca2d38209b142e2d97cc0598740273252_s390x"
},
"product_reference": "registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:879315f438ca43abb607d6c97f8fbd4ca2d38209b142e2d97cc0598740273252_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:c6c4d01f5fcee6cad3fc870cace92f45000624760e6e93654bb5e814afeed7bb_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:c6c4d01f5fcee6cad3fc870cace92f45000624760e6e93654bb5e814afeed7bb_amd64"
},
"product_reference": "registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:c6c4d01f5fcee6cad3fc870cace92f45000624760e6e93654bb5e814afeed7bb_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:50f7647620c78fd6b445379c8762f5e978113fe3552906376a24459263f27459_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:50f7647620c78fd6b445379c8762f5e978113fe3552906376a24459263f27459_s390x"
},
"product_reference": "registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:50f7647620c78fd6b445379c8762f5e978113fe3552906376a24459263f27459_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:53e641f48ddc05c63da2e6bc24e9e4636a10de2c3599d8f5f78622bdebca07ca_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:53e641f48ddc05c63da2e6bc24e9e4636a10de2c3599d8f5f78622bdebca07ca_ppc64le"
},
"product_reference": "registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:53e641f48ddc05c63da2e6bc24e9e4636a10de2c3599d8f5f78622bdebca07ca_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:57114b7a386c406715e342637558fab57afeef2e193517f99173a441f39401d5_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:57114b7a386c406715e342637558fab57afeef2e193517f99173a441f39401d5_amd64"
},
"product_reference": "registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:57114b7a386c406715e342637558fab57afeef2e193517f99173a441f39401d5_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:dcdcaa90f292f2d7ad3f10acbedfab9f7f22f3432c3156055f34760d9bf9429c_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:dcdcaa90f292f2d7ad3f10acbedfab9f7f22f3432c3156055f34760d9bf9429c_arm64"
},
"product_reference": "registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:dcdcaa90f292f2d7ad3f10acbedfab9f7f22f3432c3156055f34760d9bf9429c_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:3723b1d5c74f37cba219e203fd2026a718d4821595cb505ec6626684695da65b_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:3723b1d5c74f37cba219e203fd2026a718d4821595cb505ec6626684695da65b_amd64"
},
"product_reference": "registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:3723b1d5c74f37cba219e203fd2026a718d4821595cb505ec6626684695da65b_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:562291f52b6bce98ec8795856b808545c4fe30047b54544c7f6c2ab4678480ff_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:562291f52b6bce98ec8795856b808545c4fe30047b54544c7f6c2ab4678480ff_ppc64le"
},
"product_reference": "registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:562291f52b6bce98ec8795856b808545c4fe30047b54544c7f6c2ab4678480ff_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:e6dfac9bc3e467e141a425944782f5087ed967ac4d02d8d47442e3d61ba5b882_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:e6dfac9bc3e467e141a425944782f5087ed967ac4d02d8d47442e3d61ba5b882_arm64"
},
"product_reference": "registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:e6dfac9bc3e467e141a425944782f5087ed967ac4d02d8d47442e3d61ba5b882_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:f683186c2cc8be9ec09b8efdec66d6b8b1f991c7f7b9fd398dc7c3f9ab8b3079_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:f683186c2cc8be9ec09b8efdec66d6b8b1f991c7f7b9fd398dc7c3f9ab8b3079_s390x"
},
"product_reference": "registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:f683186c2cc8be9ec09b8efdec66d6b8b1f991c7f7b9fd398dc7c3f9ab8b3079_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:2471edd63a94473c68cf37ee50de643e40003f2c5bba84063c154e4888a7f0bd_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:2471edd63a94473c68cf37ee50de643e40003f2c5bba84063c154e4888a7f0bd_amd64"
},
"product_reference": "registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:2471edd63a94473c68cf37ee50de643e40003f2c5bba84063c154e4888a7f0bd_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:7cef49d68df5d8efe52061a18920e07e6c7efa3016c0cea7d1747e67851f254a_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:7cef49d68df5d8efe52061a18920e07e6c7efa3016c0cea7d1747e67851f254a_ppc64le"
},
"product_reference": "registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:7cef49d68df5d8efe52061a18920e07e6c7efa3016c0cea7d1747e67851f254a_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:d912383405599032acffbad22bc154f63a87dd429ba882fd7a94cb82fe650d8e_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:d912383405599032acffbad22bc154f63a87dd429ba882fd7a94cb82fe650d8e_s390x"
},
"product_reference": "registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:d912383405599032acffbad22bc154f63a87dd429ba882fd7a94cb82fe650d8e_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:f3034211e16de48af540efe4ee460395dba0a4a544fa4f277a12840a25df1730_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:f3034211e16de48af540efe4ee460395dba0a4a544fa4f277a12840a25df1730_arm64"
},
"product_reference": "registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:f3034211e16de48af540efe4ee460395dba0a4a544fa4f277a12840a25df1730_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:181d1decb2f16fcf6f5938027ed346aca29126687bbe6cdcc601c25087f70d11_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:181d1decb2f16fcf6f5938027ed346aca29126687bbe6cdcc601c25087f70d11_s390x"
},
"product_reference": "registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:181d1decb2f16fcf6f5938027ed346aca29126687bbe6cdcc601c25087f70d11_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:ab5e4d27e23448d99a37b8c05442bb1254083cdc4ff325e721d97d80ec27346c_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:ab5e4d27e23448d99a37b8c05442bb1254083cdc4ff325e721d97d80ec27346c_ppc64le"
},
"product_reference": "registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:ab5e4d27e23448d99a37b8c05442bb1254083cdc4ff325e721d97d80ec27346c_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:ac172243d158e126594f28317e0cfb37dc1790c9f2121e95fe52506b5e05fc91_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:ac172243d158e126594f28317e0cfb37dc1790c9f2121e95fe52506b5e05fc91_arm64"
},
"product_reference": "registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:ac172243d158e126594f28317e0cfb37dc1790c9f2121e95fe52506b5e05fc91_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:fd96b6284d270effa0f838d960ea4218b72b54c4718513eb523658f2f4972682_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:fd96b6284d270effa0f838d960ea4218b72b54c4718513eb523658f2f4972682_amd64"
},
"product_reference": "registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:fd96b6284d270effa0f838d960ea4218b72b54c4718513eb523658f2f4972682_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:c59d9cd479c62730eda5d482fb2f4e9fbc17a90a5a2861b130aafe1f3a27a333_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:c59d9cd479c62730eda5d482fb2f4e9fbc17a90a5a2861b130aafe1f3a27a333_amd64"
},
"product_reference": "registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:c59d9cd479c62730eda5d482fb2f4e9fbc17a90a5a2861b130aafe1f3a27a333_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:e547f672b14b6e8fc2ffd300b150aedbd3f6b6b36ddcad612f7c992a936a7c82_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:e547f672b14b6e8fc2ffd300b150aedbd3f6b6b36ddcad612f7c992a936a7c82_ppc64le"
},
"product_reference": "registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:e547f672b14b6e8fc2ffd300b150aedbd3f6b6b36ddcad612f7c992a936a7c82_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:ead1263d538974c48790c65e44cd9cab07a62c2893b2eeb250174e7cf58d7f9d_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:ead1263d538974c48790c65e44cd9cab07a62c2893b2eeb250174e7cf58d7f9d_s390x"
},
"product_reference": "registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:ead1263d538974c48790c65e44cd9cab07a62c2893b2eeb250174e7cf58d7f9d_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:ed0457a57c7b39b79fb308176f45ffe678938b25fbb8c15de2cedbe54b916f64_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:ed0457a57c7b39b79fb308176f45ffe678938b25fbb8c15de2cedbe54b916f64_arm64"
},
"product_reference": "registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:ed0457a57c7b39b79fb308176f45ffe678938b25fbb8c15de2cedbe54b916f64_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:9847a5752ec77e17861dcdac5546ee5c53679c80c3569609b21d9080ee3b7ef3_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:9847a5752ec77e17861dcdac5546ee5c53679c80c3569609b21d9080ee3b7ef3_ppc64le"
},
"product_reference": "registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:9847a5752ec77e17861dcdac5546ee5c53679c80c3569609b21d9080ee3b7ef3_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:d3c823e61a0682ddc85e576e86234e580992886de471035630f9c89bbad6ebb7_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:d3c823e61a0682ddc85e576e86234e580992886de471035630f9c89bbad6ebb7_s390x"
},
"product_reference": "registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:d3c823e61a0682ddc85e576e86234e580992886de471035630f9c89bbad6ebb7_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:ded425ed0af88a1411a06e5191aee25c4c59f1de85b041eba95c9997686cf09e_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:ded425ed0af88a1411a06e5191aee25c4c59f1de85b041eba95c9997686cf09e_amd64"
},
"product_reference": "registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:ded425ed0af88a1411a06e5191aee25c4c59f1de85b041eba95c9997686cf09e_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:ee63f59942f9df04e95fc4266f0d194cd62a7ca08dd5478283884d0ab6003da7_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:ee63f59942f9df04e95fc4266f0d194cd62a7ca08dd5478283884d0ab6003da7_arm64"
},
"product_reference": "registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:ee63f59942f9df04e95fc4266f0d194cd62a7ca08dd5478283884d0ab6003da7_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:724377cabaa284a5197e7505a7150c89631c2f2bcc629e074c7c0be18abd8e6f_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:724377cabaa284a5197e7505a7150c89631c2f2bcc629e074c7c0be18abd8e6f_ppc64le"
},
"product_reference": "registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:724377cabaa284a5197e7505a7150c89631c2f2bcc629e074c7c0be18abd8e6f_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:cbf797c9e93413540b20ebee9191375ddd8185ef22dc8c9e23cc3a4c015abaf7_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:cbf797c9e93413540b20ebee9191375ddd8185ef22dc8c9e23cc3a4c015abaf7_amd64"
},
"product_reference": "registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:cbf797c9e93413540b20ebee9191375ddd8185ef22dc8c9e23cc3a4c015abaf7_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:d7609d62a801cf07ef639abcd4f193b2d68967fadebbfddf2349003d7e9eaa44_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:d7609d62a801cf07ef639abcd4f193b2d68967fadebbfddf2349003d7e9eaa44_arm64"
},
"product_reference": "registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:d7609d62a801cf07ef639abcd4f193b2d68967fadebbfddf2349003d7e9eaa44_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:f61fe90362f793225591eb7e2a86d5cdc6fb35aa087e9b6a6218a42b1c1d945d_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:f61fe90362f793225591eb7e2a86d5cdc6fb35aa087e9b6a6218a42b1c1d945d_s390x"
},
"product_reference": "registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:f61fe90362f793225591eb7e2a86d5cdc6fb35aa087e9b6a6218a42b1c1d945d_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:1c4de9460688800b62bad6fb13653ef4b52bf215e4d41674291193e9b8e71b24_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:1c4de9460688800b62bad6fb13653ef4b52bf215e4d41674291193e9b8e71b24_s390x"
},
"product_reference": "registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:1c4de9460688800b62bad6fb13653ef4b52bf215e4d41674291193e9b8e71b24_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:4f1e59610b2fbedc56f425b3fbd8f16c9ea6ea96025f18a404fe48f6a49bdc1e_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:4f1e59610b2fbedc56f425b3fbd8f16c9ea6ea96025f18a404fe48f6a49bdc1e_arm64"
},
"product_reference": "registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:4f1e59610b2fbedc56f425b3fbd8f16c9ea6ea96025f18a404fe48f6a49bdc1e_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:ab0d28306dd6daa03af79bdc2ea650e59a50a03317987c4cdd0d1ee70f95b597_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:ab0d28306dd6daa03af79bdc2ea650e59a50a03317987c4cdd0d1ee70f95b597_amd64"
},
"product_reference": "registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:ab0d28306dd6daa03af79bdc2ea650e59a50a03317987c4cdd0d1ee70f95b597_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:b700a8bb7ea6e4253afb8bcf94e5ad086349980ca0716a87817724d3da3fdce1_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:b700a8bb7ea6e4253afb8bcf94e5ad086349980ca0716a87817724d3da3fdce1_ppc64le"
},
"product_reference": "registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:b700a8bb7ea6e4253afb8bcf94e5ad086349980ca0716a87817724d3da3fdce1_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4015f46d2172db26a348635e2e8cbd4bbcdbbaa56a4b12c232676a3d0f5bbee2_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4015f46d2172db26a348635e2e8cbd4bbcdbbaa56a4b12c232676a3d0f5bbee2_amd64"
},
"product_reference": "registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4015f46d2172db26a348635e2e8cbd4bbcdbbaa56a4b12c232676a3d0f5bbee2_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4169252c61ec70b91b10c750d5f9ecd53f5c3c906766bba9103afbac3c3f9edf_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4169252c61ec70b91b10c750d5f9ecd53f5c3c906766bba9103afbac3c3f9edf_arm64"
},
"product_reference": "registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4169252c61ec70b91b10c750d5f9ecd53f5c3c906766bba9103afbac3c3f9edf_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4ab72a192553c21de76754f06fe38cf443e686e4b4edc2aa2ceb2b6b9d95bb6c_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4ab72a192553c21de76754f06fe38cf443e686e4b4edc2aa2ceb2b6b9d95bb6c_ppc64le"
},
"product_reference": "registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4ab72a192553c21de76754f06fe38cf443e686e4b4edc2aa2ceb2b6b9d95bb6c_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:579ef0925c6f56ed48f22121767189431bef6c4eaa72b2648a1b91488357a51d_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:579ef0925c6f56ed48f22121767189431bef6c4eaa72b2648a1b91488357a51d_s390x"
},
"product_reference": "registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:579ef0925c6f56ed48f22121767189431bef6c4eaa72b2648a1b91488357a51d_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/console-rhel9@sha256:2b796bf55ecf7a14d1c87d829a2b20d998fc2943686373105b0a50f5053ef836_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:2b796bf55ecf7a14d1c87d829a2b20d998fc2943686373105b0a50f5053ef836_s390x"
},
"product_reference": "registry.redhat.io/rhacm2/console-rhel9@sha256:2b796bf55ecf7a14d1c87d829a2b20d998fc2943686373105b0a50f5053ef836_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/console-rhel9@sha256:7e960b59f64547f7e9602b7c066a51ab52aba929726aec2bacdf486a9d4d28fd_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:7e960b59f64547f7e9602b7c066a51ab52aba929726aec2bacdf486a9d4d28fd_ppc64le"
},
"product_reference": "registry.redhat.io/rhacm2/console-rhel9@sha256:7e960b59f64547f7e9602b7c066a51ab52aba929726aec2bacdf486a9d4d28fd_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/console-rhel9@sha256:a43e430a2ec0b86fb6ade361677be298b4e27444388a9bca35ddafbf9c77277c_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:a43e430a2ec0b86fb6ade361677be298b4e27444388a9bca35ddafbf9c77277c_arm64"
},
"product_reference": "registry.redhat.io/rhacm2/console-rhel9@sha256:a43e430a2ec0b86fb6ade361677be298b4e27444388a9bca35ddafbf9c77277c_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/console-rhel9@sha256:d2394b121256985e5ca322aea77bb0bf999ba2d7a6f1627e62bbc125c475dbbd_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:d2394b121256985e5ca322aea77bb0bf999ba2d7a6f1627e62bbc125c475dbbd_amd64"
},
"product_reference": "registry.redhat.io/rhacm2/console-rhel9@sha256:d2394b121256985e5ca322aea77bb0bf999ba2d7a6f1627e62bbc125c475dbbd_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:1868e2ea03d063b4cd64601cb0aaf5c9ea7f55e83eba2e2d4dcf6f830efeafc7_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:1868e2ea03d063b4cd64601cb0aaf5c9ea7f55e83eba2e2d4dcf6f830efeafc7_ppc64le"
},
"product_reference": "registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:1868e2ea03d063b4cd64601cb0aaf5c9ea7f55e83eba2e2d4dcf6f830efeafc7_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:4bfbf0bdc882979bc94d85a4aeff8caa0ec7887aec7412e32ae1442811325d06_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:4bfbf0bdc882979bc94d85a4aeff8caa0ec7887aec7412e32ae1442811325d06_s390x"
},
"product_reference": "registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:4bfbf0bdc882979bc94d85a4aeff8caa0ec7887aec7412e32ae1442811325d06_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:844e3d69d3c26914e02612466021592a876e6e2dd6cf77084723a70f567ba0e2_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:844e3d69d3c26914e02612466021592a876e6e2dd6cf77084723a70f567ba0e2_amd64"
},
"product_reference": "registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:844e3d69d3c26914e02612466021592a876e6e2dd6cf77084723a70f567ba0e2_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:bbe04eb8fd197f15875f498e3c18b9a7a445380efb5f696422d79df99a34a881_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:bbe04eb8fd197f15875f498e3c18b9a7a445380efb5f696422d79df99a34a881_arm64"
},
"product_reference": "registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:bbe04eb8fd197f15875f498e3c18b9a7a445380efb5f696422d79df99a34a881_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:2c9f9b47c01c5e5e017c583c6a09c5c52f40ef88acf789689265cb31ef328fb8_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:2c9f9b47c01c5e5e017c583c6a09c5c52f40ef88acf789689265cb31ef328fb8_ppc64le"
},
"product_reference": "registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:2c9f9b47c01c5e5e017c583c6a09c5c52f40ef88acf789689265cb31ef328fb8_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:7b5e883efde312c1571c4825b523ff04ab57af6a9f4162a36b80b973f9602c46_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:7b5e883efde312c1571c4825b523ff04ab57af6a9f4162a36b80b973f9602c46_amd64"
},
"product_reference": "registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:7b5e883efde312c1571c4825b523ff04ab57af6a9f4162a36b80b973f9602c46_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:d896dd89fb924da246fc729041d9debc019d8a4210cfd3de8883834e429cca10_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:d896dd89fb924da246fc729041d9debc019d8a4210cfd3de8883834e429cca10_arm64"
},
"product_reference": "registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:d896dd89fb924da246fc729041d9debc019d8a4210cfd3de8883834e429cca10_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:ede3e22d4e4de49789622149dec23beaa7e0569a3715ac2262929df543e05bc3_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:ede3e22d4e4de49789622149dec23beaa7e0569a3715ac2262929df543e05bc3_s390x"
},
"product_reference": "registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:ede3e22d4e4de49789622149dec23beaa7e0569a3715ac2262929df543e05bc3_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:273a393b8c62fbc4edb4bf4033c47d8b52bda56fc9cafa289d9513210840815b_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:273a393b8c62fbc4edb4bf4033c47d8b52bda56fc9cafa289d9513210840815b_amd64"
},
"product_reference": "registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:273a393b8c62fbc4edb4bf4033c47d8b52bda56fc9cafa289d9513210840815b_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:71f1b590785ce7f4577ecd687dbab9bc3c5931c568a3108eb84279c7aa892046_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:71f1b590785ce7f4577ecd687dbab9bc3c5931c568a3108eb84279c7aa892046_arm64"
},
"product_reference": "registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:71f1b590785ce7f4577ecd687dbab9bc3c5931c568a3108eb84279c7aa892046_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:d1e1b4310eb64891c9456be7c34547bf36b0aafdeb471a49f0892d7eaf8f41f4_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:d1e1b4310eb64891c9456be7c34547bf36b0aafdeb471a49f0892d7eaf8f41f4_s390x"
},
"product_reference": "registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:d1e1b4310eb64891c9456be7c34547bf36b0aafdeb471a49f0892d7eaf8f41f4_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:e0a7514406c7ffae080db6d4db3bbf7b77a606ea4632bf09f8301ce1d3739bb5_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:e0a7514406c7ffae080db6d4db3bbf7b77a606ea4632bf09f8301ce1d3739bb5_ppc64le"
},
"product_reference": "registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:e0a7514406c7ffae080db6d4db3bbf7b77a606ea4632bf09f8301ce1d3739bb5_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/insights-client-rhel9@sha256:2a4c6c061d154ed9c74707a7a2e2390fde2a150f36197386c3e49c0612d345b2_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:2a4c6c061d154ed9c74707a7a2e2390fde2a150f36197386c3e49c0612d345b2_amd64"
},
"product_reference": "registry.redhat.io/rhacm2/insights-client-rhel9@sha256:2a4c6c061d154ed9c74707a7a2e2390fde2a150f36197386c3e49c0612d345b2_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/insights-client-rhel9@sha256:6ffcc051c955e198c6d96b59bda0ef26b5124ebbdef5357d36a84534f2c7097c_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:6ffcc051c955e198c6d96b59bda0ef26b5124ebbdef5357d36a84534f2c7097c_s390x"
},
"product_reference": "registry.redhat.io/rhacm2/insights-client-rhel9@sha256:6ffcc051c955e198c6d96b59bda0ef26b5124ebbdef5357d36a84534f2c7097c_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/insights-client-rhel9@sha256:c9258bf58373f9c6859789c8ec272cd7d702c37e063fc2ee53c66d296e7ee3d0_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:c9258bf58373f9c6859789c8ec272cd7d702c37e063fc2ee53c66d296e7ee3d0_ppc64le"
},
"product_reference": "registry.redhat.io/rhacm2/insights-client-rhel9@sha256:c9258bf58373f9c6859789c8ec272cd7d702c37e063fc2ee53c66d296e7ee3d0_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/insights-client-rhel9@sha256:d83c6bb4f2a91d2c4de3ffbf4aa8ceecb695f8491ba7586d55275c62cd1931e6_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:d83c6bb4f2a91d2c4de3ffbf4aa8ceecb695f8491ba7586d55275c62cd1931e6_arm64"
},
"product_reference": "registry.redhat.io/rhacm2/insights-client-rhel9@sha256:d83c6bb4f2a91d2c4de3ffbf4aa8ceecb695f8491ba7586d55275c62cd1931e6_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:67637c5cba3eca1597885823c6e44c13db445d0ef38751eb8364b69dbf07caac_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:67637c5cba3eca1597885823c6e44c13db445d0ef38751eb8364b69dbf07caac_ppc64le"
},
"product_reference": "registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:67637c5cba3eca1597885823c6e44c13db445d0ef38751eb8364b69dbf07caac_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:68fb5c2a3c8a0d5e6bbcf2c5568969f6b13e72006d4d54bc5c57cd9a032d1bf6_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:68fb5c2a3c8a0d5e6bbcf2c5568969f6b13e72006d4d54bc5c57cd9a032d1bf6_s390x"
},
"product_reference": "registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:68fb5c2a3c8a0d5e6bbcf2c5568969f6b13e72006d4d54bc5c57cd9a032d1bf6_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:9f5fa40c88b0f5d1ae3634632240817a91f4575f8eae9c005b8e35a55cf38003_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:9f5fa40c88b0f5d1ae3634632240817a91f4575f8eae9c005b8e35a55cf38003_arm64"
},
"product_reference": "registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:9f5fa40c88b0f5d1ae3634632240817a91f4575f8eae9c005b8e35a55cf38003_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:fcbcee9fc7e0bbf5775a33ae9b7e3d7e48a90e2aa1cb85605e05612b6e4d4e30_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:fcbcee9fc7e0bbf5775a33ae9b7e3d7e48a90e2aa1cb85605e05612b6e4d4e30_amd64"
},
"product_reference": "registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:fcbcee9fc7e0bbf5775a33ae9b7e3d7e48a90e2aa1cb85605e05612b6e4d4e30_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:0c165bb93ce933c7f9998a615908bfcca0b4eb38e32e24a1c823e63791b7604b_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:0c165bb93ce933c7f9998a615908bfcca0b4eb38e32e24a1c823e63791b7604b_ppc64le"
},
"product_reference": "registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:0c165bb93ce933c7f9998a615908bfcca0b4eb38e32e24a1c823e63791b7604b_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:42aa392f82bdc45a3b857d1ed44e224ddfd14db1e3dcbb74dcc850ac0540e964_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:42aa392f82bdc45a3b857d1ed44e224ddfd14db1e3dcbb74dcc850ac0540e964_arm64"
},
"product_reference": "registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:42aa392f82bdc45a3b857d1ed44e224ddfd14db1e3dcbb74dcc850ac0540e964_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:9dcd0c0ecf1523bf05bd296edbecd85841b2753dee7a5c9df32437f9a8e31471_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:9dcd0c0ecf1523bf05bd296edbecd85841b2753dee7a5c9df32437f9a8e31471_s390x"
},
"product_reference": "registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:9dcd0c0ecf1523bf05bd296edbecd85841b2753dee7a5c9df32437f9a8e31471_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:c5505c462e6b2c04a6e14bc1e22dfc42dc8adea8f6eaf0615cd58b1973b7d62e_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:c5505c462e6b2c04a6e14bc1e22dfc42dc8adea8f6eaf0615cd58b1973b7d62e_amd64"
},
"product_reference": "registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:c5505c462e6b2c04a6e14bc1e22dfc42dc8adea8f6eaf0615cd58b1973b7d62e_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:1a93df314c31f10da7b1345fab07b15b846e28865764178e34124f84dc967152_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:1a93df314c31f10da7b1345fab07b15b846e28865764178e34124f84dc967152_amd64"
},
"product_reference": "registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:1a93df314c31f10da7b1345fab07b15b846e28865764178e34124f84dc967152_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:34343f81973c3fbdd8630c32d0fad597745ea10f960ea64236408e58e0f10e14_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:34343f81973c3fbdd8630c32d0fad597745ea10f960ea64236408e58e0f10e14_arm64"
},
"product_reference": "registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:34343f81973c3fbdd8630c32d0fad597745ea10f960ea64236408e58e0f10e14_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:7b3635784ebfb6343a73c9fa6de7bea57b3aacce1c49a0f7f250a471f7b897e3_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:7b3635784ebfb6343a73c9fa6de7bea57b3aacce1c49a0f7f250a471f7b897e3_ppc64le"
},
"product_reference": "registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:7b3635784ebfb6343a73c9fa6de7bea57b3aacce1c49a0f7f250a471f7b897e3_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:f0a7fade2853193429bab16922b2e3bbe426e14632423d6550ff7dfb66d42827_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:f0a7fade2853193429bab16922b2e3bbe426e14632423d6550ff7dfb66d42827_s390x"
},
"product_reference": "registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:f0a7fade2853193429bab16922b2e3bbe426e14632423d6550ff7dfb66d42827_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:94950d339fa382d6911f12fc23dcaf2cdb2854c4cab654f6058f5bf0df1bb371_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:94950d339fa382d6911f12fc23dcaf2cdb2854c4cab654f6058f5bf0df1bb371_s390x"
},
"product_reference": "registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:94950d339fa382d6911f12fc23dcaf2cdb2854c4cab654f6058f5bf0df1bb371_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:bcfbd2284cbeeba5a835aaf5a5590ddd8156bd881ca24fd0fe1465fade1f84c2_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:bcfbd2284cbeeba5a835aaf5a5590ddd8156bd881ca24fd0fe1465fade1f84c2_ppc64le"
},
"product_reference": "registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:bcfbd2284cbeeba5a835aaf5a5590ddd8156bd881ca24fd0fe1465fade1f84c2_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:bd739ced163053224e5b0ea2f3cd577481c6b6c1162cc0fbc186f1716b4a1fbd_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:bd739ced163053224e5b0ea2f3cd577481c6b6c1162cc0fbc186f1716b4a1fbd_arm64"
},
"product_reference": "registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:bd739ced163053224e5b0ea2f3cd577481c6b6c1162cc0fbc186f1716b4a1fbd_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:d40496f114898985cde3860b9664c34d8c32de85e4d3d846df91a6ba27a2e99c_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:d40496f114898985cde3860b9664c34d8c32de85e4d3d846df91a6ba27a2e99c_amd64"
},
"product_reference": "registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:d40496f114898985cde3860b9664c34d8c32de85e4d3d846df91a6ba27a2e99c_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:3f7cbe7605595d712e14d9a17717fafc6c6e334f2ad3e821c34947ec78411046_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:3f7cbe7605595d712e14d9a17717fafc6c6e334f2ad3e821c34947ec78411046_amd64"
},
"product_reference": "registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:3f7cbe7605595d712e14d9a17717fafc6c6e334f2ad3e821c34947ec78411046_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:96775900ea90e57487da6afe59d058b33cb977a0247a1bbeb1bd07bed2816398_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:96775900ea90e57487da6afe59d058b33cb977a0247a1bbeb1bd07bed2816398_s390x"
},
"product_reference": "registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:96775900ea90e57487da6afe59d058b33cb977a0247a1bbeb1bd07bed2816398_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:caa6b121538e074312314d9888d9b423bd225aefa4f25eb145893b9fc548c0ad_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:caa6b121538e074312314d9888d9b423bd225aefa4f25eb145893b9fc548c0ad_ppc64le"
},
"product_reference": "registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:caa6b121538e074312314d9888d9b423bd225aefa4f25eb145893b9fc548c0ad_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:e59c90cfe8160b28f9d2aa9e59b1d04d742df44d2195210ebc1946ee3cb78b6f_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:e59c90cfe8160b28f9d2aa9e59b1d04d742df44d2195210ebc1946ee3cb78b6f_arm64"
},
"product_reference": "registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:e59c90cfe8160b28f9d2aa9e59b1d04d742df44d2195210ebc1946ee3cb78b6f_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:10c95e5c55ccc1a04e8d2ac28bd1afd3b9bb9a7e9e2a5e3e8efb301421539980_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:10c95e5c55ccc1a04e8d2ac28bd1afd3b9bb9a7e9e2a5e3e8efb301421539980_s390x"
},
"product_reference": "registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:10c95e5c55ccc1a04e8d2ac28bd1afd3b9bb9a7e9e2a5e3e8efb301421539980_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:60a310d4464b4817845703d14e95729321b883fbfc79fbf2dd8d514bb3c675e9_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:60a310d4464b4817845703d14e95729321b883fbfc79fbf2dd8d514bb3c675e9_ppc64le"
},
"product_reference": "registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:60a310d4464b4817845703d14e95729321b883fbfc79fbf2dd8d514bb3c675e9_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:70e6c14d72f14d25a90f44043932fbd3f824b30e8ad4b36307100726b24d9c06_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:70e6c14d72f14d25a90f44043932fbd3f824b30e8ad4b36307100726b24d9c06_amd64"
},
"product_reference": "registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:70e6c14d72f14d25a90f44043932fbd3f824b30e8ad4b36307100726b24d9c06_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:784129cf69b3bf77a907fe909fd73a2a4d0fbd947fe0037e47aa1d62c6ffcf0b_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:784129cf69b3bf77a907fe909fd73a2a4d0fbd947fe0037e47aa1d62c6ffcf0b_arm64"
},
"product_reference": "registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:784129cf69b3bf77a907fe909fd73a2a4d0fbd947fe0037e47aa1d62c6ffcf0b_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:26e58654cdd092cb812207cb4473f5f5988ebd708d95c34152c2e8c124f7297d_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:26e58654cdd092cb812207cb4473f5f5988ebd708d95c34152c2e8c124f7297d_amd64"
},
"product_reference": "registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:26e58654cdd092cb812207cb4473f5f5988ebd708d95c34152c2e8c124f7297d_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:40e5d9634aa7469df8247758961d486cfac3e7d7f0b59184e11ed5571b46bf40_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:40e5d9634aa7469df8247758961d486cfac3e7d7f0b59184e11ed5571b46bf40_s390x"
},
"product_reference": "registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:40e5d9634aa7469df8247758961d486cfac3e7d7f0b59184e11ed5571b46bf40_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:5b59faed336de07965755c893cb9d0ffc52ec90f61cc8c54487f6c0cac53322e_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:5b59faed336de07965755c893cb9d0ffc52ec90f61cc8c54487f6c0cac53322e_arm64"
},
"product_reference": "registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:5b59faed336de07965755c893cb9d0ffc52ec90f61cc8c54487f6c0cac53322e_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:b59aea0c9e859025988b0f0c9b6e7748c4acf6d0b4cee35f3fabb7b84feb598b_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:b59aea0c9e859025988b0f0c9b6e7748c4acf6d0b4cee35f3fabb7b84feb598b_ppc64le"
},
"product_reference": "registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:b59aea0c9e859025988b0f0c9b6e7748c4acf6d0b4cee35f3fabb7b84feb598b_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:2368703206d833e4cb73b7e8750efb9997633a6f9accbf032426bcfcae4c00d9_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:2368703206d833e4cb73b7e8750efb9997633a6f9accbf032426bcfcae4c00d9_amd64"
},
"product_reference": "registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:2368703206d833e4cb73b7e8750efb9997633a6f9accbf032426bcfcae4c00d9_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:80b543b207e724e880ff932c514fe9c6a3925bfede1c31863531e4e69d050d40_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:80b543b207e724e880ff932c514fe9c6a3925bfede1c31863531e4e69d050d40_arm64"
},
"product_reference": "registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:80b543b207e724e880ff932c514fe9c6a3925bfede1c31863531e4e69d050d40_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:82405a9a5715db5442dfa3d3f594888bd7b2f9c778d68357a7d8884f5ea46915_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:82405a9a5715db5442dfa3d3f594888bd7b2f9c778d68357a7d8884f5ea46915_s390x"
},
"product_reference": "registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:82405a9a5715db5442dfa3d3f594888bd7b2f9c778d68357a7d8884f5ea46915_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:8fd2bda7b8d94ededf7973f76a159dd61105776a05d961ac9cfd9bee0a988213_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:8fd2bda7b8d94ededf7973f76a159dd61105776a05d961ac9cfd9bee0a988213_ppc64le"
},
"product_reference": "registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:8fd2bda7b8d94ededf7973f76a159dd61105776a05d961ac9cfd9bee0a988213_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:4def845360282dad99181b96bcd834b4863eab39e246fda2476234c561c652ec_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:4def845360282dad99181b96bcd834b4863eab39e246fda2476234c561c652ec_ppc64le"
},
"product_reference": "registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:4def845360282dad99181b96bcd834b4863eab39e246fda2476234c561c652ec_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:b67aec868b6366cf04f3980b15588e1a0af5c88b2248958bc3884261ad390ca0_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:b67aec868b6366cf04f3980b15588e1a0af5c88b2248958bc3884261ad390ca0_arm64"
},
"product_reference": "registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:b67aec868b6366cf04f3980b15588e1a0af5c88b2248958bc3884261ad390ca0_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:ceacf3491ebec6f5613011fe8d36b66d00f8b3697832615a4d7024e23125085e_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:ceacf3491ebec6f5613011fe8d36b66d00f8b3697832615a4d7024e23125085e_amd64"
},
"product_reference": "registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:ceacf3491ebec6f5613011fe8d36b66d00f8b3697832615a4d7024e23125085e_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:d9f6a520b818dcccbedb94720b5979ef1cdec2e02491c76e3decb3ee18f2085d_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:d9f6a520b818dcccbedb94720b5979ef1cdec2e02491c76e3decb3ee18f2085d_s390x"
},
"product_reference": "registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:d9f6a520b818dcccbedb94720b5979ef1cdec2e02491c76e3decb3ee18f2085d_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:3e6519c0c789b946eb1b811867c41c4f204440bad5734760c0aca4e3fc602e5a_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:3e6519c0c789b946eb1b811867c41c4f204440bad5734760c0aca4e3fc602e5a_ppc64le"
},
"product_reference": "registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:3e6519c0c789b946eb1b811867c41c4f204440bad5734760c0aca4e3fc602e5a_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:95684cfaf4d5d91bc9fe8cfbf64a6f113e944e3f0c102d27851be5232eca0dbb_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:95684cfaf4d5d91bc9fe8cfbf64a6f113e944e3f0c102d27851be5232eca0dbb_s390x"
},
"product_reference": "registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:95684cfaf4d5d91bc9fe8cfbf64a6f113e944e3f0c102d27851be5232eca0dbb_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:9cb20990af88287dd8a27de4e4ef12eb244577a1844482d26107359c6efe8efa_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:9cb20990af88287dd8a27de4e4ef12eb244577a1844482d26107359c6efe8efa_arm64"
},
"product_reference": "registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:9cb20990af88287dd8a27de4e4ef12eb244577a1844482d26107359c6efe8efa_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:a69ebb0c7e817d44cfabd86ad13ef4cc94a8bf5b6e8a607d17b197603d64a224_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:a69ebb0c7e817d44cfabd86ad13ef4cc94a8bf5b6e8a607d17b197603d64a224_amd64"
},
"product_reference": "registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:a69ebb0c7e817d44cfabd86ad13ef4cc94a8bf5b6e8a607d17b197603d64a224_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:0eea35a3af36d08db945a70c387cc38eb326f75b4ed322f09d8c91863cfe5d02_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:0eea35a3af36d08db945a70c387cc38eb326f75b4ed322f09d8c91863cfe5d02_arm64"
},
"product_reference": "registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:0eea35a3af36d08db945a70c387cc38eb326f75b4ed322f09d8c91863cfe5d02_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:22c48db227cd6f2ecec746674e31ac7f5a983a418679fc91678a0aa0ebb49496_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:22c48db227cd6f2ecec746674e31ac7f5a983a418679fc91678a0aa0ebb49496_amd64"
},
"product_reference": "registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:22c48db227cd6f2ecec746674e31ac7f5a983a418679fc91678a0aa0ebb49496_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:8e8d249c39d562f819d347f12610dda7f5c01215c41101bfd5dca008e04edf6e_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:8e8d249c39d562f819d347f12610dda7f5c01215c41101bfd5dca008e04edf6e_s390x"
},
"product_reference": "registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:8e8d249c39d562f819d347f12610dda7f5c01215c41101bfd5dca008e04edf6e_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:f8adb8dd40a204bacb51cd423803097a514ec8e8e9f52209e02ecf14cad622bb_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:f8adb8dd40a204bacb51cd423803097a514ec8e8e9f52209e02ecf14cad622bb_ppc64le"
},
"product_reference": "registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:f8adb8dd40a204bacb51cd423803097a514ec8e8e9f52209e02ecf14cad622bb_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:03adc6277e2bf409391941c6f4508154abc38a0c043139978754f6d4fd32c5a8_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:03adc6277e2bf409391941c6f4508154abc38a0c043139978754f6d4fd32c5a8_amd64"
},
"product_reference": "registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:03adc6277e2bf409391941c6f4508154abc38a0c043139978754f6d4fd32c5a8_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:7e100af30ed11325cb2cbee02af09306e53df5db5847f2a4b733cd307e3cd623_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:7e100af30ed11325cb2cbee02af09306e53df5db5847f2a4b733cd307e3cd623_ppc64le"
},
"product_reference": "registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:7e100af30ed11325cb2cbee02af09306e53df5db5847f2a4b733cd307e3cd623_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:91b474b4808b18c279c9f8eb3be8e6d1e1e47cf2b5f9553acd901c74b20bddbc_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:91b474b4808b18c279c9f8eb3be8e6d1e1e47cf2b5f9553acd901c74b20bddbc_arm64"
},
"product_reference": "registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:91b474b4808b18c279c9f8eb3be8e6d1e1e47cf2b5f9553acd901c74b20bddbc_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:d56f884a9700a4f193d6f3db1895bd54745ec77e02ead3d43bd6e4fe04a2969e_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:d56f884a9700a4f193d6f3db1895bd54745ec77e02ead3d43bd6e4fe04a2969e_s390x"
},
"product_reference": "registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:d56f884a9700a4f193d6f3db1895bd54745ec77e02ead3d43bd6e4fe04a2969e_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:1f7ed606f69a74943aedb0a956e5a71019f8a1ab53cd3f8166be0f55a69809b9_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:1f7ed606f69a74943aedb0a956e5a71019f8a1ab53cd3f8166be0f55a69809b9_ppc64le"
},
"product_reference": "registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:1f7ed606f69a74943aedb0a956e5a71019f8a1ab53cd3f8166be0f55a69809b9_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:4841076eb82f1f1748345556ff6c4e02a17f1f63c661e375eaba720291cbaf6a_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:4841076eb82f1f1748345556ff6c4e02a17f1f63c661e375eaba720291cbaf6a_s390x"
},
"product_reference": "registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:4841076eb82f1f1748345556ff6c4e02a17f1f63c661e375eaba720291cbaf6a_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:a79ac7dcae109aa526e2a218327dd8c5dba2b924fc27447a07199b3b2f2f67b3_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:a79ac7dcae109aa526e2a218327dd8c5dba2b924fc27447a07199b3b2f2f67b3_amd64"
},
"product_reference": "registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:a79ac7dcae109aa526e2a218327dd8c5dba2b924fc27447a07199b3b2f2f67b3_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:dee022821852f2d5ebdbbd9f09c9b97997a905061dadb3f78433291d462d49a7_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:dee022821852f2d5ebdbbd9f09c9b97997a905061dadb3f78433291d462d49a7_arm64"
},
"product_reference": "registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:dee022821852f2d5ebdbbd9f09c9b97997a905061dadb3f78433291d462d49a7_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:1a746b16f362a83f399255d925b322b3440b3d89ae4d64ab7962db3d82ee91a1_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:1a746b16f362a83f399255d925b322b3440b3d89ae4d64ab7962db3d82ee91a1_arm64"
},
"product_reference": "registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:1a746b16f362a83f399255d925b322b3440b3d89ae4d64ab7962db3d82ee91a1_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:417a31bec11c3ffb70f40fa955069d5160dc12e2426b67e1d2e35ae3f7fa06df_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:417a31bec11c3ffb70f40fa955069d5160dc12e2426b67e1d2e35ae3f7fa06df_ppc64le"
},
"product_reference": "registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:417a31bec11c3ffb70f40fa955069d5160dc12e2426b67e1d2e35ae3f7fa06df_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:89a3cb77fdb3dcbddfe96785a9ba3fa2b6132098fce028f859663b31fcf77a34_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:89a3cb77fdb3dcbddfe96785a9ba3fa2b6132098fce028f859663b31fcf77a34_amd64"
},
"product_reference": "registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:89a3cb77fdb3dcbddfe96785a9ba3fa2b6132098fce028f859663b31fcf77a34_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:b1ba0b4cd8f515895af7b9f797f6ea5b661f7254ce019ce5115375639dcd06e9_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:b1ba0b4cd8f515895af7b9f797f6ea5b661f7254ce019ce5115375639dcd06e9_s390x"
},
"product_reference": "registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:b1ba0b4cd8f515895af7b9f797f6ea5b661f7254ce019ce5115375639dcd06e9_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/observatorium-rhel9@sha256:0827c96b922ca185b7a7321a4f504e8a5dc01aadafcfd20443060546981339a8_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:0827c96b922ca185b7a7321a4f504e8a5dc01aadafcfd20443060546981339a8_ppc64le"
},
"product_reference": "registry.redhat.io/rhacm2/observatorium-rhel9@sha256:0827c96b922ca185b7a7321a4f504e8a5dc01aadafcfd20443060546981339a8_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/observatorium-rhel9@sha256:b5b732dfc0ce3d740781eda9a72e1542c7a30b28b39d2be6e0ba470af06a9680_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:b5b732dfc0ce3d740781eda9a72e1542c7a30b28b39d2be6e0ba470af06a9680_arm64"
},
"product_reference": "registry.redhat.io/rhacm2/observatorium-rhel9@sha256:b5b732dfc0ce3d740781eda9a72e1542c7a30b28b39d2be6e0ba470af06a9680_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/observatorium-rhel9@sha256:f74081e5eb03227ccff5717a7d139ceee6c5b610625ff7b99e639a2652bf7663_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:f74081e5eb03227ccff5717a7d139ceee6c5b610625ff7b99e639a2652bf7663_s390x"
},
"product_reference": "registry.redhat.io/rhacm2/observatorium-rhel9@sha256:f74081e5eb03227ccff5717a7d139ceee6c5b610625ff7b99e639a2652bf7663_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/observatorium-rhel9@sha256:f80976ae4fc332600e1d8e1d70b42c038ea05d76ac2c5b1d7d0cbaddbe89140a_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:f80976ae4fc332600e1d8e1d70b42c038ea05d76ac2c5b1d7d0cbaddbe89140a_amd64"
},
"product_reference": "registry.redhat.io/rhacm2/observatorium-rhel9@sha256:f80976ae4fc332600e1d8e1d70b42c038ea05d76ac2c5b1d7d0cbaddbe89140a_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:4029ece83812237ce8b1d394252e9561012e8cd94af40680a90284fbea1bc32a_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:4029ece83812237ce8b1d394252e9561012e8cd94af40680a90284fbea1bc32a_ppc64le"
},
"product_reference": "registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:4029ece83812237ce8b1d394252e9561012e8cd94af40680a90284fbea1bc32a_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:63a3465a7539a8a286c846a84d63e3feca9a11758e4c0d697889b0bdeb26a25c_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:63a3465a7539a8a286c846a84d63e3feca9a11758e4c0d697889b0bdeb26a25c_amd64"
},
"product_reference": "registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:63a3465a7539a8a286c846a84d63e3feca9a11758e4c0d697889b0bdeb26a25c_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:81c227d7c7599b0d4357ccdc3b567f31b67bbd1198c9e7ddba1864c299bad11b_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:81c227d7c7599b0d4357ccdc3b567f31b67bbd1198c9e7ddba1864c299bad11b_arm64"
},
"product_reference": "registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:81c227d7c7599b0d4357ccdc3b567f31b67bbd1198c9e7ddba1864c299bad11b_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:f392bde8ce22aca058d77132cc709440442931679dbe725c52516f1cdc97b38d_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:f392bde8ce22aca058d77132cc709440442931679dbe725c52516f1cdc97b38d_s390x"
},
"product_reference": "registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:f392bde8ce22aca058d77132cc709440442931679dbe725c52516f1cdc97b38d_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/prometheus-rhel9@sha256:4825fab15300bc911e0b2b5c4ae342004bfcff95fa64af0fdb1085fadd132aa2_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:4825fab15300bc911e0b2b5c4ae342004bfcff95fa64af0fdb1085fadd132aa2_amd64"
},
"product_reference": "registry.redhat.io/rhacm2/prometheus-rhel9@sha256:4825fab15300bc911e0b2b5c4ae342004bfcff95fa64af0fdb1085fadd132aa2_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/prometheus-rhel9@sha256:68f879679911c2ca828551b900eca1c2f4e8caec7312fbba502fabc4778d1832_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:68f879679911c2ca828551b900eca1c2f4e8caec7312fbba502fabc4778d1832_s390x"
},
"product_reference": "registry.redhat.io/rhacm2/prometheus-rhel9@sha256:68f879679911c2ca828551b900eca1c2f4e8caec7312fbba502fabc4778d1832_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/prometheus-rhel9@sha256:b4188ac728c746769ef6586663dd6d7d07db984b083397d2c76fe847ef22ea60_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:b4188ac728c746769ef6586663dd6d7d07db984b083397d2c76fe847ef22ea60_arm64"
},
"product_reference": "registry.redhat.io/rhacm2/prometheus-rhel9@sha256:b4188ac728c746769ef6586663dd6d7d07db984b083397d2c76fe847ef22ea60_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/prometheus-rhel9@sha256:f2805fc1e6f37bc8acc3187ea8712d38f32151d584c10d5996c0ad7076cd638b_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:f2805fc1e6f37bc8acc3187ea8712d38f32151d584c10d5996c0ad7076cd638b_ppc64le"
},
"product_reference": "registry.redhat.io/rhacm2/prometheus-rhel9@sha256:f2805fc1e6f37bc8acc3187ea8712d38f32151d584c10d5996c0ad7076cd638b_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:1c943edcf23df14f254e4aabb93cbc1665bbc7902076b3f04bd80edd2fe324db_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:1c943edcf23df14f254e4aabb93cbc1665bbc7902076b3f04bd80edd2fe324db_amd64"
},
"product_reference": "registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:1c943edcf23df14f254e4aabb93cbc1665bbc7902076b3f04bd80edd2fe324db_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:84c5d2b24caf68c3a6a6d078bd9f66de9fb88e769f6c09c11a248693d463ac21_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:84c5d2b24caf68c3a6a6d078bd9f66de9fb88e769f6c09c11a248693d463ac21_arm64"
},
"product_reference": "registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:84c5d2b24caf68c3a6a6d078bd9f66de9fb88e769f6c09c11a248693d463ac21_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:907d6e24922d6d372bceb21ad830c254c6a9c9d6be0ac4f4edf22c236437a09d_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:907d6e24922d6d372bceb21ad830c254c6a9c9d6be0ac4f4edf22c236437a09d_ppc64le"
},
"product_reference": "registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:907d6e24922d6d372bceb21ad830c254c6a9c9d6be0ac4f4edf22c236437a09d_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:923a3ee0e3d5b7341b96826e465e6856855f2801dbaf381d139a632c77bda1c5_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:923a3ee0e3d5b7341b96826e465e6856855f2801dbaf381d139a632c77bda1c5_s390x"
},
"product_reference": "registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:923a3ee0e3d5b7341b96826e465e6856855f2801dbaf381d139a632c77bda1c5_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/search-collector-rhel9@sha256:285d2e2d103b458f0603435aedb4d779d85e48fed2267845b798f4a04a0df4c7_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:285d2e2d103b458f0603435aedb4d779d85e48fed2267845b798f4a04a0df4c7_s390x"
},
"product_reference": "registry.redhat.io/rhacm2/search-collector-rhel9@sha256:285d2e2d103b458f0603435aedb4d779d85e48fed2267845b798f4a04a0df4c7_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/search-collector-rhel9@sha256:44981f5fcbc9086470143fae6e21a5de3baad2258d9f8c81accecb2faad6b2a2_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:44981f5fcbc9086470143fae6e21a5de3baad2258d9f8c81accecb2faad6b2a2_arm64"
},
"product_reference": "registry.redhat.io/rhacm2/search-collector-rhel9@sha256:44981f5fcbc9086470143fae6e21a5de3baad2258d9f8c81accecb2faad6b2a2_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/search-collector-rhel9@sha256:5ba248d0bc8fcde70e210319bb962f4043e5e8ab8a5625c8f8f30ec96d47c6b7_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:5ba248d0bc8fcde70e210319bb962f4043e5e8ab8a5625c8f8f30ec96d47c6b7_ppc64le"
},
"product_reference": "registry.redhat.io/rhacm2/search-collector-rhel9@sha256:5ba248d0bc8fcde70e210319bb962f4043e5e8ab8a5625c8f8f30ec96d47c6b7_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/search-collector-rhel9@sha256:f681cdac28ee9ff6375fb39d7b7d12917a06043db44c16e8f84bdb9e09e7b5e7_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:f681cdac28ee9ff6375fb39d7b7d12917a06043db44c16e8f84bdb9e09e7b5e7_amd64"
},
"product_reference": "registry.redhat.io/rhacm2/search-collector-rhel9@sha256:f681cdac28ee9ff6375fb39d7b7d12917a06043db44c16e8f84bdb9e09e7b5e7_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:2057531884d897574fc0648e5d3cf21c4549738ac5f35d8095f400cdb80049cc_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:2057531884d897574fc0648e5d3cf21c4549738ac5f35d8095f400cdb80049cc_s390x"
},
"product_reference": "registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:2057531884d897574fc0648e5d3cf21c4549738ac5f35d8095f400cdb80049cc_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:8be0e50a132a2c974893f36b51f3f40b6d6e1f913ae0f9ee6319ef0d5ec455b7_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:8be0e50a132a2c974893f36b51f3f40b6d6e1f913ae0f9ee6319ef0d5ec455b7_amd64"
},
"product_reference": "registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:8be0e50a132a2c974893f36b51f3f40b6d6e1f913ae0f9ee6319ef0d5ec455b7_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:a2edc5d233d1547fa2e1d01f29d8a914930735f7098289892430ba9a17d20ab7_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:a2edc5d233d1547fa2e1d01f29d8a914930735f7098289892430ba9a17d20ab7_ppc64le"
},
"product_reference": "registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:a2edc5d233d1547fa2e1d01f29d8a914930735f7098289892430ba9a17d20ab7_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:c81c7aeb3dd05801e279a9fcc8d6c3baf00a2ccc08eab53f8acc8bd4d2d129c4_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:c81c7aeb3dd05801e279a9fcc8d6c3baf00a2ccc08eab53f8acc8bd4d2d129c4_arm64"
},
"product_reference": "registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:c81c7aeb3dd05801e279a9fcc8d6c3baf00a2ccc08eab53f8acc8bd4d2d129c4_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:25e17bf203568420587cf5907e84e4167afab84dfce549c91bea99e70290b742_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:25e17bf203568420587cf5907e84e4167afab84dfce549c91bea99e70290b742_arm64"
},
"product_reference": "registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:25e17bf203568420587cf5907e84e4167afab84dfce549c91bea99e70290b742_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:277f4e8ac5fc292b9f0f2d123f924c6b5cbc0a2eeba3c87a0e61c5ee2399aaa9_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:277f4e8ac5fc292b9f0f2d123f924c6b5cbc0a2eeba3c87a0e61c5ee2399aaa9_ppc64le"
},
"product_reference": "registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:277f4e8ac5fc292b9f0f2d123f924c6b5cbc0a2eeba3c87a0e61c5ee2399aaa9_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:76766b77ed53513cd254195b25d205ab6964522816e1e3662800e38a105abdf2_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:76766b77ed53513cd254195b25d205ab6964522816e1e3662800e38a105abdf2_amd64"
},
"product_reference": "registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:76766b77ed53513cd254195b25d205ab6964522816e1e3662800e38a105abdf2_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:c7ace45f7cb86055e2ba18e27a660f6aa6cb4eff497204294875d5dd1d63cce3_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:c7ace45f7cb86055e2ba18e27a660f6aa6cb4eff497204294875d5dd1d63cce3_s390x"
},
"product_reference": "registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:c7ace45f7cb86055e2ba18e27a660f6aa6cb4eff497204294875d5dd1d63cce3_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/thanos-rhel9@sha256:3780b1bc80ab7ebc3cfed06ce69346d589dc07b53cea65ad3ed92cc912284300_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:3780b1bc80ab7ebc3cfed06ce69346d589dc07b53cea65ad3ed92cc912284300_amd64"
},
"product_reference": "registry.redhat.io/rhacm2/thanos-rhel9@sha256:3780b1bc80ab7ebc3cfed06ce69346d589dc07b53cea65ad3ed92cc912284300_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/thanos-rhel9@sha256:681b356709778083448892513b4559f693e002bfda897a57e2d065f736a902b5_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:681b356709778083448892513b4559f693e002bfda897a57e2d065f736a902b5_ppc64le"
},
"product_reference": "registry.redhat.io/rhacm2/thanos-rhel9@sha256:681b356709778083448892513b4559f693e002bfda897a57e2d065f736a902b5_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/thanos-rhel9@sha256:d110b52ce8ea022b3d35e7c4b0ce3b646f30513cf8abb55327132565ea4a6a87_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:d110b52ce8ea022b3d35e7c4b0ce3b646f30513cf8abb55327132565ea4a6a87_arm64"
},
"product_reference": "registry.redhat.io/rhacm2/thanos-rhel9@sha256:d110b52ce8ea022b3d35e7c4b0ce3b646f30513cf8abb55327132565ea4a6a87_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/thanos-rhel9@sha256:f076ab59f3abe061e4553a61f98a144a472297dba5ed924ca887f130e9372da9_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.13",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:f076ab59f3abe061e4553a61f98a144a472297dba5ed924ca887f130e9372da9_s390x"
},
"product_reference": "registry.redhat.io/rhacm2/thanos-rhel9@sha256:f076ab59f3abe061e4553a61f98a144a472297dba5ed924ca887f130e9372da9_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.13"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-27136",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-05-22T16:00:56.609820+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:31bd91156f49687d2efffd3be971d9ee0e16abb420b8e8b958caa88b97770020_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:a6315866c67ba350665f5a92f960a5a44e427ca37ae7505e2072af4e02c42f76_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:b3ad6fa1de658f3a40c8b183ab501ebc66b359d8cc01439d4215aa52769df213_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:bfde9ebea1fcd27b6d104d5f67db62e870878f9517ccbec2f649dd2c1af4a073_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:08fed161d59299881ff7a54db859feaf8ed7bdb8238d6cf12628ccb73575665e_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:09436fe2649ca384b1bc1fd8f736fb1d71392733310e66758ed9f289e00471f9_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:3b83670e1c0e9d1f5b76bd7b75d77072bc6208646bc2201bd0bd200dbc59e34a_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:927146f966e4c5c2908d29d8ab45a8f3071dbd5ebd9cf0424460a23f814a72a7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:38a3bc59511133cae56827eba879e7c82c5a974bf1f16b6e8d95e1f79821e669_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:3fa04db82e3ce6169270db0ce29107b69d8e044e0a1ab13a2bf1050b8c26d087_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:6041a918713d4464c73560b68c294a12d33f297a980d2f9d0e0cc8c300a96f24_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:98bd72ba69bdfb3070d87b3edcbd7050579a514b72cfd67c2926541ba52dbaf7_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:938abc970731c2eeda8e2b7b73e96d4dfcbf7587330c7b7e52117a577700e426_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:a0876a25ce85d7d4616212813f012422826f152b8d71065e75cd9c3e23034d8a_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:c77077a0cca835a503a6529c89ab19c4027f949d361afdf8a5a259e1e87b0d55_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:d5bbf3fe886f27cdc27363dcb175e004487d9c8f36de4f1f8516fbeda3a95224_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:0f5d8cae3ba4ea4fcdc5fb9d08f797d576bc225b92af66f193bd4b1324cda4b9_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:2d3588825f8a714fa59b1648d0934d064165e333f322f7f31f01f07b940d42d9_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:68aa571827f5331f1d5a3bd0c60ad441a18877ba11921aff2633940236bafcd4_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:9b80c9c61d4befefa7f6a65ae8c001ce7e343a1e4f251e5ebe025625d9511730_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:9b2c24401a91903f023096d2b641aa977acff423eb6770a8e4c4a81aecfd4e62_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:9d74585acc098c13f3e9dac5ae7f5ef337fa82bd7119d7f1849c5f8a50e84907_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:a6ee95d0ed82bddef084684d11fa770bd646d9be9bc65b3bc386d7c58b33975c_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:f7b8654eb8bf675c8c26f0ad395d790f990308d3ad6683bb61b484c92073bbac_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:2a598e7fd07db27100d9a53a328ac9a0535865883bddd1373f4f1f2705068d2f_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:4f8f0b02d0969753e156226a998d442746c238a2a50ea606a49ca0cf695b8925_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:63c02348faa7d4e26e35c69aef5453613dd607a26116823b931b89fe5311e181_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:ae224866f0085d2c00ab18a28d2aed076e455731903989a49a544abf49950d1f_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:3723b1d5c74f37cba219e203fd2026a718d4821595cb505ec6626684695da65b_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:562291f52b6bce98ec8795856b808545c4fe30047b54544c7f6c2ab4678480ff_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:e6dfac9bc3e467e141a425944782f5087ed967ac4d02d8d47442e3d61ba5b882_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:f683186c2cc8be9ec09b8efdec66d6b8b1f991c7f7b9fd398dc7c3f9ab8b3079_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:2471edd63a94473c68cf37ee50de643e40003f2c5bba84063c154e4888a7f0bd_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:7cef49d68df5d8efe52061a18920e07e6c7efa3016c0cea7d1747e67851f254a_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:d912383405599032acffbad22bc154f63a87dd429ba882fd7a94cb82fe650d8e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:f3034211e16de48af540efe4ee460395dba0a4a544fa4f277a12840a25df1730_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:181d1decb2f16fcf6f5938027ed346aca29126687bbe6cdcc601c25087f70d11_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:ab5e4d27e23448d99a37b8c05442bb1254083cdc4ff325e721d97d80ec27346c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:ac172243d158e126594f28317e0cfb37dc1790c9f2121e95fe52506b5e05fc91_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:fd96b6284d270effa0f838d960ea4218b72b54c4718513eb523658f2f4972682_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:c59d9cd479c62730eda5d482fb2f4e9fbc17a90a5a2861b130aafe1f3a27a333_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:e547f672b14b6e8fc2ffd300b150aedbd3f6b6b36ddcad612f7c992a936a7c82_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:ead1263d538974c48790c65e44cd9cab07a62c2893b2eeb250174e7cf58d7f9d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:ed0457a57c7b39b79fb308176f45ffe678938b25fbb8c15de2cedbe54b916f64_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:9847a5752ec77e17861dcdac5546ee5c53679c80c3569609b21d9080ee3b7ef3_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:d3c823e61a0682ddc85e576e86234e580992886de471035630f9c89bbad6ebb7_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:ded425ed0af88a1411a06e5191aee25c4c59f1de85b041eba95c9997686cf09e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:ee63f59942f9df04e95fc4266f0d194cd62a7ca08dd5478283884d0ab6003da7_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:724377cabaa284a5197e7505a7150c89631c2f2bcc629e074c7c0be18abd8e6f_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:cbf797c9e93413540b20ebee9191375ddd8185ef22dc8c9e23cc3a4c015abaf7_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:d7609d62a801cf07ef639abcd4f193b2d68967fadebbfddf2349003d7e9eaa44_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:f61fe90362f793225591eb7e2a86d5cdc6fb35aa087e9b6a6218a42b1c1d945d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:1c4de9460688800b62bad6fb13653ef4b52bf215e4d41674291193e9b8e71b24_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:4f1e59610b2fbedc56f425b3fbd8f16c9ea6ea96025f18a404fe48f6a49bdc1e_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:ab0d28306dd6daa03af79bdc2ea650e59a50a03317987c4cdd0d1ee70f95b597_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:b700a8bb7ea6e4253afb8bcf94e5ad086349980ca0716a87817724d3da3fdce1_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4015f46d2172db26a348635e2e8cbd4bbcdbbaa56a4b12c232676a3d0f5bbee2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4169252c61ec70b91b10c750d5f9ecd53f5c3c906766bba9103afbac3c3f9edf_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4ab72a192553c21de76754f06fe38cf443e686e4b4edc2aa2ceb2b6b9d95bb6c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:579ef0925c6f56ed48f22121767189431bef6c4eaa72b2648a1b91488357a51d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:2b796bf55ecf7a14d1c87d829a2b20d998fc2943686373105b0a50f5053ef836_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:7e960b59f64547f7e9602b7c066a51ab52aba929726aec2bacdf486a9d4d28fd_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:a43e430a2ec0b86fb6ade361677be298b4e27444388a9bca35ddafbf9c77277c_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:d2394b121256985e5ca322aea77bb0bf999ba2d7a6f1627e62bbc125c475dbbd_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:1868e2ea03d063b4cd64601cb0aaf5c9ea7f55e83eba2e2d4dcf6f830efeafc7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:4bfbf0bdc882979bc94d85a4aeff8caa0ec7887aec7412e32ae1442811325d06_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:844e3d69d3c26914e02612466021592a876e6e2dd6cf77084723a70f567ba0e2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:bbe04eb8fd197f15875f498e3c18b9a7a445380efb5f696422d79df99a34a881_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:2c9f9b47c01c5e5e017c583c6a09c5c52f40ef88acf789689265cb31ef328fb8_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:7b5e883efde312c1571c4825b523ff04ab57af6a9f4162a36b80b973f9602c46_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:d896dd89fb924da246fc729041d9debc019d8a4210cfd3de8883834e429cca10_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:ede3e22d4e4de49789622149dec23beaa7e0569a3715ac2262929df543e05bc3_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:273a393b8c62fbc4edb4bf4033c47d8b52bda56fc9cafa289d9513210840815b_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:71f1b590785ce7f4577ecd687dbab9bc3c5931c568a3108eb84279c7aa892046_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:d1e1b4310eb64891c9456be7c34547bf36b0aafdeb471a49f0892d7eaf8f41f4_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:e0a7514406c7ffae080db6d4db3bbf7b77a606ea4632bf09f8301ce1d3739bb5_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:2a4c6c061d154ed9c74707a7a2e2390fde2a150f36197386c3e49c0612d345b2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:6ffcc051c955e198c6d96b59bda0ef26b5124ebbdef5357d36a84534f2c7097c_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:c9258bf58373f9c6859789c8ec272cd7d702c37e063fc2ee53c66d296e7ee3d0_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:d83c6bb4f2a91d2c4de3ffbf4aa8ceecb695f8491ba7586d55275c62cd1931e6_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:67637c5cba3eca1597885823c6e44c13db445d0ef38751eb8364b69dbf07caac_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:68fb5c2a3c8a0d5e6bbcf2c5568969f6b13e72006d4d54bc5c57cd9a032d1bf6_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:9f5fa40c88b0f5d1ae3634632240817a91f4575f8eae9c005b8e35a55cf38003_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:fcbcee9fc7e0bbf5775a33ae9b7e3d7e48a90e2aa1cb85605e05612b6e4d4e30_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:0c165bb93ce933c7f9998a615908bfcca0b4eb38e32e24a1c823e63791b7604b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:42aa392f82bdc45a3b857d1ed44e224ddfd14db1e3dcbb74dcc850ac0540e964_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:9dcd0c0ecf1523bf05bd296edbecd85841b2753dee7a5c9df32437f9a8e31471_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:c5505c462e6b2c04a6e14bc1e22dfc42dc8adea8f6eaf0615cd58b1973b7d62e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:1a93df314c31f10da7b1345fab07b15b846e28865764178e34124f84dc967152_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:34343f81973c3fbdd8630c32d0fad597745ea10f960ea64236408e58e0f10e14_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:7b3635784ebfb6343a73c9fa6de7bea57b3aacce1c49a0f7f250a471f7b897e3_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:f0a7fade2853193429bab16922b2e3bbe426e14632423d6550ff7dfb66d42827_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:94950d339fa382d6911f12fc23dcaf2cdb2854c4cab654f6058f5bf0df1bb371_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:bcfbd2284cbeeba5a835aaf5a5590ddd8156bd881ca24fd0fe1465fade1f84c2_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:bd739ced163053224e5b0ea2f3cd577481c6b6c1162cc0fbc186f1716b4a1fbd_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:d40496f114898985cde3860b9664c34d8c32de85e4d3d846df91a6ba27a2e99c_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:3f7cbe7605595d712e14d9a17717fafc6c6e334f2ad3e821c34947ec78411046_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:96775900ea90e57487da6afe59d058b33cb977a0247a1bbeb1bd07bed2816398_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:caa6b121538e074312314d9888d9b423bd225aefa4f25eb145893b9fc548c0ad_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:e59c90cfe8160b28f9d2aa9e59b1d04d742df44d2195210ebc1946ee3cb78b6f_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:10c95e5c55ccc1a04e8d2ac28bd1afd3b9bb9a7e9e2a5e3e8efb301421539980_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:60a310d4464b4817845703d14e95729321b883fbfc79fbf2dd8d514bb3c675e9_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:70e6c14d72f14d25a90f44043932fbd3f824b30e8ad4b36307100726b24d9c06_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:784129cf69b3bf77a907fe909fd73a2a4d0fbd947fe0037e47aa1d62c6ffcf0b_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:26e58654cdd092cb812207cb4473f5f5988ebd708d95c34152c2e8c124f7297d_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:40e5d9634aa7469df8247758961d486cfac3e7d7f0b59184e11ed5571b46bf40_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:5b59faed336de07965755c893cb9d0ffc52ec90f61cc8c54487f6c0cac53322e_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:b59aea0c9e859025988b0f0c9b6e7748c4acf6d0b4cee35f3fabb7b84feb598b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:2368703206d833e4cb73b7e8750efb9997633a6f9accbf032426bcfcae4c00d9_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:80b543b207e724e880ff932c514fe9c6a3925bfede1c31863531e4e69d050d40_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:82405a9a5715db5442dfa3d3f594888bd7b2f9c778d68357a7d8884f5ea46915_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:8fd2bda7b8d94ededf7973f76a159dd61105776a05d961ac9cfd9bee0a988213_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:4def845360282dad99181b96bcd834b4863eab39e246fda2476234c561c652ec_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:b67aec868b6366cf04f3980b15588e1a0af5c88b2248958bc3884261ad390ca0_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:ceacf3491ebec6f5613011fe8d36b66d00f8b3697832615a4d7024e23125085e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:d9f6a520b818dcccbedb94720b5979ef1cdec2e02491c76e3decb3ee18f2085d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:0eea35a3af36d08db945a70c387cc38eb326f75b4ed322f09d8c91863cfe5d02_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:22c48db227cd6f2ecec746674e31ac7f5a983a418679fc91678a0aa0ebb49496_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:8e8d249c39d562f819d347f12610dda7f5c01215c41101bfd5dca008e04edf6e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:f8adb8dd40a204bacb51cd423803097a514ec8e8e9f52209e02ecf14cad622bb_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:1f7ed606f69a74943aedb0a956e5a71019f8a1ab53cd3f8166be0f55a69809b9_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:4841076eb82f1f1748345556ff6c4e02a17f1f63c661e375eaba720291cbaf6a_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:a79ac7dcae109aa526e2a218327dd8c5dba2b924fc27447a07199b3b2f2f67b3_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:dee022821852f2d5ebdbbd9f09c9b97997a905061dadb3f78433291d462d49a7_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:1a746b16f362a83f399255d925b322b3440b3d89ae4d64ab7962db3d82ee91a1_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:417a31bec11c3ffb70f40fa955069d5160dc12e2426b67e1d2e35ae3f7fa06df_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:89a3cb77fdb3dcbddfe96785a9ba3fa2b6132098fce028f859663b31fcf77a34_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:b1ba0b4cd8f515895af7b9f797f6ea5b661f7254ce019ce5115375639dcd06e9_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:0827c96b922ca185b7a7321a4f504e8a5dc01aadafcfd20443060546981339a8_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:b5b732dfc0ce3d740781eda9a72e1542c7a30b28b39d2be6e0ba470af06a9680_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:f74081e5eb03227ccff5717a7d139ceee6c5b610625ff7b99e639a2652bf7663_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:f80976ae4fc332600e1d8e1d70b42c038ea05d76ac2c5b1d7d0cbaddbe89140a_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:4029ece83812237ce8b1d394252e9561012e8cd94af40680a90284fbea1bc32a_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:63a3465a7539a8a286c846a84d63e3feca9a11758e4c0d697889b0bdeb26a25c_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:81c227d7c7599b0d4357ccdc3b567f31b67bbd1198c9e7ddba1864c299bad11b_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:f392bde8ce22aca058d77132cc709440442931679dbe725c52516f1cdc97b38d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:4825fab15300bc911e0b2b5c4ae342004bfcff95fa64af0fdb1085fadd132aa2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:68f879679911c2ca828551b900eca1c2f4e8caec7312fbba502fabc4778d1832_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:b4188ac728c746769ef6586663dd6d7d07db984b083397d2c76fe847ef22ea60_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:f2805fc1e6f37bc8acc3187ea8712d38f32151d584c10d5996c0ad7076cd638b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:1c943edcf23df14f254e4aabb93cbc1665bbc7902076b3f04bd80edd2fe324db_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:84c5d2b24caf68c3a6a6d078bd9f66de9fb88e769f6c09c11a248693d463ac21_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:907d6e24922d6d372bceb21ad830c254c6a9c9d6be0ac4f4edf22c236437a09d_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:923a3ee0e3d5b7341b96826e465e6856855f2801dbaf381d139a632c77bda1c5_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:285d2e2d103b458f0603435aedb4d779d85e48fed2267845b798f4a04a0df4c7_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:44981f5fcbc9086470143fae6e21a5de3baad2258d9f8c81accecb2faad6b2a2_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:5ba248d0bc8fcde70e210319bb962f4043e5e8ab8a5625c8f8f30ec96d47c6b7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:f681cdac28ee9ff6375fb39d7b7d12917a06043db44c16e8f84bdb9e09e7b5e7_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:2057531884d897574fc0648e5d3cf21c4549738ac5f35d8095f400cdb80049cc_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:8be0e50a132a2c974893f36b51f3f40b6d6e1f913ae0f9ee6319ef0d5ec455b7_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:a2edc5d233d1547fa2e1d01f29d8a914930735f7098289892430ba9a17d20ab7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:c81c7aeb3dd05801e279a9fcc8d6c3baf00a2ccc08eab53f8acc8bd4d2d129c4_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:25e17bf203568420587cf5907e84e4167afab84dfce549c91bea99e70290b742_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:277f4e8ac5fc292b9f0f2d123f924c6b5cbc0a2eeba3c87a0e61c5ee2399aaa9_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:76766b77ed53513cd254195b25d205ab6964522816e1e3662800e38a105abdf2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:c7ace45f7cb86055e2ba18e27a660f6aa6cb4eff497204294875d5dd1d63cce3_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:3780b1bc80ab7ebc3cfed06ce69346d589dc07b53cea65ad3ed92cc912284300_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:681b356709778083448892513b4559f693e002bfda897a57e2d065f736a902b5_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:d110b52ce8ea022b3d35e7c4b0ce3b646f30513cf8abb55327132565ea4a6a87_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:f076ab59f3abe061e4553a61f98a144a472297dba5ed924ca887f130e9372da9_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480757"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/html. When arbitrary HTML is parsed and then rendered, it can result in an unexpected HTML tree. This allows an attacker to bypass HTML sanitization mechanisms, leading to Cross-Site Scripting (XSS) attacks in applications. Such attacks can result in information disclosure or arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in `golang.org/x/net/html` is rated as Important. It allows for Cross-Site Scripting (XSS) attacks by enabling an attacker to bypass HTML sanitization mechanisms when arbitrary HTML is parsed and rendered. This can lead to information disclosure or arbitrary code execution in affected applications. Exploitation typically requires user interaction, where a user processes specially crafted malicious HTML content.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:0a90a13f006ef0b271079b728ef6d54081f36ae19b6d0e9ab4dc24ea52a30fad_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:3a53629645832974a883002e53198df7c28e59dd6d1df99bf321b52d0ef84b61_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:879315f438ca43abb607d6c97f8fbd4ca2d38209b142e2d97cc0598740273252_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:c6c4d01f5fcee6cad3fc870cace92f45000624760e6e93654bb5e814afeed7bb_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:50f7647620c78fd6b445379c8762f5e978113fe3552906376a24459263f27459_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:53e641f48ddc05c63da2e6bc24e9e4636a10de2c3599d8f5f78622bdebca07ca_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:57114b7a386c406715e342637558fab57afeef2e193517f99173a441f39401d5_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:dcdcaa90f292f2d7ad3f10acbedfab9f7f22f3432c3156055f34760d9bf9429c_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:3e6519c0c789b946eb1b811867c41c4f204440bad5734760c0aca4e3fc602e5a_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:95684cfaf4d5d91bc9fe8cfbf64a6f113e944e3f0c102d27851be5232eca0dbb_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:9cb20990af88287dd8a27de4e4ef12eb244577a1844482d26107359c6efe8efa_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:a69ebb0c7e817d44cfabd86ad13ef4cc94a8bf5b6e8a607d17b197603d64a224_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:03adc6277e2bf409391941c6f4508154abc38a0c043139978754f6d4fd32c5a8_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:7e100af30ed11325cb2cbee02af09306e53df5db5847f2a4b733cd307e3cd623_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:91b474b4808b18c279c9f8eb3be8e6d1e1e47cf2b5f9553acd901c74b20bddbc_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:d56f884a9700a4f193d6f3db1895bd54745ec77e02ead3d43bd6e4fe04a2969e_s390x"
],
"known_not_affected": [
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:31bd91156f49687d2efffd3be971d9ee0e16abb420b8e8b958caa88b97770020_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:a6315866c67ba350665f5a92f960a5a44e427ca37ae7505e2072af4e02c42f76_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:b3ad6fa1de658f3a40c8b183ab501ebc66b359d8cc01439d4215aa52769df213_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:bfde9ebea1fcd27b6d104d5f67db62e870878f9517ccbec2f649dd2c1af4a073_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:08fed161d59299881ff7a54db859feaf8ed7bdb8238d6cf12628ccb73575665e_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:09436fe2649ca384b1bc1fd8f736fb1d71392733310e66758ed9f289e00471f9_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:3b83670e1c0e9d1f5b76bd7b75d77072bc6208646bc2201bd0bd200dbc59e34a_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:927146f966e4c5c2908d29d8ab45a8f3071dbd5ebd9cf0424460a23f814a72a7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:38a3bc59511133cae56827eba879e7c82c5a974bf1f16b6e8d95e1f79821e669_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:3fa04db82e3ce6169270db0ce29107b69d8e044e0a1ab13a2bf1050b8c26d087_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:6041a918713d4464c73560b68c294a12d33f297a980d2f9d0e0cc8c300a96f24_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:98bd72ba69bdfb3070d87b3edcbd7050579a514b72cfd67c2926541ba52dbaf7_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:938abc970731c2eeda8e2b7b73e96d4dfcbf7587330c7b7e52117a577700e426_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:a0876a25ce85d7d4616212813f012422826f152b8d71065e75cd9c3e23034d8a_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:c77077a0cca835a503a6529c89ab19c4027f949d361afdf8a5a259e1e87b0d55_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:d5bbf3fe886f27cdc27363dcb175e004487d9c8f36de4f1f8516fbeda3a95224_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:0f5d8cae3ba4ea4fcdc5fb9d08f797d576bc225b92af66f193bd4b1324cda4b9_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:2d3588825f8a714fa59b1648d0934d064165e333f322f7f31f01f07b940d42d9_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:68aa571827f5331f1d5a3bd0c60ad441a18877ba11921aff2633940236bafcd4_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:9b80c9c61d4befefa7f6a65ae8c001ce7e343a1e4f251e5ebe025625d9511730_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:9b2c24401a91903f023096d2b641aa977acff423eb6770a8e4c4a81aecfd4e62_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:9d74585acc098c13f3e9dac5ae7f5ef337fa82bd7119d7f1849c5f8a50e84907_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:a6ee95d0ed82bddef084684d11fa770bd646d9be9bc65b3bc386d7c58b33975c_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:f7b8654eb8bf675c8c26f0ad395d790f990308d3ad6683bb61b484c92073bbac_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:2a598e7fd07db27100d9a53a328ac9a0535865883bddd1373f4f1f2705068d2f_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:4f8f0b02d0969753e156226a998d442746c238a2a50ea606a49ca0cf695b8925_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:63c02348faa7d4e26e35c69aef5453613dd607a26116823b931b89fe5311e181_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:ae224866f0085d2c00ab18a28d2aed076e455731903989a49a544abf49950d1f_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:3723b1d5c74f37cba219e203fd2026a718d4821595cb505ec6626684695da65b_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:562291f52b6bce98ec8795856b808545c4fe30047b54544c7f6c2ab4678480ff_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:e6dfac9bc3e467e141a425944782f5087ed967ac4d02d8d47442e3d61ba5b882_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:f683186c2cc8be9ec09b8efdec66d6b8b1f991c7f7b9fd398dc7c3f9ab8b3079_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:2471edd63a94473c68cf37ee50de643e40003f2c5bba84063c154e4888a7f0bd_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:7cef49d68df5d8efe52061a18920e07e6c7efa3016c0cea7d1747e67851f254a_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:d912383405599032acffbad22bc154f63a87dd429ba882fd7a94cb82fe650d8e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:f3034211e16de48af540efe4ee460395dba0a4a544fa4f277a12840a25df1730_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:181d1decb2f16fcf6f5938027ed346aca29126687bbe6cdcc601c25087f70d11_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:ab5e4d27e23448d99a37b8c05442bb1254083cdc4ff325e721d97d80ec27346c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:ac172243d158e126594f28317e0cfb37dc1790c9f2121e95fe52506b5e05fc91_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:fd96b6284d270effa0f838d960ea4218b72b54c4718513eb523658f2f4972682_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:c59d9cd479c62730eda5d482fb2f4e9fbc17a90a5a2861b130aafe1f3a27a333_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:e547f672b14b6e8fc2ffd300b150aedbd3f6b6b36ddcad612f7c992a936a7c82_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:ead1263d538974c48790c65e44cd9cab07a62c2893b2eeb250174e7cf58d7f9d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:ed0457a57c7b39b79fb308176f45ffe678938b25fbb8c15de2cedbe54b916f64_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:9847a5752ec77e17861dcdac5546ee5c53679c80c3569609b21d9080ee3b7ef3_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:d3c823e61a0682ddc85e576e86234e580992886de471035630f9c89bbad6ebb7_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:ded425ed0af88a1411a06e5191aee25c4c59f1de85b041eba95c9997686cf09e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:ee63f59942f9df04e95fc4266f0d194cd62a7ca08dd5478283884d0ab6003da7_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:724377cabaa284a5197e7505a7150c89631c2f2bcc629e074c7c0be18abd8e6f_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:cbf797c9e93413540b20ebee9191375ddd8185ef22dc8c9e23cc3a4c015abaf7_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:d7609d62a801cf07ef639abcd4f193b2d68967fadebbfddf2349003d7e9eaa44_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:f61fe90362f793225591eb7e2a86d5cdc6fb35aa087e9b6a6218a42b1c1d945d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:1c4de9460688800b62bad6fb13653ef4b52bf215e4d41674291193e9b8e71b24_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:4f1e59610b2fbedc56f425b3fbd8f16c9ea6ea96025f18a404fe48f6a49bdc1e_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:ab0d28306dd6daa03af79bdc2ea650e59a50a03317987c4cdd0d1ee70f95b597_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:b700a8bb7ea6e4253afb8bcf94e5ad086349980ca0716a87817724d3da3fdce1_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4015f46d2172db26a348635e2e8cbd4bbcdbbaa56a4b12c232676a3d0f5bbee2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4169252c61ec70b91b10c750d5f9ecd53f5c3c906766bba9103afbac3c3f9edf_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4ab72a192553c21de76754f06fe38cf443e686e4b4edc2aa2ceb2b6b9d95bb6c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:579ef0925c6f56ed48f22121767189431bef6c4eaa72b2648a1b91488357a51d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:2b796bf55ecf7a14d1c87d829a2b20d998fc2943686373105b0a50f5053ef836_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:7e960b59f64547f7e9602b7c066a51ab52aba929726aec2bacdf486a9d4d28fd_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:a43e430a2ec0b86fb6ade361677be298b4e27444388a9bca35ddafbf9c77277c_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:d2394b121256985e5ca322aea77bb0bf999ba2d7a6f1627e62bbc125c475dbbd_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:1868e2ea03d063b4cd64601cb0aaf5c9ea7f55e83eba2e2d4dcf6f830efeafc7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:4bfbf0bdc882979bc94d85a4aeff8caa0ec7887aec7412e32ae1442811325d06_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:844e3d69d3c26914e02612466021592a876e6e2dd6cf77084723a70f567ba0e2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:bbe04eb8fd197f15875f498e3c18b9a7a445380efb5f696422d79df99a34a881_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:2c9f9b47c01c5e5e017c583c6a09c5c52f40ef88acf789689265cb31ef328fb8_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:7b5e883efde312c1571c4825b523ff04ab57af6a9f4162a36b80b973f9602c46_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:d896dd89fb924da246fc729041d9debc019d8a4210cfd3de8883834e429cca10_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:ede3e22d4e4de49789622149dec23beaa7e0569a3715ac2262929df543e05bc3_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:273a393b8c62fbc4edb4bf4033c47d8b52bda56fc9cafa289d9513210840815b_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:71f1b590785ce7f4577ecd687dbab9bc3c5931c568a3108eb84279c7aa892046_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:d1e1b4310eb64891c9456be7c34547bf36b0aafdeb471a49f0892d7eaf8f41f4_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:e0a7514406c7ffae080db6d4db3bbf7b77a606ea4632bf09f8301ce1d3739bb5_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:2a4c6c061d154ed9c74707a7a2e2390fde2a150f36197386c3e49c0612d345b2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:6ffcc051c955e198c6d96b59bda0ef26b5124ebbdef5357d36a84534f2c7097c_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:c9258bf58373f9c6859789c8ec272cd7d702c37e063fc2ee53c66d296e7ee3d0_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:d83c6bb4f2a91d2c4de3ffbf4aa8ceecb695f8491ba7586d55275c62cd1931e6_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:67637c5cba3eca1597885823c6e44c13db445d0ef38751eb8364b69dbf07caac_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:68fb5c2a3c8a0d5e6bbcf2c5568969f6b13e72006d4d54bc5c57cd9a032d1bf6_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:9f5fa40c88b0f5d1ae3634632240817a91f4575f8eae9c005b8e35a55cf38003_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:fcbcee9fc7e0bbf5775a33ae9b7e3d7e48a90e2aa1cb85605e05612b6e4d4e30_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:0c165bb93ce933c7f9998a615908bfcca0b4eb38e32e24a1c823e63791b7604b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:42aa392f82bdc45a3b857d1ed44e224ddfd14db1e3dcbb74dcc850ac0540e964_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:9dcd0c0ecf1523bf05bd296edbecd85841b2753dee7a5c9df32437f9a8e31471_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:c5505c462e6b2c04a6e14bc1e22dfc42dc8adea8f6eaf0615cd58b1973b7d62e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:1a93df314c31f10da7b1345fab07b15b846e28865764178e34124f84dc967152_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:34343f81973c3fbdd8630c32d0fad597745ea10f960ea64236408e58e0f10e14_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:7b3635784ebfb6343a73c9fa6de7bea57b3aacce1c49a0f7f250a471f7b897e3_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:f0a7fade2853193429bab16922b2e3bbe426e14632423d6550ff7dfb66d42827_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:94950d339fa382d6911f12fc23dcaf2cdb2854c4cab654f6058f5bf0df1bb371_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:bcfbd2284cbeeba5a835aaf5a5590ddd8156bd881ca24fd0fe1465fade1f84c2_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:bd739ced163053224e5b0ea2f3cd577481c6b6c1162cc0fbc186f1716b4a1fbd_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:d40496f114898985cde3860b9664c34d8c32de85e4d3d846df91a6ba27a2e99c_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:3f7cbe7605595d712e14d9a17717fafc6c6e334f2ad3e821c34947ec78411046_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:96775900ea90e57487da6afe59d058b33cb977a0247a1bbeb1bd07bed2816398_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:caa6b121538e074312314d9888d9b423bd225aefa4f25eb145893b9fc548c0ad_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:e59c90cfe8160b28f9d2aa9e59b1d04d742df44d2195210ebc1946ee3cb78b6f_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:10c95e5c55ccc1a04e8d2ac28bd1afd3b9bb9a7e9e2a5e3e8efb301421539980_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:60a310d4464b4817845703d14e95729321b883fbfc79fbf2dd8d514bb3c675e9_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:70e6c14d72f14d25a90f44043932fbd3f824b30e8ad4b36307100726b24d9c06_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:784129cf69b3bf77a907fe909fd73a2a4d0fbd947fe0037e47aa1d62c6ffcf0b_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:26e58654cdd092cb812207cb4473f5f5988ebd708d95c34152c2e8c124f7297d_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:40e5d9634aa7469df8247758961d486cfac3e7d7f0b59184e11ed5571b46bf40_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:5b59faed336de07965755c893cb9d0ffc52ec90f61cc8c54487f6c0cac53322e_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:b59aea0c9e859025988b0f0c9b6e7748c4acf6d0b4cee35f3fabb7b84feb598b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:2368703206d833e4cb73b7e8750efb9997633a6f9accbf032426bcfcae4c00d9_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:80b543b207e724e880ff932c514fe9c6a3925bfede1c31863531e4e69d050d40_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:82405a9a5715db5442dfa3d3f594888bd7b2f9c778d68357a7d8884f5ea46915_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:8fd2bda7b8d94ededf7973f76a159dd61105776a05d961ac9cfd9bee0a988213_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:4def845360282dad99181b96bcd834b4863eab39e246fda2476234c561c652ec_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:b67aec868b6366cf04f3980b15588e1a0af5c88b2248958bc3884261ad390ca0_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:ceacf3491ebec6f5613011fe8d36b66d00f8b3697832615a4d7024e23125085e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:d9f6a520b818dcccbedb94720b5979ef1cdec2e02491c76e3decb3ee18f2085d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:0eea35a3af36d08db945a70c387cc38eb326f75b4ed322f09d8c91863cfe5d02_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:22c48db227cd6f2ecec746674e31ac7f5a983a418679fc91678a0aa0ebb49496_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:8e8d249c39d562f819d347f12610dda7f5c01215c41101bfd5dca008e04edf6e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:f8adb8dd40a204bacb51cd423803097a514ec8e8e9f52209e02ecf14cad622bb_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:1f7ed606f69a74943aedb0a956e5a71019f8a1ab53cd3f8166be0f55a69809b9_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:4841076eb82f1f1748345556ff6c4e02a17f1f63c661e375eaba720291cbaf6a_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:a79ac7dcae109aa526e2a218327dd8c5dba2b924fc27447a07199b3b2f2f67b3_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:dee022821852f2d5ebdbbd9f09c9b97997a905061dadb3f78433291d462d49a7_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:1a746b16f362a83f399255d925b322b3440b3d89ae4d64ab7962db3d82ee91a1_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:417a31bec11c3ffb70f40fa955069d5160dc12e2426b67e1d2e35ae3f7fa06df_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:89a3cb77fdb3dcbddfe96785a9ba3fa2b6132098fce028f859663b31fcf77a34_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:b1ba0b4cd8f515895af7b9f797f6ea5b661f7254ce019ce5115375639dcd06e9_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:0827c96b922ca185b7a7321a4f504e8a5dc01aadafcfd20443060546981339a8_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:b5b732dfc0ce3d740781eda9a72e1542c7a30b28b39d2be6e0ba470af06a9680_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:f74081e5eb03227ccff5717a7d139ceee6c5b610625ff7b99e639a2652bf7663_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:f80976ae4fc332600e1d8e1d70b42c038ea05d76ac2c5b1d7d0cbaddbe89140a_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:4029ece83812237ce8b1d394252e9561012e8cd94af40680a90284fbea1bc32a_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:63a3465a7539a8a286c846a84d63e3feca9a11758e4c0d697889b0bdeb26a25c_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:81c227d7c7599b0d4357ccdc3b567f31b67bbd1198c9e7ddba1864c299bad11b_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:f392bde8ce22aca058d77132cc709440442931679dbe725c52516f1cdc97b38d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:4825fab15300bc911e0b2b5c4ae342004bfcff95fa64af0fdb1085fadd132aa2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:68f879679911c2ca828551b900eca1c2f4e8caec7312fbba502fabc4778d1832_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:b4188ac728c746769ef6586663dd6d7d07db984b083397d2c76fe847ef22ea60_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:f2805fc1e6f37bc8acc3187ea8712d38f32151d584c10d5996c0ad7076cd638b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:1c943edcf23df14f254e4aabb93cbc1665bbc7902076b3f04bd80edd2fe324db_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:84c5d2b24caf68c3a6a6d078bd9f66de9fb88e769f6c09c11a248693d463ac21_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:907d6e24922d6d372bceb21ad830c254c6a9c9d6be0ac4f4edf22c236437a09d_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:923a3ee0e3d5b7341b96826e465e6856855f2801dbaf381d139a632c77bda1c5_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:285d2e2d103b458f0603435aedb4d779d85e48fed2267845b798f4a04a0df4c7_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:44981f5fcbc9086470143fae6e21a5de3baad2258d9f8c81accecb2faad6b2a2_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:5ba248d0bc8fcde70e210319bb962f4043e5e8ab8a5625c8f8f30ec96d47c6b7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:f681cdac28ee9ff6375fb39d7b7d12917a06043db44c16e8f84bdb9e09e7b5e7_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:2057531884d897574fc0648e5d3cf21c4549738ac5f35d8095f400cdb80049cc_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:8be0e50a132a2c974893f36b51f3f40b6d6e1f913ae0f9ee6319ef0d5ec455b7_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:a2edc5d233d1547fa2e1d01f29d8a914930735f7098289892430ba9a17d20ab7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:c81c7aeb3dd05801e279a9fcc8d6c3baf00a2ccc08eab53f8acc8bd4d2d129c4_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:25e17bf203568420587cf5907e84e4167afab84dfce549c91bea99e70290b742_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:277f4e8ac5fc292b9f0f2d123f924c6b5cbc0a2eeba3c87a0e61c5ee2399aaa9_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:76766b77ed53513cd254195b25d205ab6964522816e1e3662800e38a105abdf2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:c7ace45f7cb86055e2ba18e27a660f6aa6cb4eff497204294875d5dd1d63cce3_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:3780b1bc80ab7ebc3cfed06ce69346d589dc07b53cea65ad3ed92cc912284300_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:681b356709778083448892513b4559f693e002bfda897a57e2d065f736a902b5_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:d110b52ce8ea022b3d35e7c4b0ce3b646f30513cf8abb55327132565ea4a6a87_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:f076ab59f3abe061e4553a61f98a144a472297dba5ed924ca887f130e9372da9_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27136"
},
{
"category": "external",
"summary": "RHBZ#2480757",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480757"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27136",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27136"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27136",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27136"
},
{
"category": "external",
"summary": "https://go.dev/cl/781685",
"url": "https://go.dev/cl/781685"
},
{
"category": "external",
"summary": "https://go.dev/issue/79575",
"url": "https://go.dev/issue/79575"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5030",
"url": "https://pkg.go.dev/vuln/GO-2026-5030"
}
],
"release_date": "2026-05-22T15:01:22.111000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T07:47:11+00:00",
"details": "Before you apply this update, make sure all previously released errata\nthat are relevant to your system are applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:0a90a13f006ef0b271079b728ef6d54081f36ae19b6d0e9ab4dc24ea52a30fad_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:3a53629645832974a883002e53198df7c28e59dd6d1df99bf321b52d0ef84b61_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:879315f438ca43abb607d6c97f8fbd4ca2d38209b142e2d97cc0598740273252_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:c6c4d01f5fcee6cad3fc870cace92f45000624760e6e93654bb5e814afeed7bb_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:50f7647620c78fd6b445379c8762f5e978113fe3552906376a24459263f27459_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:53e641f48ddc05c63da2e6bc24e9e4636a10de2c3599d8f5f78622bdebca07ca_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:57114b7a386c406715e342637558fab57afeef2e193517f99173a441f39401d5_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:dcdcaa90f292f2d7ad3f10acbedfab9f7f22f3432c3156055f34760d9bf9429c_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:3e6519c0c789b946eb1b811867c41c4f204440bad5734760c0aca4e3fc602e5a_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:95684cfaf4d5d91bc9fe8cfbf64a6f113e944e3f0c102d27851be5232eca0dbb_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:9cb20990af88287dd8a27de4e4ef12eb244577a1844482d26107359c6efe8efa_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:a69ebb0c7e817d44cfabd86ad13ef4cc94a8bf5b6e8a607d17b197603d64a224_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:03adc6277e2bf409391941c6f4508154abc38a0c043139978754f6d4fd32c5a8_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:7e100af30ed11325cb2cbee02af09306e53df5db5847f2a4b733cd307e3cd623_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:91b474b4808b18c279c9f8eb3be8e6d1e1e47cf2b5f9553acd901c74b20bddbc_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:d56f884a9700a4f193d6f3db1895bd54745ec77e02ead3d43bd6e4fe04a2969e_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:47737"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:31bd91156f49687d2efffd3be971d9ee0e16abb420b8e8b958caa88b97770020_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:a6315866c67ba350665f5a92f960a5a44e427ca37ae7505e2072af4e02c42f76_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:b3ad6fa1de658f3a40c8b183ab501ebc66b359d8cc01439d4215aa52769df213_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:bfde9ebea1fcd27b6d104d5f67db62e870878f9517ccbec2f649dd2c1af4a073_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:08fed161d59299881ff7a54db859feaf8ed7bdb8238d6cf12628ccb73575665e_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:09436fe2649ca384b1bc1fd8f736fb1d71392733310e66758ed9f289e00471f9_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:3b83670e1c0e9d1f5b76bd7b75d77072bc6208646bc2201bd0bd200dbc59e34a_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:927146f966e4c5c2908d29d8ab45a8f3071dbd5ebd9cf0424460a23f814a72a7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:38a3bc59511133cae56827eba879e7c82c5a974bf1f16b6e8d95e1f79821e669_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:3fa04db82e3ce6169270db0ce29107b69d8e044e0a1ab13a2bf1050b8c26d087_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:6041a918713d4464c73560b68c294a12d33f297a980d2f9d0e0cc8c300a96f24_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:98bd72ba69bdfb3070d87b3edcbd7050579a514b72cfd67c2926541ba52dbaf7_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:938abc970731c2eeda8e2b7b73e96d4dfcbf7587330c7b7e52117a577700e426_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:a0876a25ce85d7d4616212813f012422826f152b8d71065e75cd9c3e23034d8a_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:c77077a0cca835a503a6529c89ab19c4027f949d361afdf8a5a259e1e87b0d55_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:d5bbf3fe886f27cdc27363dcb175e004487d9c8f36de4f1f8516fbeda3a95224_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:0f5d8cae3ba4ea4fcdc5fb9d08f797d576bc225b92af66f193bd4b1324cda4b9_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:2d3588825f8a714fa59b1648d0934d064165e333f322f7f31f01f07b940d42d9_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:68aa571827f5331f1d5a3bd0c60ad441a18877ba11921aff2633940236bafcd4_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:9b80c9c61d4befefa7f6a65ae8c001ce7e343a1e4f251e5ebe025625d9511730_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:9b2c24401a91903f023096d2b641aa977acff423eb6770a8e4c4a81aecfd4e62_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:9d74585acc098c13f3e9dac5ae7f5ef337fa82bd7119d7f1849c5f8a50e84907_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:a6ee95d0ed82bddef084684d11fa770bd646d9be9bc65b3bc386d7c58b33975c_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:f7b8654eb8bf675c8c26f0ad395d790f990308d3ad6683bb61b484c92073bbac_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:2a598e7fd07db27100d9a53a328ac9a0535865883bddd1373f4f1f2705068d2f_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:4f8f0b02d0969753e156226a998d442746c238a2a50ea606a49ca0cf695b8925_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:63c02348faa7d4e26e35c69aef5453613dd607a26116823b931b89fe5311e181_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:ae224866f0085d2c00ab18a28d2aed076e455731903989a49a544abf49950d1f_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:0a90a13f006ef0b271079b728ef6d54081f36ae19b6d0e9ab4dc24ea52a30fad_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:3a53629645832974a883002e53198df7c28e59dd6d1df99bf321b52d0ef84b61_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:879315f438ca43abb607d6c97f8fbd4ca2d38209b142e2d97cc0598740273252_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:c6c4d01f5fcee6cad3fc870cace92f45000624760e6e93654bb5e814afeed7bb_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:50f7647620c78fd6b445379c8762f5e978113fe3552906376a24459263f27459_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:53e641f48ddc05c63da2e6bc24e9e4636a10de2c3599d8f5f78622bdebca07ca_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:57114b7a386c406715e342637558fab57afeef2e193517f99173a441f39401d5_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:dcdcaa90f292f2d7ad3f10acbedfab9f7f22f3432c3156055f34760d9bf9429c_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:3723b1d5c74f37cba219e203fd2026a718d4821595cb505ec6626684695da65b_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:562291f52b6bce98ec8795856b808545c4fe30047b54544c7f6c2ab4678480ff_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:e6dfac9bc3e467e141a425944782f5087ed967ac4d02d8d47442e3d61ba5b882_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:f683186c2cc8be9ec09b8efdec66d6b8b1f991c7f7b9fd398dc7c3f9ab8b3079_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:2471edd63a94473c68cf37ee50de643e40003f2c5bba84063c154e4888a7f0bd_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:7cef49d68df5d8efe52061a18920e07e6c7efa3016c0cea7d1747e67851f254a_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:d912383405599032acffbad22bc154f63a87dd429ba882fd7a94cb82fe650d8e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:f3034211e16de48af540efe4ee460395dba0a4a544fa4f277a12840a25df1730_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:181d1decb2f16fcf6f5938027ed346aca29126687bbe6cdcc601c25087f70d11_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:ab5e4d27e23448d99a37b8c05442bb1254083cdc4ff325e721d97d80ec27346c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:ac172243d158e126594f28317e0cfb37dc1790c9f2121e95fe52506b5e05fc91_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:fd96b6284d270effa0f838d960ea4218b72b54c4718513eb523658f2f4972682_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:c59d9cd479c62730eda5d482fb2f4e9fbc17a90a5a2861b130aafe1f3a27a333_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:e547f672b14b6e8fc2ffd300b150aedbd3f6b6b36ddcad612f7c992a936a7c82_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:ead1263d538974c48790c65e44cd9cab07a62c2893b2eeb250174e7cf58d7f9d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:ed0457a57c7b39b79fb308176f45ffe678938b25fbb8c15de2cedbe54b916f64_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:9847a5752ec77e17861dcdac5546ee5c53679c80c3569609b21d9080ee3b7ef3_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:d3c823e61a0682ddc85e576e86234e580992886de471035630f9c89bbad6ebb7_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:ded425ed0af88a1411a06e5191aee25c4c59f1de85b041eba95c9997686cf09e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:ee63f59942f9df04e95fc4266f0d194cd62a7ca08dd5478283884d0ab6003da7_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:724377cabaa284a5197e7505a7150c89631c2f2bcc629e074c7c0be18abd8e6f_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:cbf797c9e93413540b20ebee9191375ddd8185ef22dc8c9e23cc3a4c015abaf7_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:d7609d62a801cf07ef639abcd4f193b2d68967fadebbfddf2349003d7e9eaa44_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:f61fe90362f793225591eb7e2a86d5cdc6fb35aa087e9b6a6218a42b1c1d945d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:1c4de9460688800b62bad6fb13653ef4b52bf215e4d41674291193e9b8e71b24_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:4f1e59610b2fbedc56f425b3fbd8f16c9ea6ea96025f18a404fe48f6a49bdc1e_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:ab0d28306dd6daa03af79bdc2ea650e59a50a03317987c4cdd0d1ee70f95b597_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:b700a8bb7ea6e4253afb8bcf94e5ad086349980ca0716a87817724d3da3fdce1_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4015f46d2172db26a348635e2e8cbd4bbcdbbaa56a4b12c232676a3d0f5bbee2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4169252c61ec70b91b10c750d5f9ecd53f5c3c906766bba9103afbac3c3f9edf_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4ab72a192553c21de76754f06fe38cf443e686e4b4edc2aa2ceb2b6b9d95bb6c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:579ef0925c6f56ed48f22121767189431bef6c4eaa72b2648a1b91488357a51d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:2b796bf55ecf7a14d1c87d829a2b20d998fc2943686373105b0a50f5053ef836_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:7e960b59f64547f7e9602b7c066a51ab52aba929726aec2bacdf486a9d4d28fd_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:a43e430a2ec0b86fb6ade361677be298b4e27444388a9bca35ddafbf9c77277c_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:d2394b121256985e5ca322aea77bb0bf999ba2d7a6f1627e62bbc125c475dbbd_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:1868e2ea03d063b4cd64601cb0aaf5c9ea7f55e83eba2e2d4dcf6f830efeafc7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:4bfbf0bdc882979bc94d85a4aeff8caa0ec7887aec7412e32ae1442811325d06_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:844e3d69d3c26914e02612466021592a876e6e2dd6cf77084723a70f567ba0e2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:bbe04eb8fd197f15875f498e3c18b9a7a445380efb5f696422d79df99a34a881_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:2c9f9b47c01c5e5e017c583c6a09c5c52f40ef88acf789689265cb31ef328fb8_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:7b5e883efde312c1571c4825b523ff04ab57af6a9f4162a36b80b973f9602c46_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:d896dd89fb924da246fc729041d9debc019d8a4210cfd3de8883834e429cca10_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:ede3e22d4e4de49789622149dec23beaa7e0569a3715ac2262929df543e05bc3_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:273a393b8c62fbc4edb4bf4033c47d8b52bda56fc9cafa289d9513210840815b_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:71f1b590785ce7f4577ecd687dbab9bc3c5931c568a3108eb84279c7aa892046_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:d1e1b4310eb64891c9456be7c34547bf36b0aafdeb471a49f0892d7eaf8f41f4_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:e0a7514406c7ffae080db6d4db3bbf7b77a606ea4632bf09f8301ce1d3739bb5_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:2a4c6c061d154ed9c74707a7a2e2390fde2a150f36197386c3e49c0612d345b2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:6ffcc051c955e198c6d96b59bda0ef26b5124ebbdef5357d36a84534f2c7097c_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:c9258bf58373f9c6859789c8ec272cd7d702c37e063fc2ee53c66d296e7ee3d0_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:d83c6bb4f2a91d2c4de3ffbf4aa8ceecb695f8491ba7586d55275c62cd1931e6_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:67637c5cba3eca1597885823c6e44c13db445d0ef38751eb8364b69dbf07caac_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:68fb5c2a3c8a0d5e6bbcf2c5568969f6b13e72006d4d54bc5c57cd9a032d1bf6_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:9f5fa40c88b0f5d1ae3634632240817a91f4575f8eae9c005b8e35a55cf38003_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:fcbcee9fc7e0bbf5775a33ae9b7e3d7e48a90e2aa1cb85605e05612b6e4d4e30_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:0c165bb93ce933c7f9998a615908bfcca0b4eb38e32e24a1c823e63791b7604b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:42aa392f82bdc45a3b857d1ed44e224ddfd14db1e3dcbb74dcc850ac0540e964_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:9dcd0c0ecf1523bf05bd296edbecd85841b2753dee7a5c9df32437f9a8e31471_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:c5505c462e6b2c04a6e14bc1e22dfc42dc8adea8f6eaf0615cd58b1973b7d62e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:1a93df314c31f10da7b1345fab07b15b846e28865764178e34124f84dc967152_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:34343f81973c3fbdd8630c32d0fad597745ea10f960ea64236408e58e0f10e14_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:7b3635784ebfb6343a73c9fa6de7bea57b3aacce1c49a0f7f250a471f7b897e3_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:f0a7fade2853193429bab16922b2e3bbe426e14632423d6550ff7dfb66d42827_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:94950d339fa382d6911f12fc23dcaf2cdb2854c4cab654f6058f5bf0df1bb371_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:bcfbd2284cbeeba5a835aaf5a5590ddd8156bd881ca24fd0fe1465fade1f84c2_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:bd739ced163053224e5b0ea2f3cd577481c6b6c1162cc0fbc186f1716b4a1fbd_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:d40496f114898985cde3860b9664c34d8c32de85e4d3d846df91a6ba27a2e99c_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:3f7cbe7605595d712e14d9a17717fafc6c6e334f2ad3e821c34947ec78411046_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:96775900ea90e57487da6afe59d058b33cb977a0247a1bbeb1bd07bed2816398_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:caa6b121538e074312314d9888d9b423bd225aefa4f25eb145893b9fc548c0ad_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:e59c90cfe8160b28f9d2aa9e59b1d04d742df44d2195210ebc1946ee3cb78b6f_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:10c95e5c55ccc1a04e8d2ac28bd1afd3b9bb9a7e9e2a5e3e8efb301421539980_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:60a310d4464b4817845703d14e95729321b883fbfc79fbf2dd8d514bb3c675e9_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:70e6c14d72f14d25a90f44043932fbd3f824b30e8ad4b36307100726b24d9c06_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:784129cf69b3bf77a907fe909fd73a2a4d0fbd947fe0037e47aa1d62c6ffcf0b_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:26e58654cdd092cb812207cb4473f5f5988ebd708d95c34152c2e8c124f7297d_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:40e5d9634aa7469df8247758961d486cfac3e7d7f0b59184e11ed5571b46bf40_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:5b59faed336de07965755c893cb9d0ffc52ec90f61cc8c54487f6c0cac53322e_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:b59aea0c9e859025988b0f0c9b6e7748c4acf6d0b4cee35f3fabb7b84feb598b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:2368703206d833e4cb73b7e8750efb9997633a6f9accbf032426bcfcae4c00d9_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:80b543b207e724e880ff932c514fe9c6a3925bfede1c31863531e4e69d050d40_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:82405a9a5715db5442dfa3d3f594888bd7b2f9c778d68357a7d8884f5ea46915_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:8fd2bda7b8d94ededf7973f76a159dd61105776a05d961ac9cfd9bee0a988213_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:4def845360282dad99181b96bcd834b4863eab39e246fda2476234c561c652ec_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:b67aec868b6366cf04f3980b15588e1a0af5c88b2248958bc3884261ad390ca0_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:ceacf3491ebec6f5613011fe8d36b66d00f8b3697832615a4d7024e23125085e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:d9f6a520b818dcccbedb94720b5979ef1cdec2e02491c76e3decb3ee18f2085d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:3e6519c0c789b946eb1b811867c41c4f204440bad5734760c0aca4e3fc602e5a_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:95684cfaf4d5d91bc9fe8cfbf64a6f113e944e3f0c102d27851be5232eca0dbb_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:9cb20990af88287dd8a27de4e4ef12eb244577a1844482d26107359c6efe8efa_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:a69ebb0c7e817d44cfabd86ad13ef4cc94a8bf5b6e8a607d17b197603d64a224_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:0eea35a3af36d08db945a70c387cc38eb326f75b4ed322f09d8c91863cfe5d02_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:22c48db227cd6f2ecec746674e31ac7f5a983a418679fc91678a0aa0ebb49496_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:8e8d249c39d562f819d347f12610dda7f5c01215c41101bfd5dca008e04edf6e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:f8adb8dd40a204bacb51cd423803097a514ec8e8e9f52209e02ecf14cad622bb_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:03adc6277e2bf409391941c6f4508154abc38a0c043139978754f6d4fd32c5a8_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:7e100af30ed11325cb2cbee02af09306e53df5db5847f2a4b733cd307e3cd623_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:91b474b4808b18c279c9f8eb3be8e6d1e1e47cf2b5f9553acd901c74b20bddbc_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:d56f884a9700a4f193d6f3db1895bd54745ec77e02ead3d43bd6e4fe04a2969e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:1f7ed606f69a74943aedb0a956e5a71019f8a1ab53cd3f8166be0f55a69809b9_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:4841076eb82f1f1748345556ff6c4e02a17f1f63c661e375eaba720291cbaf6a_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:a79ac7dcae109aa526e2a218327dd8c5dba2b924fc27447a07199b3b2f2f67b3_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:dee022821852f2d5ebdbbd9f09c9b97997a905061dadb3f78433291d462d49a7_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:1a746b16f362a83f399255d925b322b3440b3d89ae4d64ab7962db3d82ee91a1_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:417a31bec11c3ffb70f40fa955069d5160dc12e2426b67e1d2e35ae3f7fa06df_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:89a3cb77fdb3dcbddfe96785a9ba3fa2b6132098fce028f859663b31fcf77a34_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:b1ba0b4cd8f515895af7b9f797f6ea5b661f7254ce019ce5115375639dcd06e9_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:0827c96b922ca185b7a7321a4f504e8a5dc01aadafcfd20443060546981339a8_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:b5b732dfc0ce3d740781eda9a72e1542c7a30b28b39d2be6e0ba470af06a9680_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:f74081e5eb03227ccff5717a7d139ceee6c5b610625ff7b99e639a2652bf7663_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:f80976ae4fc332600e1d8e1d70b42c038ea05d76ac2c5b1d7d0cbaddbe89140a_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:4029ece83812237ce8b1d394252e9561012e8cd94af40680a90284fbea1bc32a_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:63a3465a7539a8a286c846a84d63e3feca9a11758e4c0d697889b0bdeb26a25c_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:81c227d7c7599b0d4357ccdc3b567f31b67bbd1198c9e7ddba1864c299bad11b_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:f392bde8ce22aca058d77132cc709440442931679dbe725c52516f1cdc97b38d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:4825fab15300bc911e0b2b5c4ae342004bfcff95fa64af0fdb1085fadd132aa2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:68f879679911c2ca828551b900eca1c2f4e8caec7312fbba502fabc4778d1832_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:b4188ac728c746769ef6586663dd6d7d07db984b083397d2c76fe847ef22ea60_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:f2805fc1e6f37bc8acc3187ea8712d38f32151d584c10d5996c0ad7076cd638b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:1c943edcf23df14f254e4aabb93cbc1665bbc7902076b3f04bd80edd2fe324db_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:84c5d2b24caf68c3a6a6d078bd9f66de9fb88e769f6c09c11a248693d463ac21_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:907d6e24922d6d372bceb21ad830c254c6a9c9d6be0ac4f4edf22c236437a09d_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:923a3ee0e3d5b7341b96826e465e6856855f2801dbaf381d139a632c77bda1c5_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:285d2e2d103b458f0603435aedb4d779d85e48fed2267845b798f4a04a0df4c7_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:44981f5fcbc9086470143fae6e21a5de3baad2258d9f8c81accecb2faad6b2a2_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:5ba248d0bc8fcde70e210319bb962f4043e5e8ab8a5625c8f8f30ec96d47c6b7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:f681cdac28ee9ff6375fb39d7b7d12917a06043db44c16e8f84bdb9e09e7b5e7_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:2057531884d897574fc0648e5d3cf21c4549738ac5f35d8095f400cdb80049cc_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:8be0e50a132a2c974893f36b51f3f40b6d6e1f913ae0f9ee6319ef0d5ec455b7_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:a2edc5d233d1547fa2e1d01f29d8a914930735f7098289892430ba9a17d20ab7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:c81c7aeb3dd05801e279a9fcc8d6c3baf00a2ccc08eab53f8acc8bd4d2d129c4_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:25e17bf203568420587cf5907e84e4167afab84dfce549c91bea99e70290b742_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:277f4e8ac5fc292b9f0f2d123f924c6b5cbc0a2eeba3c87a0e61c5ee2399aaa9_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:76766b77ed53513cd254195b25d205ab6964522816e1e3662800e38a105abdf2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:c7ace45f7cb86055e2ba18e27a660f6aa6cb4eff497204294875d5dd1d63cce3_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:3780b1bc80ab7ebc3cfed06ce69346d589dc07b53cea65ad3ed92cc912284300_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:681b356709778083448892513b4559f693e002bfda897a57e2d065f736a902b5_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:d110b52ce8ea022b3d35e7c4b0ce3b646f30513cf8abb55327132565ea4a6a87_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:f076ab59f3abe061e4553a61f98a144a472297dba5ed924ca887f130e9372da9_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:31bd91156f49687d2efffd3be971d9ee0e16abb420b8e8b958caa88b97770020_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:a6315866c67ba350665f5a92f960a5a44e427ca37ae7505e2072af4e02c42f76_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:b3ad6fa1de658f3a40c8b183ab501ebc66b359d8cc01439d4215aa52769df213_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:bfde9ebea1fcd27b6d104d5f67db62e870878f9517ccbec2f649dd2c1af4a073_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:08fed161d59299881ff7a54db859feaf8ed7bdb8238d6cf12628ccb73575665e_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:09436fe2649ca384b1bc1fd8f736fb1d71392733310e66758ed9f289e00471f9_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:3b83670e1c0e9d1f5b76bd7b75d77072bc6208646bc2201bd0bd200dbc59e34a_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:927146f966e4c5c2908d29d8ab45a8f3071dbd5ebd9cf0424460a23f814a72a7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:38a3bc59511133cae56827eba879e7c82c5a974bf1f16b6e8d95e1f79821e669_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:3fa04db82e3ce6169270db0ce29107b69d8e044e0a1ab13a2bf1050b8c26d087_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:6041a918713d4464c73560b68c294a12d33f297a980d2f9d0e0cc8c300a96f24_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:98bd72ba69bdfb3070d87b3edcbd7050579a514b72cfd67c2926541ba52dbaf7_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:938abc970731c2eeda8e2b7b73e96d4dfcbf7587330c7b7e52117a577700e426_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:a0876a25ce85d7d4616212813f012422826f152b8d71065e75cd9c3e23034d8a_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:c77077a0cca835a503a6529c89ab19c4027f949d361afdf8a5a259e1e87b0d55_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:d5bbf3fe886f27cdc27363dcb175e004487d9c8f36de4f1f8516fbeda3a95224_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:0f5d8cae3ba4ea4fcdc5fb9d08f797d576bc225b92af66f193bd4b1324cda4b9_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:2d3588825f8a714fa59b1648d0934d064165e333f322f7f31f01f07b940d42d9_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:68aa571827f5331f1d5a3bd0c60ad441a18877ba11921aff2633940236bafcd4_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:9b80c9c61d4befefa7f6a65ae8c001ce7e343a1e4f251e5ebe025625d9511730_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:9b2c24401a91903f023096d2b641aa977acff423eb6770a8e4c4a81aecfd4e62_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:9d74585acc098c13f3e9dac5ae7f5ef337fa82bd7119d7f1849c5f8a50e84907_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:a6ee95d0ed82bddef084684d11fa770bd646d9be9bc65b3bc386d7c58b33975c_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:f7b8654eb8bf675c8c26f0ad395d790f990308d3ad6683bb61b484c92073bbac_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:2a598e7fd07db27100d9a53a328ac9a0535865883bddd1373f4f1f2705068d2f_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:4f8f0b02d0969753e156226a998d442746c238a2a50ea606a49ca0cf695b8925_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:63c02348faa7d4e26e35c69aef5453613dd607a26116823b931b89fe5311e181_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:ae224866f0085d2c00ab18a28d2aed076e455731903989a49a544abf49950d1f_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:0a90a13f006ef0b271079b728ef6d54081f36ae19b6d0e9ab4dc24ea52a30fad_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:3a53629645832974a883002e53198df7c28e59dd6d1df99bf321b52d0ef84b61_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:879315f438ca43abb607d6c97f8fbd4ca2d38209b142e2d97cc0598740273252_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:c6c4d01f5fcee6cad3fc870cace92f45000624760e6e93654bb5e814afeed7bb_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:50f7647620c78fd6b445379c8762f5e978113fe3552906376a24459263f27459_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:53e641f48ddc05c63da2e6bc24e9e4636a10de2c3599d8f5f78622bdebca07ca_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:57114b7a386c406715e342637558fab57afeef2e193517f99173a441f39401d5_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:dcdcaa90f292f2d7ad3f10acbedfab9f7f22f3432c3156055f34760d9bf9429c_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:3723b1d5c74f37cba219e203fd2026a718d4821595cb505ec6626684695da65b_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:562291f52b6bce98ec8795856b808545c4fe30047b54544c7f6c2ab4678480ff_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:e6dfac9bc3e467e141a425944782f5087ed967ac4d02d8d47442e3d61ba5b882_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:f683186c2cc8be9ec09b8efdec66d6b8b1f991c7f7b9fd398dc7c3f9ab8b3079_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:2471edd63a94473c68cf37ee50de643e40003f2c5bba84063c154e4888a7f0bd_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:7cef49d68df5d8efe52061a18920e07e6c7efa3016c0cea7d1747e67851f254a_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:d912383405599032acffbad22bc154f63a87dd429ba882fd7a94cb82fe650d8e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:f3034211e16de48af540efe4ee460395dba0a4a544fa4f277a12840a25df1730_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:181d1decb2f16fcf6f5938027ed346aca29126687bbe6cdcc601c25087f70d11_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:ab5e4d27e23448d99a37b8c05442bb1254083cdc4ff325e721d97d80ec27346c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:ac172243d158e126594f28317e0cfb37dc1790c9f2121e95fe52506b5e05fc91_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:fd96b6284d270effa0f838d960ea4218b72b54c4718513eb523658f2f4972682_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:c59d9cd479c62730eda5d482fb2f4e9fbc17a90a5a2861b130aafe1f3a27a333_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:e547f672b14b6e8fc2ffd300b150aedbd3f6b6b36ddcad612f7c992a936a7c82_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:ead1263d538974c48790c65e44cd9cab07a62c2893b2eeb250174e7cf58d7f9d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:ed0457a57c7b39b79fb308176f45ffe678938b25fbb8c15de2cedbe54b916f64_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:9847a5752ec77e17861dcdac5546ee5c53679c80c3569609b21d9080ee3b7ef3_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:d3c823e61a0682ddc85e576e86234e580992886de471035630f9c89bbad6ebb7_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:ded425ed0af88a1411a06e5191aee25c4c59f1de85b041eba95c9997686cf09e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:ee63f59942f9df04e95fc4266f0d194cd62a7ca08dd5478283884d0ab6003da7_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:724377cabaa284a5197e7505a7150c89631c2f2bcc629e074c7c0be18abd8e6f_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:cbf797c9e93413540b20ebee9191375ddd8185ef22dc8c9e23cc3a4c015abaf7_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:d7609d62a801cf07ef639abcd4f193b2d68967fadebbfddf2349003d7e9eaa44_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:f61fe90362f793225591eb7e2a86d5cdc6fb35aa087e9b6a6218a42b1c1d945d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:1c4de9460688800b62bad6fb13653ef4b52bf215e4d41674291193e9b8e71b24_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:4f1e59610b2fbedc56f425b3fbd8f16c9ea6ea96025f18a404fe48f6a49bdc1e_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:ab0d28306dd6daa03af79bdc2ea650e59a50a03317987c4cdd0d1ee70f95b597_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:b700a8bb7ea6e4253afb8bcf94e5ad086349980ca0716a87817724d3da3fdce1_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4015f46d2172db26a348635e2e8cbd4bbcdbbaa56a4b12c232676a3d0f5bbee2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4169252c61ec70b91b10c750d5f9ecd53f5c3c906766bba9103afbac3c3f9edf_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4ab72a192553c21de76754f06fe38cf443e686e4b4edc2aa2ceb2b6b9d95bb6c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:579ef0925c6f56ed48f22121767189431bef6c4eaa72b2648a1b91488357a51d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:2b796bf55ecf7a14d1c87d829a2b20d998fc2943686373105b0a50f5053ef836_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:7e960b59f64547f7e9602b7c066a51ab52aba929726aec2bacdf486a9d4d28fd_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:a43e430a2ec0b86fb6ade361677be298b4e27444388a9bca35ddafbf9c77277c_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:d2394b121256985e5ca322aea77bb0bf999ba2d7a6f1627e62bbc125c475dbbd_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:1868e2ea03d063b4cd64601cb0aaf5c9ea7f55e83eba2e2d4dcf6f830efeafc7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:4bfbf0bdc882979bc94d85a4aeff8caa0ec7887aec7412e32ae1442811325d06_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:844e3d69d3c26914e02612466021592a876e6e2dd6cf77084723a70f567ba0e2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:bbe04eb8fd197f15875f498e3c18b9a7a445380efb5f696422d79df99a34a881_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:2c9f9b47c01c5e5e017c583c6a09c5c52f40ef88acf789689265cb31ef328fb8_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:7b5e883efde312c1571c4825b523ff04ab57af6a9f4162a36b80b973f9602c46_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:d896dd89fb924da246fc729041d9debc019d8a4210cfd3de8883834e429cca10_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:ede3e22d4e4de49789622149dec23beaa7e0569a3715ac2262929df543e05bc3_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:273a393b8c62fbc4edb4bf4033c47d8b52bda56fc9cafa289d9513210840815b_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:71f1b590785ce7f4577ecd687dbab9bc3c5931c568a3108eb84279c7aa892046_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:d1e1b4310eb64891c9456be7c34547bf36b0aafdeb471a49f0892d7eaf8f41f4_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:e0a7514406c7ffae080db6d4db3bbf7b77a606ea4632bf09f8301ce1d3739bb5_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:2a4c6c061d154ed9c74707a7a2e2390fde2a150f36197386c3e49c0612d345b2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:6ffcc051c955e198c6d96b59bda0ef26b5124ebbdef5357d36a84534f2c7097c_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:c9258bf58373f9c6859789c8ec272cd7d702c37e063fc2ee53c66d296e7ee3d0_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:d83c6bb4f2a91d2c4de3ffbf4aa8ceecb695f8491ba7586d55275c62cd1931e6_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:67637c5cba3eca1597885823c6e44c13db445d0ef38751eb8364b69dbf07caac_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:68fb5c2a3c8a0d5e6bbcf2c5568969f6b13e72006d4d54bc5c57cd9a032d1bf6_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:9f5fa40c88b0f5d1ae3634632240817a91f4575f8eae9c005b8e35a55cf38003_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:fcbcee9fc7e0bbf5775a33ae9b7e3d7e48a90e2aa1cb85605e05612b6e4d4e30_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:0c165bb93ce933c7f9998a615908bfcca0b4eb38e32e24a1c823e63791b7604b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:42aa392f82bdc45a3b857d1ed44e224ddfd14db1e3dcbb74dcc850ac0540e964_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:9dcd0c0ecf1523bf05bd296edbecd85841b2753dee7a5c9df32437f9a8e31471_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:c5505c462e6b2c04a6e14bc1e22dfc42dc8adea8f6eaf0615cd58b1973b7d62e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:1a93df314c31f10da7b1345fab07b15b846e28865764178e34124f84dc967152_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:34343f81973c3fbdd8630c32d0fad597745ea10f960ea64236408e58e0f10e14_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:7b3635784ebfb6343a73c9fa6de7bea57b3aacce1c49a0f7f250a471f7b897e3_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:f0a7fade2853193429bab16922b2e3bbe426e14632423d6550ff7dfb66d42827_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:94950d339fa382d6911f12fc23dcaf2cdb2854c4cab654f6058f5bf0df1bb371_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:bcfbd2284cbeeba5a835aaf5a5590ddd8156bd881ca24fd0fe1465fade1f84c2_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:bd739ced163053224e5b0ea2f3cd577481c6b6c1162cc0fbc186f1716b4a1fbd_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:d40496f114898985cde3860b9664c34d8c32de85e4d3d846df91a6ba27a2e99c_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:3f7cbe7605595d712e14d9a17717fafc6c6e334f2ad3e821c34947ec78411046_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:96775900ea90e57487da6afe59d058b33cb977a0247a1bbeb1bd07bed2816398_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:caa6b121538e074312314d9888d9b423bd225aefa4f25eb145893b9fc548c0ad_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:e59c90cfe8160b28f9d2aa9e59b1d04d742df44d2195210ebc1946ee3cb78b6f_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:10c95e5c55ccc1a04e8d2ac28bd1afd3b9bb9a7e9e2a5e3e8efb301421539980_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:60a310d4464b4817845703d14e95729321b883fbfc79fbf2dd8d514bb3c675e9_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:70e6c14d72f14d25a90f44043932fbd3f824b30e8ad4b36307100726b24d9c06_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:784129cf69b3bf77a907fe909fd73a2a4d0fbd947fe0037e47aa1d62c6ffcf0b_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:26e58654cdd092cb812207cb4473f5f5988ebd708d95c34152c2e8c124f7297d_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:40e5d9634aa7469df8247758961d486cfac3e7d7f0b59184e11ed5571b46bf40_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:5b59faed336de07965755c893cb9d0ffc52ec90f61cc8c54487f6c0cac53322e_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:b59aea0c9e859025988b0f0c9b6e7748c4acf6d0b4cee35f3fabb7b84feb598b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:2368703206d833e4cb73b7e8750efb9997633a6f9accbf032426bcfcae4c00d9_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:80b543b207e724e880ff932c514fe9c6a3925bfede1c31863531e4e69d050d40_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:82405a9a5715db5442dfa3d3f594888bd7b2f9c778d68357a7d8884f5ea46915_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:8fd2bda7b8d94ededf7973f76a159dd61105776a05d961ac9cfd9bee0a988213_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:4def845360282dad99181b96bcd834b4863eab39e246fda2476234c561c652ec_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:b67aec868b6366cf04f3980b15588e1a0af5c88b2248958bc3884261ad390ca0_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:ceacf3491ebec6f5613011fe8d36b66d00f8b3697832615a4d7024e23125085e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:d9f6a520b818dcccbedb94720b5979ef1cdec2e02491c76e3decb3ee18f2085d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:3e6519c0c789b946eb1b811867c41c4f204440bad5734760c0aca4e3fc602e5a_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:95684cfaf4d5d91bc9fe8cfbf64a6f113e944e3f0c102d27851be5232eca0dbb_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:9cb20990af88287dd8a27de4e4ef12eb244577a1844482d26107359c6efe8efa_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:a69ebb0c7e817d44cfabd86ad13ef4cc94a8bf5b6e8a607d17b197603d64a224_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:0eea35a3af36d08db945a70c387cc38eb326f75b4ed322f09d8c91863cfe5d02_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:22c48db227cd6f2ecec746674e31ac7f5a983a418679fc91678a0aa0ebb49496_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:8e8d249c39d562f819d347f12610dda7f5c01215c41101bfd5dca008e04edf6e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:f8adb8dd40a204bacb51cd423803097a514ec8e8e9f52209e02ecf14cad622bb_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:03adc6277e2bf409391941c6f4508154abc38a0c043139978754f6d4fd32c5a8_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:7e100af30ed11325cb2cbee02af09306e53df5db5847f2a4b733cd307e3cd623_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:91b474b4808b18c279c9f8eb3be8e6d1e1e47cf2b5f9553acd901c74b20bddbc_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:d56f884a9700a4f193d6f3db1895bd54745ec77e02ead3d43bd6e4fe04a2969e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:1f7ed606f69a74943aedb0a956e5a71019f8a1ab53cd3f8166be0f55a69809b9_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:4841076eb82f1f1748345556ff6c4e02a17f1f63c661e375eaba720291cbaf6a_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:a79ac7dcae109aa526e2a218327dd8c5dba2b924fc27447a07199b3b2f2f67b3_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:dee022821852f2d5ebdbbd9f09c9b97997a905061dadb3f78433291d462d49a7_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:1a746b16f362a83f399255d925b322b3440b3d89ae4d64ab7962db3d82ee91a1_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:417a31bec11c3ffb70f40fa955069d5160dc12e2426b67e1d2e35ae3f7fa06df_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:89a3cb77fdb3dcbddfe96785a9ba3fa2b6132098fce028f859663b31fcf77a34_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:b1ba0b4cd8f515895af7b9f797f6ea5b661f7254ce019ce5115375639dcd06e9_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:0827c96b922ca185b7a7321a4f504e8a5dc01aadafcfd20443060546981339a8_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:b5b732dfc0ce3d740781eda9a72e1542c7a30b28b39d2be6e0ba470af06a9680_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:f74081e5eb03227ccff5717a7d139ceee6c5b610625ff7b99e639a2652bf7663_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:f80976ae4fc332600e1d8e1d70b42c038ea05d76ac2c5b1d7d0cbaddbe89140a_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:4029ece83812237ce8b1d394252e9561012e8cd94af40680a90284fbea1bc32a_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:63a3465a7539a8a286c846a84d63e3feca9a11758e4c0d697889b0bdeb26a25c_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:81c227d7c7599b0d4357ccdc3b567f31b67bbd1198c9e7ddba1864c299bad11b_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:f392bde8ce22aca058d77132cc709440442931679dbe725c52516f1cdc97b38d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:4825fab15300bc911e0b2b5c4ae342004bfcff95fa64af0fdb1085fadd132aa2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:68f879679911c2ca828551b900eca1c2f4e8caec7312fbba502fabc4778d1832_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:b4188ac728c746769ef6586663dd6d7d07db984b083397d2c76fe847ef22ea60_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:f2805fc1e6f37bc8acc3187ea8712d38f32151d584c10d5996c0ad7076cd638b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:1c943edcf23df14f254e4aabb93cbc1665bbc7902076b3f04bd80edd2fe324db_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:84c5d2b24caf68c3a6a6d078bd9f66de9fb88e769f6c09c11a248693d463ac21_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:907d6e24922d6d372bceb21ad830c254c6a9c9d6be0ac4f4edf22c236437a09d_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:923a3ee0e3d5b7341b96826e465e6856855f2801dbaf381d139a632c77bda1c5_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:285d2e2d103b458f0603435aedb4d779d85e48fed2267845b798f4a04a0df4c7_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:44981f5fcbc9086470143fae6e21a5de3baad2258d9f8c81accecb2faad6b2a2_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:5ba248d0bc8fcde70e210319bb962f4043e5e8ab8a5625c8f8f30ec96d47c6b7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:f681cdac28ee9ff6375fb39d7b7d12917a06043db44c16e8f84bdb9e09e7b5e7_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:2057531884d897574fc0648e5d3cf21c4549738ac5f35d8095f400cdb80049cc_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:8be0e50a132a2c974893f36b51f3f40b6d6e1f913ae0f9ee6319ef0d5ec455b7_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:a2edc5d233d1547fa2e1d01f29d8a914930735f7098289892430ba9a17d20ab7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:c81c7aeb3dd05801e279a9fcc8d6c3baf00a2ccc08eab53f8acc8bd4d2d129c4_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:25e17bf203568420587cf5907e84e4167afab84dfce549c91bea99e70290b742_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:277f4e8ac5fc292b9f0f2d123f924c6b5cbc0a2eeba3c87a0e61c5ee2399aaa9_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:76766b77ed53513cd254195b25d205ab6964522816e1e3662800e38a105abdf2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:c7ace45f7cb86055e2ba18e27a660f6aa6cb4eff497204294875d5dd1d63cce3_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:3780b1bc80ab7ebc3cfed06ce69346d589dc07b53cea65ad3ed92cc912284300_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:681b356709778083448892513b4559f693e002bfda897a57e2d065f736a902b5_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:d110b52ce8ea022b3d35e7c4b0ce3b646f30513cf8abb55327132565ea4a6a87_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:f076ab59f3abe061e4553a61f98a144a472297dba5ed924ca887f130e9372da9_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass"
},
{
"cve": "CVE-2026-27145",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-06-02T23:01:08.992540+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:31bd91156f49687d2efffd3be971d9ee0e16abb420b8e8b958caa88b97770020_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:a6315866c67ba350665f5a92f960a5a44e427ca37ae7505e2072af4e02c42f76_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:b3ad6fa1de658f3a40c8b183ab501ebc66b359d8cc01439d4215aa52769df213_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:bfde9ebea1fcd27b6d104d5f67db62e870878f9517ccbec2f649dd2c1af4a073_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:08fed161d59299881ff7a54db859feaf8ed7bdb8238d6cf12628ccb73575665e_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:09436fe2649ca384b1bc1fd8f736fb1d71392733310e66758ed9f289e00471f9_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:3b83670e1c0e9d1f5b76bd7b75d77072bc6208646bc2201bd0bd200dbc59e34a_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:927146f966e4c5c2908d29d8ab45a8f3071dbd5ebd9cf0424460a23f814a72a7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:38a3bc59511133cae56827eba879e7c82c5a974bf1f16b6e8d95e1f79821e669_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:3fa04db82e3ce6169270db0ce29107b69d8e044e0a1ab13a2bf1050b8c26d087_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:6041a918713d4464c73560b68c294a12d33f297a980d2f9d0e0cc8c300a96f24_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:98bd72ba69bdfb3070d87b3edcbd7050579a514b72cfd67c2926541ba52dbaf7_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:938abc970731c2eeda8e2b7b73e96d4dfcbf7587330c7b7e52117a577700e426_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:a0876a25ce85d7d4616212813f012422826f152b8d71065e75cd9c3e23034d8a_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:c77077a0cca835a503a6529c89ab19c4027f949d361afdf8a5a259e1e87b0d55_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:d5bbf3fe886f27cdc27363dcb175e004487d9c8f36de4f1f8516fbeda3a95224_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:0f5d8cae3ba4ea4fcdc5fb9d08f797d576bc225b92af66f193bd4b1324cda4b9_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:2d3588825f8a714fa59b1648d0934d064165e333f322f7f31f01f07b940d42d9_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:68aa571827f5331f1d5a3bd0c60ad441a18877ba11921aff2633940236bafcd4_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:9b80c9c61d4befefa7f6a65ae8c001ce7e343a1e4f251e5ebe025625d9511730_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:9b2c24401a91903f023096d2b641aa977acff423eb6770a8e4c4a81aecfd4e62_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:9d74585acc098c13f3e9dac5ae7f5ef337fa82bd7119d7f1849c5f8a50e84907_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:a6ee95d0ed82bddef084684d11fa770bd646d9be9bc65b3bc386d7c58b33975c_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:f7b8654eb8bf675c8c26f0ad395d790f990308d3ad6683bb61b484c92073bbac_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:2a598e7fd07db27100d9a53a328ac9a0535865883bddd1373f4f1f2705068d2f_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:4f8f0b02d0969753e156226a998d442746c238a2a50ea606a49ca0cf695b8925_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:63c02348faa7d4e26e35c69aef5453613dd607a26116823b931b89fe5311e181_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:ae224866f0085d2c00ab18a28d2aed076e455731903989a49a544abf49950d1f_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:0a90a13f006ef0b271079b728ef6d54081f36ae19b6d0e9ab4dc24ea52a30fad_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:3a53629645832974a883002e53198df7c28e59dd6d1df99bf321b52d0ef84b61_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:879315f438ca43abb607d6c97f8fbd4ca2d38209b142e2d97cc0598740273252_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:c6c4d01f5fcee6cad3fc870cace92f45000624760e6e93654bb5e814afeed7bb_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:50f7647620c78fd6b445379c8762f5e978113fe3552906376a24459263f27459_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:53e641f48ddc05c63da2e6bc24e9e4636a10de2c3599d8f5f78622bdebca07ca_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:57114b7a386c406715e342637558fab57afeef2e193517f99173a441f39401d5_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:dcdcaa90f292f2d7ad3f10acbedfab9f7f22f3432c3156055f34760d9bf9429c_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:3723b1d5c74f37cba219e203fd2026a718d4821595cb505ec6626684695da65b_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:562291f52b6bce98ec8795856b808545c4fe30047b54544c7f6c2ab4678480ff_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:e6dfac9bc3e467e141a425944782f5087ed967ac4d02d8d47442e3d61ba5b882_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:f683186c2cc8be9ec09b8efdec66d6b8b1f991c7f7b9fd398dc7c3f9ab8b3079_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:2471edd63a94473c68cf37ee50de643e40003f2c5bba84063c154e4888a7f0bd_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:7cef49d68df5d8efe52061a18920e07e6c7efa3016c0cea7d1747e67851f254a_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:d912383405599032acffbad22bc154f63a87dd429ba882fd7a94cb82fe650d8e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:f3034211e16de48af540efe4ee460395dba0a4a544fa4f277a12840a25df1730_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:181d1decb2f16fcf6f5938027ed346aca29126687bbe6cdcc601c25087f70d11_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:ab5e4d27e23448d99a37b8c05442bb1254083cdc4ff325e721d97d80ec27346c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:ac172243d158e126594f28317e0cfb37dc1790c9f2121e95fe52506b5e05fc91_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:fd96b6284d270effa0f838d960ea4218b72b54c4718513eb523658f2f4972682_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:c59d9cd479c62730eda5d482fb2f4e9fbc17a90a5a2861b130aafe1f3a27a333_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:e547f672b14b6e8fc2ffd300b150aedbd3f6b6b36ddcad612f7c992a936a7c82_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:ead1263d538974c48790c65e44cd9cab07a62c2893b2eeb250174e7cf58d7f9d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:ed0457a57c7b39b79fb308176f45ffe678938b25fbb8c15de2cedbe54b916f64_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:9847a5752ec77e17861dcdac5546ee5c53679c80c3569609b21d9080ee3b7ef3_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:d3c823e61a0682ddc85e576e86234e580992886de471035630f9c89bbad6ebb7_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:ded425ed0af88a1411a06e5191aee25c4c59f1de85b041eba95c9997686cf09e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:ee63f59942f9df04e95fc4266f0d194cd62a7ca08dd5478283884d0ab6003da7_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:724377cabaa284a5197e7505a7150c89631c2f2bcc629e074c7c0be18abd8e6f_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:cbf797c9e93413540b20ebee9191375ddd8185ef22dc8c9e23cc3a4c015abaf7_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:d7609d62a801cf07ef639abcd4f193b2d68967fadebbfddf2349003d7e9eaa44_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:f61fe90362f793225591eb7e2a86d5cdc6fb35aa087e9b6a6218a42b1c1d945d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:1c4de9460688800b62bad6fb13653ef4b52bf215e4d41674291193e9b8e71b24_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:4f1e59610b2fbedc56f425b3fbd8f16c9ea6ea96025f18a404fe48f6a49bdc1e_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:ab0d28306dd6daa03af79bdc2ea650e59a50a03317987c4cdd0d1ee70f95b597_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:b700a8bb7ea6e4253afb8bcf94e5ad086349980ca0716a87817724d3da3fdce1_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4015f46d2172db26a348635e2e8cbd4bbcdbbaa56a4b12c232676a3d0f5bbee2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4169252c61ec70b91b10c750d5f9ecd53f5c3c906766bba9103afbac3c3f9edf_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4ab72a192553c21de76754f06fe38cf443e686e4b4edc2aa2ceb2b6b9d95bb6c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:579ef0925c6f56ed48f22121767189431bef6c4eaa72b2648a1b91488357a51d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:2b796bf55ecf7a14d1c87d829a2b20d998fc2943686373105b0a50f5053ef836_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:7e960b59f64547f7e9602b7c066a51ab52aba929726aec2bacdf486a9d4d28fd_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:a43e430a2ec0b86fb6ade361677be298b4e27444388a9bca35ddafbf9c77277c_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:d2394b121256985e5ca322aea77bb0bf999ba2d7a6f1627e62bbc125c475dbbd_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:1868e2ea03d063b4cd64601cb0aaf5c9ea7f55e83eba2e2d4dcf6f830efeafc7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:4bfbf0bdc882979bc94d85a4aeff8caa0ec7887aec7412e32ae1442811325d06_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:844e3d69d3c26914e02612466021592a876e6e2dd6cf77084723a70f567ba0e2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:bbe04eb8fd197f15875f498e3c18b9a7a445380efb5f696422d79df99a34a881_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:2c9f9b47c01c5e5e017c583c6a09c5c52f40ef88acf789689265cb31ef328fb8_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:7b5e883efde312c1571c4825b523ff04ab57af6a9f4162a36b80b973f9602c46_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:d896dd89fb924da246fc729041d9debc019d8a4210cfd3de8883834e429cca10_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:ede3e22d4e4de49789622149dec23beaa7e0569a3715ac2262929df543e05bc3_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:273a393b8c62fbc4edb4bf4033c47d8b52bda56fc9cafa289d9513210840815b_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:71f1b590785ce7f4577ecd687dbab9bc3c5931c568a3108eb84279c7aa892046_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:d1e1b4310eb64891c9456be7c34547bf36b0aafdeb471a49f0892d7eaf8f41f4_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:e0a7514406c7ffae080db6d4db3bbf7b77a606ea4632bf09f8301ce1d3739bb5_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:2a4c6c061d154ed9c74707a7a2e2390fde2a150f36197386c3e49c0612d345b2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:6ffcc051c955e198c6d96b59bda0ef26b5124ebbdef5357d36a84534f2c7097c_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:c9258bf58373f9c6859789c8ec272cd7d702c37e063fc2ee53c66d296e7ee3d0_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:d83c6bb4f2a91d2c4de3ffbf4aa8ceecb695f8491ba7586d55275c62cd1931e6_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:67637c5cba3eca1597885823c6e44c13db445d0ef38751eb8364b69dbf07caac_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:68fb5c2a3c8a0d5e6bbcf2c5568969f6b13e72006d4d54bc5c57cd9a032d1bf6_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:9f5fa40c88b0f5d1ae3634632240817a91f4575f8eae9c005b8e35a55cf38003_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:fcbcee9fc7e0bbf5775a33ae9b7e3d7e48a90e2aa1cb85605e05612b6e4d4e30_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:0c165bb93ce933c7f9998a615908bfcca0b4eb38e32e24a1c823e63791b7604b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:42aa392f82bdc45a3b857d1ed44e224ddfd14db1e3dcbb74dcc850ac0540e964_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:9dcd0c0ecf1523bf05bd296edbecd85841b2753dee7a5c9df32437f9a8e31471_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:c5505c462e6b2c04a6e14bc1e22dfc42dc8adea8f6eaf0615cd58b1973b7d62e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:94950d339fa382d6911f12fc23dcaf2cdb2854c4cab654f6058f5bf0df1bb371_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:bcfbd2284cbeeba5a835aaf5a5590ddd8156bd881ca24fd0fe1465fade1f84c2_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:bd739ced163053224e5b0ea2f3cd577481c6b6c1162cc0fbc186f1716b4a1fbd_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:d40496f114898985cde3860b9664c34d8c32de85e4d3d846df91a6ba27a2e99c_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:3f7cbe7605595d712e14d9a17717fafc6c6e334f2ad3e821c34947ec78411046_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:96775900ea90e57487da6afe59d058b33cb977a0247a1bbeb1bd07bed2816398_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:caa6b121538e074312314d9888d9b423bd225aefa4f25eb145893b9fc548c0ad_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:e59c90cfe8160b28f9d2aa9e59b1d04d742df44d2195210ebc1946ee3cb78b6f_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:10c95e5c55ccc1a04e8d2ac28bd1afd3b9bb9a7e9e2a5e3e8efb301421539980_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:60a310d4464b4817845703d14e95729321b883fbfc79fbf2dd8d514bb3c675e9_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:70e6c14d72f14d25a90f44043932fbd3f824b30e8ad4b36307100726b24d9c06_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:784129cf69b3bf77a907fe909fd73a2a4d0fbd947fe0037e47aa1d62c6ffcf0b_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:26e58654cdd092cb812207cb4473f5f5988ebd708d95c34152c2e8c124f7297d_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:40e5d9634aa7469df8247758961d486cfac3e7d7f0b59184e11ed5571b46bf40_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:5b59faed336de07965755c893cb9d0ffc52ec90f61cc8c54487f6c0cac53322e_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:b59aea0c9e859025988b0f0c9b6e7748c4acf6d0b4cee35f3fabb7b84feb598b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:4def845360282dad99181b96bcd834b4863eab39e246fda2476234c561c652ec_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:b67aec868b6366cf04f3980b15588e1a0af5c88b2248958bc3884261ad390ca0_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:ceacf3491ebec6f5613011fe8d36b66d00f8b3697832615a4d7024e23125085e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:d9f6a520b818dcccbedb94720b5979ef1cdec2e02491c76e3decb3ee18f2085d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:3e6519c0c789b946eb1b811867c41c4f204440bad5734760c0aca4e3fc602e5a_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:95684cfaf4d5d91bc9fe8cfbf64a6f113e944e3f0c102d27851be5232eca0dbb_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:9cb20990af88287dd8a27de4e4ef12eb244577a1844482d26107359c6efe8efa_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:a69ebb0c7e817d44cfabd86ad13ef4cc94a8bf5b6e8a607d17b197603d64a224_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:0eea35a3af36d08db945a70c387cc38eb326f75b4ed322f09d8c91863cfe5d02_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:22c48db227cd6f2ecec746674e31ac7f5a983a418679fc91678a0aa0ebb49496_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:8e8d249c39d562f819d347f12610dda7f5c01215c41101bfd5dca008e04edf6e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:f8adb8dd40a204bacb51cd423803097a514ec8e8e9f52209e02ecf14cad622bb_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:1f7ed606f69a74943aedb0a956e5a71019f8a1ab53cd3f8166be0f55a69809b9_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:4841076eb82f1f1748345556ff6c4e02a17f1f63c661e375eaba720291cbaf6a_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:a79ac7dcae109aa526e2a218327dd8c5dba2b924fc27447a07199b3b2f2f67b3_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:dee022821852f2d5ebdbbd9f09c9b97997a905061dadb3f78433291d462d49a7_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:1a746b16f362a83f399255d925b322b3440b3d89ae4d64ab7962db3d82ee91a1_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:417a31bec11c3ffb70f40fa955069d5160dc12e2426b67e1d2e35ae3f7fa06df_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:89a3cb77fdb3dcbddfe96785a9ba3fa2b6132098fce028f859663b31fcf77a34_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:b1ba0b4cd8f515895af7b9f797f6ea5b661f7254ce019ce5115375639dcd06e9_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:0827c96b922ca185b7a7321a4f504e8a5dc01aadafcfd20443060546981339a8_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:b5b732dfc0ce3d740781eda9a72e1542c7a30b28b39d2be6e0ba470af06a9680_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:f74081e5eb03227ccff5717a7d139ceee6c5b610625ff7b99e639a2652bf7663_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:f80976ae4fc332600e1d8e1d70b42c038ea05d76ac2c5b1d7d0cbaddbe89140a_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:4029ece83812237ce8b1d394252e9561012e8cd94af40680a90284fbea1bc32a_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:63a3465a7539a8a286c846a84d63e3feca9a11758e4c0d697889b0bdeb26a25c_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:81c227d7c7599b0d4357ccdc3b567f31b67bbd1198c9e7ddba1864c299bad11b_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:f392bde8ce22aca058d77132cc709440442931679dbe725c52516f1cdc97b38d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:4825fab15300bc911e0b2b5c4ae342004bfcff95fa64af0fdb1085fadd132aa2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:68f879679911c2ca828551b900eca1c2f4e8caec7312fbba502fabc4778d1832_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:b4188ac728c746769ef6586663dd6d7d07db984b083397d2c76fe847ef22ea60_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:f2805fc1e6f37bc8acc3187ea8712d38f32151d584c10d5996c0ad7076cd638b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:1c943edcf23df14f254e4aabb93cbc1665bbc7902076b3f04bd80edd2fe324db_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:84c5d2b24caf68c3a6a6d078bd9f66de9fb88e769f6c09c11a248693d463ac21_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:907d6e24922d6d372bceb21ad830c254c6a9c9d6be0ac4f4edf22c236437a09d_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:923a3ee0e3d5b7341b96826e465e6856855f2801dbaf381d139a632c77bda1c5_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:285d2e2d103b458f0603435aedb4d779d85e48fed2267845b798f4a04a0df4c7_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:44981f5fcbc9086470143fae6e21a5de3baad2258d9f8c81accecb2faad6b2a2_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:5ba248d0bc8fcde70e210319bb962f4043e5e8ab8a5625c8f8f30ec96d47c6b7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:f681cdac28ee9ff6375fb39d7b7d12917a06043db44c16e8f84bdb9e09e7b5e7_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:2057531884d897574fc0648e5d3cf21c4549738ac5f35d8095f400cdb80049cc_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:8be0e50a132a2c974893f36b51f3f40b6d6e1f913ae0f9ee6319ef0d5ec455b7_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:a2edc5d233d1547fa2e1d01f29d8a914930735f7098289892430ba9a17d20ab7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:c81c7aeb3dd05801e279a9fcc8d6c3baf00a2ccc08eab53f8acc8bd4d2d129c4_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:25e17bf203568420587cf5907e84e4167afab84dfce549c91bea99e70290b742_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:277f4e8ac5fc292b9f0f2d123f924c6b5cbc0a2eeba3c87a0e61c5ee2399aaa9_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:76766b77ed53513cd254195b25d205ab6964522816e1e3662800e38a105abdf2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:c7ace45f7cb86055e2ba18e27a660f6aa6cb4eff497204294875d5dd1d63cce3_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:3780b1bc80ab7ebc3cfed06ce69346d589dc07b53cea65ad3ed92cc912284300_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:681b356709778083448892513b4559f693e002bfda897a57e2d065f736a902b5_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:d110b52ce8ea022b3d35e7c4b0ce3b646f30513cf8abb55327132565ea4a6a87_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:f076ab59f3abe061e4553a61f98a144a472297dba5ed924ca887f130e9372da9_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2484207"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `crypto/x509` package of `golang`. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name (SAN) entries. The certificate verification process, specifically the `VerifyHostname` function, incurs excessive computational overhead due to repeated string operations when processing these entries. This can lead to a significant performance degradation or unresponsiveness of systems validating such certificates.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in the Go standard library crypto/x509 package. When verifying a TLS certificate hostname, VerifyHostname processed each DNS Subject Alternative Name (SAN) entry in a loop and repeatedly split the candidate hostname on \".\" characters. For certificates with a very large DNS SAN list, CPU use could grow quadratically with the number of SAN entries and hostname labels. Because hostname verification runs before the certificate chain is built, this overhead can occur even when the certificate is not trusted.\n\nRed Hat rates this issue as Important. It affects Red Hat products that include the Go standard library crypto/x509 code from an affected Go toolchain version (before Go 1.25.11, or from Go 1.26.0 through Go 1.26.3). Applications and container images built with a fixed Go release (1.25.11 or later, or 1.26.4 or later) are not affected. Community distributions such as Fedora are also affected.\n\nUpstream fix: Go 1.25.11 and Go 1.26.4 (GO-2026-5037).",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:1a93df314c31f10da7b1345fab07b15b846e28865764178e34124f84dc967152_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:34343f81973c3fbdd8630c32d0fad597745ea10f960ea64236408e58e0f10e14_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:7b3635784ebfb6343a73c9fa6de7bea57b3aacce1c49a0f7f250a471f7b897e3_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:f0a7fade2853193429bab16922b2e3bbe426e14632423d6550ff7dfb66d42827_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:2368703206d833e4cb73b7e8750efb9997633a6f9accbf032426bcfcae4c00d9_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:80b543b207e724e880ff932c514fe9c6a3925bfede1c31863531e4e69d050d40_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:82405a9a5715db5442dfa3d3f594888bd7b2f9c778d68357a7d8884f5ea46915_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:8fd2bda7b8d94ededf7973f76a159dd61105776a05d961ac9cfd9bee0a988213_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:03adc6277e2bf409391941c6f4508154abc38a0c043139978754f6d4fd32c5a8_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:7e100af30ed11325cb2cbee02af09306e53df5db5847f2a4b733cd307e3cd623_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:91b474b4808b18c279c9f8eb3be8e6d1e1e47cf2b5f9553acd901c74b20bddbc_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:d56f884a9700a4f193d6f3db1895bd54745ec77e02ead3d43bd6e4fe04a2969e_s390x"
],
"known_not_affected": [
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:31bd91156f49687d2efffd3be971d9ee0e16abb420b8e8b958caa88b97770020_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:a6315866c67ba350665f5a92f960a5a44e427ca37ae7505e2072af4e02c42f76_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:b3ad6fa1de658f3a40c8b183ab501ebc66b359d8cc01439d4215aa52769df213_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:bfde9ebea1fcd27b6d104d5f67db62e870878f9517ccbec2f649dd2c1af4a073_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:08fed161d59299881ff7a54db859feaf8ed7bdb8238d6cf12628ccb73575665e_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:09436fe2649ca384b1bc1fd8f736fb1d71392733310e66758ed9f289e00471f9_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:3b83670e1c0e9d1f5b76bd7b75d77072bc6208646bc2201bd0bd200dbc59e34a_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:927146f966e4c5c2908d29d8ab45a8f3071dbd5ebd9cf0424460a23f814a72a7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:38a3bc59511133cae56827eba879e7c82c5a974bf1f16b6e8d95e1f79821e669_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:3fa04db82e3ce6169270db0ce29107b69d8e044e0a1ab13a2bf1050b8c26d087_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:6041a918713d4464c73560b68c294a12d33f297a980d2f9d0e0cc8c300a96f24_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:98bd72ba69bdfb3070d87b3edcbd7050579a514b72cfd67c2926541ba52dbaf7_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:938abc970731c2eeda8e2b7b73e96d4dfcbf7587330c7b7e52117a577700e426_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:a0876a25ce85d7d4616212813f012422826f152b8d71065e75cd9c3e23034d8a_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:c77077a0cca835a503a6529c89ab19c4027f949d361afdf8a5a259e1e87b0d55_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:d5bbf3fe886f27cdc27363dcb175e004487d9c8f36de4f1f8516fbeda3a95224_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:0f5d8cae3ba4ea4fcdc5fb9d08f797d576bc225b92af66f193bd4b1324cda4b9_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:2d3588825f8a714fa59b1648d0934d064165e333f322f7f31f01f07b940d42d9_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:68aa571827f5331f1d5a3bd0c60ad441a18877ba11921aff2633940236bafcd4_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:9b80c9c61d4befefa7f6a65ae8c001ce7e343a1e4f251e5ebe025625d9511730_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:9b2c24401a91903f023096d2b641aa977acff423eb6770a8e4c4a81aecfd4e62_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:9d74585acc098c13f3e9dac5ae7f5ef337fa82bd7119d7f1849c5f8a50e84907_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:a6ee95d0ed82bddef084684d11fa770bd646d9be9bc65b3bc386d7c58b33975c_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:f7b8654eb8bf675c8c26f0ad395d790f990308d3ad6683bb61b484c92073bbac_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:2a598e7fd07db27100d9a53a328ac9a0535865883bddd1373f4f1f2705068d2f_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:4f8f0b02d0969753e156226a998d442746c238a2a50ea606a49ca0cf695b8925_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:63c02348faa7d4e26e35c69aef5453613dd607a26116823b931b89fe5311e181_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:ae224866f0085d2c00ab18a28d2aed076e455731903989a49a544abf49950d1f_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:0a90a13f006ef0b271079b728ef6d54081f36ae19b6d0e9ab4dc24ea52a30fad_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:3a53629645832974a883002e53198df7c28e59dd6d1df99bf321b52d0ef84b61_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:879315f438ca43abb607d6c97f8fbd4ca2d38209b142e2d97cc0598740273252_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:c6c4d01f5fcee6cad3fc870cace92f45000624760e6e93654bb5e814afeed7bb_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:50f7647620c78fd6b445379c8762f5e978113fe3552906376a24459263f27459_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:53e641f48ddc05c63da2e6bc24e9e4636a10de2c3599d8f5f78622bdebca07ca_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:57114b7a386c406715e342637558fab57afeef2e193517f99173a441f39401d5_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:dcdcaa90f292f2d7ad3f10acbedfab9f7f22f3432c3156055f34760d9bf9429c_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:3723b1d5c74f37cba219e203fd2026a718d4821595cb505ec6626684695da65b_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:562291f52b6bce98ec8795856b808545c4fe30047b54544c7f6c2ab4678480ff_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:e6dfac9bc3e467e141a425944782f5087ed967ac4d02d8d47442e3d61ba5b882_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:f683186c2cc8be9ec09b8efdec66d6b8b1f991c7f7b9fd398dc7c3f9ab8b3079_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:2471edd63a94473c68cf37ee50de643e40003f2c5bba84063c154e4888a7f0bd_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:7cef49d68df5d8efe52061a18920e07e6c7efa3016c0cea7d1747e67851f254a_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:d912383405599032acffbad22bc154f63a87dd429ba882fd7a94cb82fe650d8e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:f3034211e16de48af540efe4ee460395dba0a4a544fa4f277a12840a25df1730_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:181d1decb2f16fcf6f5938027ed346aca29126687bbe6cdcc601c25087f70d11_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:ab5e4d27e23448d99a37b8c05442bb1254083cdc4ff325e721d97d80ec27346c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:ac172243d158e126594f28317e0cfb37dc1790c9f2121e95fe52506b5e05fc91_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:fd96b6284d270effa0f838d960ea4218b72b54c4718513eb523658f2f4972682_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:c59d9cd479c62730eda5d482fb2f4e9fbc17a90a5a2861b130aafe1f3a27a333_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:e547f672b14b6e8fc2ffd300b150aedbd3f6b6b36ddcad612f7c992a936a7c82_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:ead1263d538974c48790c65e44cd9cab07a62c2893b2eeb250174e7cf58d7f9d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:ed0457a57c7b39b79fb308176f45ffe678938b25fbb8c15de2cedbe54b916f64_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:9847a5752ec77e17861dcdac5546ee5c53679c80c3569609b21d9080ee3b7ef3_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:d3c823e61a0682ddc85e576e86234e580992886de471035630f9c89bbad6ebb7_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:ded425ed0af88a1411a06e5191aee25c4c59f1de85b041eba95c9997686cf09e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:ee63f59942f9df04e95fc4266f0d194cd62a7ca08dd5478283884d0ab6003da7_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:724377cabaa284a5197e7505a7150c89631c2f2bcc629e074c7c0be18abd8e6f_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:cbf797c9e93413540b20ebee9191375ddd8185ef22dc8c9e23cc3a4c015abaf7_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:d7609d62a801cf07ef639abcd4f193b2d68967fadebbfddf2349003d7e9eaa44_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:f61fe90362f793225591eb7e2a86d5cdc6fb35aa087e9b6a6218a42b1c1d945d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:1c4de9460688800b62bad6fb13653ef4b52bf215e4d41674291193e9b8e71b24_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:4f1e59610b2fbedc56f425b3fbd8f16c9ea6ea96025f18a404fe48f6a49bdc1e_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:ab0d28306dd6daa03af79bdc2ea650e59a50a03317987c4cdd0d1ee70f95b597_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:b700a8bb7ea6e4253afb8bcf94e5ad086349980ca0716a87817724d3da3fdce1_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4015f46d2172db26a348635e2e8cbd4bbcdbbaa56a4b12c232676a3d0f5bbee2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4169252c61ec70b91b10c750d5f9ecd53f5c3c906766bba9103afbac3c3f9edf_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4ab72a192553c21de76754f06fe38cf443e686e4b4edc2aa2ceb2b6b9d95bb6c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:579ef0925c6f56ed48f22121767189431bef6c4eaa72b2648a1b91488357a51d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:2b796bf55ecf7a14d1c87d829a2b20d998fc2943686373105b0a50f5053ef836_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:7e960b59f64547f7e9602b7c066a51ab52aba929726aec2bacdf486a9d4d28fd_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:a43e430a2ec0b86fb6ade361677be298b4e27444388a9bca35ddafbf9c77277c_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:d2394b121256985e5ca322aea77bb0bf999ba2d7a6f1627e62bbc125c475dbbd_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:1868e2ea03d063b4cd64601cb0aaf5c9ea7f55e83eba2e2d4dcf6f830efeafc7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:4bfbf0bdc882979bc94d85a4aeff8caa0ec7887aec7412e32ae1442811325d06_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:844e3d69d3c26914e02612466021592a876e6e2dd6cf77084723a70f567ba0e2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:bbe04eb8fd197f15875f498e3c18b9a7a445380efb5f696422d79df99a34a881_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:2c9f9b47c01c5e5e017c583c6a09c5c52f40ef88acf789689265cb31ef328fb8_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:7b5e883efde312c1571c4825b523ff04ab57af6a9f4162a36b80b973f9602c46_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:d896dd89fb924da246fc729041d9debc019d8a4210cfd3de8883834e429cca10_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:ede3e22d4e4de49789622149dec23beaa7e0569a3715ac2262929df543e05bc3_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:273a393b8c62fbc4edb4bf4033c47d8b52bda56fc9cafa289d9513210840815b_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:71f1b590785ce7f4577ecd687dbab9bc3c5931c568a3108eb84279c7aa892046_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:d1e1b4310eb64891c9456be7c34547bf36b0aafdeb471a49f0892d7eaf8f41f4_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:e0a7514406c7ffae080db6d4db3bbf7b77a606ea4632bf09f8301ce1d3739bb5_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:2a4c6c061d154ed9c74707a7a2e2390fde2a150f36197386c3e49c0612d345b2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:6ffcc051c955e198c6d96b59bda0ef26b5124ebbdef5357d36a84534f2c7097c_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:c9258bf58373f9c6859789c8ec272cd7d702c37e063fc2ee53c66d296e7ee3d0_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:d83c6bb4f2a91d2c4de3ffbf4aa8ceecb695f8491ba7586d55275c62cd1931e6_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:67637c5cba3eca1597885823c6e44c13db445d0ef38751eb8364b69dbf07caac_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:68fb5c2a3c8a0d5e6bbcf2c5568969f6b13e72006d4d54bc5c57cd9a032d1bf6_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:9f5fa40c88b0f5d1ae3634632240817a91f4575f8eae9c005b8e35a55cf38003_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:fcbcee9fc7e0bbf5775a33ae9b7e3d7e48a90e2aa1cb85605e05612b6e4d4e30_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:0c165bb93ce933c7f9998a615908bfcca0b4eb38e32e24a1c823e63791b7604b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:42aa392f82bdc45a3b857d1ed44e224ddfd14db1e3dcbb74dcc850ac0540e964_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:9dcd0c0ecf1523bf05bd296edbecd85841b2753dee7a5c9df32437f9a8e31471_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:c5505c462e6b2c04a6e14bc1e22dfc42dc8adea8f6eaf0615cd58b1973b7d62e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:94950d339fa382d6911f12fc23dcaf2cdb2854c4cab654f6058f5bf0df1bb371_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:bcfbd2284cbeeba5a835aaf5a5590ddd8156bd881ca24fd0fe1465fade1f84c2_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:bd739ced163053224e5b0ea2f3cd577481c6b6c1162cc0fbc186f1716b4a1fbd_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:d40496f114898985cde3860b9664c34d8c32de85e4d3d846df91a6ba27a2e99c_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:3f7cbe7605595d712e14d9a17717fafc6c6e334f2ad3e821c34947ec78411046_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:96775900ea90e57487da6afe59d058b33cb977a0247a1bbeb1bd07bed2816398_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:caa6b121538e074312314d9888d9b423bd225aefa4f25eb145893b9fc548c0ad_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:e59c90cfe8160b28f9d2aa9e59b1d04d742df44d2195210ebc1946ee3cb78b6f_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:10c95e5c55ccc1a04e8d2ac28bd1afd3b9bb9a7e9e2a5e3e8efb301421539980_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:60a310d4464b4817845703d14e95729321b883fbfc79fbf2dd8d514bb3c675e9_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:70e6c14d72f14d25a90f44043932fbd3f824b30e8ad4b36307100726b24d9c06_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:784129cf69b3bf77a907fe909fd73a2a4d0fbd947fe0037e47aa1d62c6ffcf0b_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:26e58654cdd092cb812207cb4473f5f5988ebd708d95c34152c2e8c124f7297d_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:40e5d9634aa7469df8247758961d486cfac3e7d7f0b59184e11ed5571b46bf40_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:5b59faed336de07965755c893cb9d0ffc52ec90f61cc8c54487f6c0cac53322e_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:b59aea0c9e859025988b0f0c9b6e7748c4acf6d0b4cee35f3fabb7b84feb598b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:4def845360282dad99181b96bcd834b4863eab39e246fda2476234c561c652ec_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:b67aec868b6366cf04f3980b15588e1a0af5c88b2248958bc3884261ad390ca0_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:ceacf3491ebec6f5613011fe8d36b66d00f8b3697832615a4d7024e23125085e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:d9f6a520b818dcccbedb94720b5979ef1cdec2e02491c76e3decb3ee18f2085d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:3e6519c0c789b946eb1b811867c41c4f204440bad5734760c0aca4e3fc602e5a_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:95684cfaf4d5d91bc9fe8cfbf64a6f113e944e3f0c102d27851be5232eca0dbb_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:9cb20990af88287dd8a27de4e4ef12eb244577a1844482d26107359c6efe8efa_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:a69ebb0c7e817d44cfabd86ad13ef4cc94a8bf5b6e8a607d17b197603d64a224_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:0eea35a3af36d08db945a70c387cc38eb326f75b4ed322f09d8c91863cfe5d02_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:22c48db227cd6f2ecec746674e31ac7f5a983a418679fc91678a0aa0ebb49496_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:8e8d249c39d562f819d347f12610dda7f5c01215c41101bfd5dca008e04edf6e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:f8adb8dd40a204bacb51cd423803097a514ec8e8e9f52209e02ecf14cad622bb_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:1f7ed606f69a74943aedb0a956e5a71019f8a1ab53cd3f8166be0f55a69809b9_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:4841076eb82f1f1748345556ff6c4e02a17f1f63c661e375eaba720291cbaf6a_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:a79ac7dcae109aa526e2a218327dd8c5dba2b924fc27447a07199b3b2f2f67b3_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:dee022821852f2d5ebdbbd9f09c9b97997a905061dadb3f78433291d462d49a7_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:1a746b16f362a83f399255d925b322b3440b3d89ae4d64ab7962db3d82ee91a1_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:417a31bec11c3ffb70f40fa955069d5160dc12e2426b67e1d2e35ae3f7fa06df_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:89a3cb77fdb3dcbddfe96785a9ba3fa2b6132098fce028f859663b31fcf77a34_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:b1ba0b4cd8f515895af7b9f797f6ea5b661f7254ce019ce5115375639dcd06e9_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:0827c96b922ca185b7a7321a4f504e8a5dc01aadafcfd20443060546981339a8_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:b5b732dfc0ce3d740781eda9a72e1542c7a30b28b39d2be6e0ba470af06a9680_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:f74081e5eb03227ccff5717a7d139ceee6c5b610625ff7b99e639a2652bf7663_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:f80976ae4fc332600e1d8e1d70b42c038ea05d76ac2c5b1d7d0cbaddbe89140a_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:4029ece83812237ce8b1d394252e9561012e8cd94af40680a90284fbea1bc32a_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:63a3465a7539a8a286c846a84d63e3feca9a11758e4c0d697889b0bdeb26a25c_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:81c227d7c7599b0d4357ccdc3b567f31b67bbd1198c9e7ddba1864c299bad11b_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:f392bde8ce22aca058d77132cc709440442931679dbe725c52516f1cdc97b38d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:4825fab15300bc911e0b2b5c4ae342004bfcff95fa64af0fdb1085fadd132aa2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:68f879679911c2ca828551b900eca1c2f4e8caec7312fbba502fabc4778d1832_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:b4188ac728c746769ef6586663dd6d7d07db984b083397d2c76fe847ef22ea60_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:f2805fc1e6f37bc8acc3187ea8712d38f32151d584c10d5996c0ad7076cd638b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:1c943edcf23df14f254e4aabb93cbc1665bbc7902076b3f04bd80edd2fe324db_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:84c5d2b24caf68c3a6a6d078bd9f66de9fb88e769f6c09c11a248693d463ac21_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:907d6e24922d6d372bceb21ad830c254c6a9c9d6be0ac4f4edf22c236437a09d_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:923a3ee0e3d5b7341b96826e465e6856855f2801dbaf381d139a632c77bda1c5_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:285d2e2d103b458f0603435aedb4d779d85e48fed2267845b798f4a04a0df4c7_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:44981f5fcbc9086470143fae6e21a5de3baad2258d9f8c81accecb2faad6b2a2_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:5ba248d0bc8fcde70e210319bb962f4043e5e8ab8a5625c8f8f30ec96d47c6b7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:f681cdac28ee9ff6375fb39d7b7d12917a06043db44c16e8f84bdb9e09e7b5e7_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:2057531884d897574fc0648e5d3cf21c4549738ac5f35d8095f400cdb80049cc_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:8be0e50a132a2c974893f36b51f3f40b6d6e1f913ae0f9ee6319ef0d5ec455b7_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:a2edc5d233d1547fa2e1d01f29d8a914930735f7098289892430ba9a17d20ab7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:c81c7aeb3dd05801e279a9fcc8d6c3baf00a2ccc08eab53f8acc8bd4d2d129c4_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:25e17bf203568420587cf5907e84e4167afab84dfce549c91bea99e70290b742_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:277f4e8ac5fc292b9f0f2d123f924c6b5cbc0a2eeba3c87a0e61c5ee2399aaa9_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:76766b77ed53513cd254195b25d205ab6964522816e1e3662800e38a105abdf2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:c7ace45f7cb86055e2ba18e27a660f6aa6cb4eff497204294875d5dd1d63cce3_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:3780b1bc80ab7ebc3cfed06ce69346d589dc07b53cea65ad3ed92cc912284300_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:681b356709778083448892513b4559f693e002bfda897a57e2d065f736a902b5_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:d110b52ce8ea022b3d35e7c4b0ce3b646f30513cf8abb55327132565ea4a6a87_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:f076ab59f3abe061e4553a61f98a144a472297dba5ed924ca887f130e9372da9_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27145"
},
{
"category": "external",
"summary": "RHBZ#2484207",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484207"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27145",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27145"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27145",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27145"
},
{
"category": "external",
"summary": "https://go.dev/cl/783621",
"url": "https://go.dev/cl/783621"
},
{
"category": "external",
"summary": "https://go.dev/issue/79694",
"url": "https://go.dev/issue/79694"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw",
"url": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5037",
"url": "https://pkg.go.dev/vuln/GO-2026-5037"
}
],
"release_date": "2026-06-02T22:01:36.954000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T07:47:11+00:00",
"details": "Before you apply this update, make sure all previously released errata\nthat are relevant to your system are applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:1a93df314c31f10da7b1345fab07b15b846e28865764178e34124f84dc967152_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:34343f81973c3fbdd8630c32d0fad597745ea10f960ea64236408e58e0f10e14_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:7b3635784ebfb6343a73c9fa6de7bea57b3aacce1c49a0f7f250a471f7b897e3_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:f0a7fade2853193429bab16922b2e3bbe426e14632423d6550ff7dfb66d42827_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:2368703206d833e4cb73b7e8750efb9997633a6f9accbf032426bcfcae4c00d9_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:80b543b207e724e880ff932c514fe9c6a3925bfede1c31863531e4e69d050d40_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:82405a9a5715db5442dfa3d3f594888bd7b2f9c778d68357a7d8884f5ea46915_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:8fd2bda7b8d94ededf7973f76a159dd61105776a05d961ac9cfd9bee0a988213_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:03adc6277e2bf409391941c6f4508154abc38a0c043139978754f6d4fd32c5a8_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:7e100af30ed11325cb2cbee02af09306e53df5db5847f2a4b733cd307e3cd623_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:91b474b4808b18c279c9f8eb3be8e6d1e1e47cf2b5f9553acd901c74b20bddbc_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:d56f884a9700a4f193d6f3db1895bd54745ec77e02ead3d43bd6e4fe04a2969e_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:47737"
},
{
"category": "workaround",
"details": "A flaw was found in the Go standard library crypto/x509 package. When verifying a TLS certificate hostname, VerifyHostname processed each DNS Subject Alternative Name (SAN) entry in a loop and repeatedly split the candidate hostname on \".\" characters. For certificates with a very large DNS SAN list, CPU use could grow quadratically with the number of SAN entries and hostname labels. Because hostname verification runs before the certificate chain is built, this overhead can occur even when the certificate is not trusted.\n\nRed Hat rates this issue as Important. It affects Red Hat products that include the Go standard library crypto/x509 code from an affected Go toolchain version (before Go 1.25.11, or from Go 1.26.0 through Go 1.26.3). Applications and container images built with a fixed Go release (1.25.11 or later, or 1.26.4 or later) are not affected. Community distributions such as Fedora are also affected.\n\nUpstream fix: Go 1.25.11 and Go 1.26.4 (GO-2026-5037).",
"product_ids": [
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:31bd91156f49687d2efffd3be971d9ee0e16abb420b8e8b958caa88b97770020_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:a6315866c67ba350665f5a92f960a5a44e427ca37ae7505e2072af4e02c42f76_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:b3ad6fa1de658f3a40c8b183ab501ebc66b359d8cc01439d4215aa52769df213_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:bfde9ebea1fcd27b6d104d5f67db62e870878f9517ccbec2f649dd2c1af4a073_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:08fed161d59299881ff7a54db859feaf8ed7bdb8238d6cf12628ccb73575665e_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:09436fe2649ca384b1bc1fd8f736fb1d71392733310e66758ed9f289e00471f9_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:3b83670e1c0e9d1f5b76bd7b75d77072bc6208646bc2201bd0bd200dbc59e34a_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:927146f966e4c5c2908d29d8ab45a8f3071dbd5ebd9cf0424460a23f814a72a7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:38a3bc59511133cae56827eba879e7c82c5a974bf1f16b6e8d95e1f79821e669_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:3fa04db82e3ce6169270db0ce29107b69d8e044e0a1ab13a2bf1050b8c26d087_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:6041a918713d4464c73560b68c294a12d33f297a980d2f9d0e0cc8c300a96f24_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:98bd72ba69bdfb3070d87b3edcbd7050579a514b72cfd67c2926541ba52dbaf7_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:938abc970731c2eeda8e2b7b73e96d4dfcbf7587330c7b7e52117a577700e426_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:a0876a25ce85d7d4616212813f012422826f152b8d71065e75cd9c3e23034d8a_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:c77077a0cca835a503a6529c89ab19c4027f949d361afdf8a5a259e1e87b0d55_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:d5bbf3fe886f27cdc27363dcb175e004487d9c8f36de4f1f8516fbeda3a95224_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:0f5d8cae3ba4ea4fcdc5fb9d08f797d576bc225b92af66f193bd4b1324cda4b9_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:2d3588825f8a714fa59b1648d0934d064165e333f322f7f31f01f07b940d42d9_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:68aa571827f5331f1d5a3bd0c60ad441a18877ba11921aff2633940236bafcd4_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:9b80c9c61d4befefa7f6a65ae8c001ce7e343a1e4f251e5ebe025625d9511730_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:9b2c24401a91903f023096d2b641aa977acff423eb6770a8e4c4a81aecfd4e62_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:9d74585acc098c13f3e9dac5ae7f5ef337fa82bd7119d7f1849c5f8a50e84907_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:a6ee95d0ed82bddef084684d11fa770bd646d9be9bc65b3bc386d7c58b33975c_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:f7b8654eb8bf675c8c26f0ad395d790f990308d3ad6683bb61b484c92073bbac_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:2a598e7fd07db27100d9a53a328ac9a0535865883bddd1373f4f1f2705068d2f_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:4f8f0b02d0969753e156226a998d442746c238a2a50ea606a49ca0cf695b8925_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:63c02348faa7d4e26e35c69aef5453613dd607a26116823b931b89fe5311e181_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:ae224866f0085d2c00ab18a28d2aed076e455731903989a49a544abf49950d1f_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:0a90a13f006ef0b271079b728ef6d54081f36ae19b6d0e9ab4dc24ea52a30fad_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:3a53629645832974a883002e53198df7c28e59dd6d1df99bf321b52d0ef84b61_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:879315f438ca43abb607d6c97f8fbd4ca2d38209b142e2d97cc0598740273252_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:c6c4d01f5fcee6cad3fc870cace92f45000624760e6e93654bb5e814afeed7bb_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:50f7647620c78fd6b445379c8762f5e978113fe3552906376a24459263f27459_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:53e641f48ddc05c63da2e6bc24e9e4636a10de2c3599d8f5f78622bdebca07ca_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:57114b7a386c406715e342637558fab57afeef2e193517f99173a441f39401d5_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:dcdcaa90f292f2d7ad3f10acbedfab9f7f22f3432c3156055f34760d9bf9429c_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:3723b1d5c74f37cba219e203fd2026a718d4821595cb505ec6626684695da65b_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:562291f52b6bce98ec8795856b808545c4fe30047b54544c7f6c2ab4678480ff_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:e6dfac9bc3e467e141a425944782f5087ed967ac4d02d8d47442e3d61ba5b882_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:f683186c2cc8be9ec09b8efdec66d6b8b1f991c7f7b9fd398dc7c3f9ab8b3079_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:2471edd63a94473c68cf37ee50de643e40003f2c5bba84063c154e4888a7f0bd_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:7cef49d68df5d8efe52061a18920e07e6c7efa3016c0cea7d1747e67851f254a_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:d912383405599032acffbad22bc154f63a87dd429ba882fd7a94cb82fe650d8e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:f3034211e16de48af540efe4ee460395dba0a4a544fa4f277a12840a25df1730_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:181d1decb2f16fcf6f5938027ed346aca29126687bbe6cdcc601c25087f70d11_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:ab5e4d27e23448d99a37b8c05442bb1254083cdc4ff325e721d97d80ec27346c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:ac172243d158e126594f28317e0cfb37dc1790c9f2121e95fe52506b5e05fc91_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:fd96b6284d270effa0f838d960ea4218b72b54c4718513eb523658f2f4972682_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:c59d9cd479c62730eda5d482fb2f4e9fbc17a90a5a2861b130aafe1f3a27a333_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:e547f672b14b6e8fc2ffd300b150aedbd3f6b6b36ddcad612f7c992a936a7c82_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:ead1263d538974c48790c65e44cd9cab07a62c2893b2eeb250174e7cf58d7f9d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:ed0457a57c7b39b79fb308176f45ffe678938b25fbb8c15de2cedbe54b916f64_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:9847a5752ec77e17861dcdac5546ee5c53679c80c3569609b21d9080ee3b7ef3_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:d3c823e61a0682ddc85e576e86234e580992886de471035630f9c89bbad6ebb7_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:ded425ed0af88a1411a06e5191aee25c4c59f1de85b041eba95c9997686cf09e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:ee63f59942f9df04e95fc4266f0d194cd62a7ca08dd5478283884d0ab6003da7_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:724377cabaa284a5197e7505a7150c89631c2f2bcc629e074c7c0be18abd8e6f_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:cbf797c9e93413540b20ebee9191375ddd8185ef22dc8c9e23cc3a4c015abaf7_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:d7609d62a801cf07ef639abcd4f193b2d68967fadebbfddf2349003d7e9eaa44_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:f61fe90362f793225591eb7e2a86d5cdc6fb35aa087e9b6a6218a42b1c1d945d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:1c4de9460688800b62bad6fb13653ef4b52bf215e4d41674291193e9b8e71b24_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:4f1e59610b2fbedc56f425b3fbd8f16c9ea6ea96025f18a404fe48f6a49bdc1e_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:ab0d28306dd6daa03af79bdc2ea650e59a50a03317987c4cdd0d1ee70f95b597_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:b700a8bb7ea6e4253afb8bcf94e5ad086349980ca0716a87817724d3da3fdce1_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4015f46d2172db26a348635e2e8cbd4bbcdbbaa56a4b12c232676a3d0f5bbee2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4169252c61ec70b91b10c750d5f9ecd53f5c3c906766bba9103afbac3c3f9edf_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4ab72a192553c21de76754f06fe38cf443e686e4b4edc2aa2ceb2b6b9d95bb6c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:579ef0925c6f56ed48f22121767189431bef6c4eaa72b2648a1b91488357a51d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:2b796bf55ecf7a14d1c87d829a2b20d998fc2943686373105b0a50f5053ef836_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:7e960b59f64547f7e9602b7c066a51ab52aba929726aec2bacdf486a9d4d28fd_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:a43e430a2ec0b86fb6ade361677be298b4e27444388a9bca35ddafbf9c77277c_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:d2394b121256985e5ca322aea77bb0bf999ba2d7a6f1627e62bbc125c475dbbd_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:1868e2ea03d063b4cd64601cb0aaf5c9ea7f55e83eba2e2d4dcf6f830efeafc7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:4bfbf0bdc882979bc94d85a4aeff8caa0ec7887aec7412e32ae1442811325d06_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:844e3d69d3c26914e02612466021592a876e6e2dd6cf77084723a70f567ba0e2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:bbe04eb8fd197f15875f498e3c18b9a7a445380efb5f696422d79df99a34a881_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:2c9f9b47c01c5e5e017c583c6a09c5c52f40ef88acf789689265cb31ef328fb8_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:7b5e883efde312c1571c4825b523ff04ab57af6a9f4162a36b80b973f9602c46_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:d896dd89fb924da246fc729041d9debc019d8a4210cfd3de8883834e429cca10_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:ede3e22d4e4de49789622149dec23beaa7e0569a3715ac2262929df543e05bc3_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:273a393b8c62fbc4edb4bf4033c47d8b52bda56fc9cafa289d9513210840815b_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:71f1b590785ce7f4577ecd687dbab9bc3c5931c568a3108eb84279c7aa892046_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:d1e1b4310eb64891c9456be7c34547bf36b0aafdeb471a49f0892d7eaf8f41f4_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:e0a7514406c7ffae080db6d4db3bbf7b77a606ea4632bf09f8301ce1d3739bb5_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:2a4c6c061d154ed9c74707a7a2e2390fde2a150f36197386c3e49c0612d345b2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:6ffcc051c955e198c6d96b59bda0ef26b5124ebbdef5357d36a84534f2c7097c_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:c9258bf58373f9c6859789c8ec272cd7d702c37e063fc2ee53c66d296e7ee3d0_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:d83c6bb4f2a91d2c4de3ffbf4aa8ceecb695f8491ba7586d55275c62cd1931e6_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:67637c5cba3eca1597885823c6e44c13db445d0ef38751eb8364b69dbf07caac_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:68fb5c2a3c8a0d5e6bbcf2c5568969f6b13e72006d4d54bc5c57cd9a032d1bf6_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:9f5fa40c88b0f5d1ae3634632240817a91f4575f8eae9c005b8e35a55cf38003_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:fcbcee9fc7e0bbf5775a33ae9b7e3d7e48a90e2aa1cb85605e05612b6e4d4e30_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:0c165bb93ce933c7f9998a615908bfcca0b4eb38e32e24a1c823e63791b7604b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:42aa392f82bdc45a3b857d1ed44e224ddfd14db1e3dcbb74dcc850ac0540e964_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:9dcd0c0ecf1523bf05bd296edbecd85841b2753dee7a5c9df32437f9a8e31471_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:c5505c462e6b2c04a6e14bc1e22dfc42dc8adea8f6eaf0615cd58b1973b7d62e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:1a93df314c31f10da7b1345fab07b15b846e28865764178e34124f84dc967152_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:34343f81973c3fbdd8630c32d0fad597745ea10f960ea64236408e58e0f10e14_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:7b3635784ebfb6343a73c9fa6de7bea57b3aacce1c49a0f7f250a471f7b897e3_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:f0a7fade2853193429bab16922b2e3bbe426e14632423d6550ff7dfb66d42827_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:94950d339fa382d6911f12fc23dcaf2cdb2854c4cab654f6058f5bf0df1bb371_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:bcfbd2284cbeeba5a835aaf5a5590ddd8156bd881ca24fd0fe1465fade1f84c2_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:bd739ced163053224e5b0ea2f3cd577481c6b6c1162cc0fbc186f1716b4a1fbd_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:d40496f114898985cde3860b9664c34d8c32de85e4d3d846df91a6ba27a2e99c_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:3f7cbe7605595d712e14d9a17717fafc6c6e334f2ad3e821c34947ec78411046_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:96775900ea90e57487da6afe59d058b33cb977a0247a1bbeb1bd07bed2816398_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:caa6b121538e074312314d9888d9b423bd225aefa4f25eb145893b9fc548c0ad_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:e59c90cfe8160b28f9d2aa9e59b1d04d742df44d2195210ebc1946ee3cb78b6f_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:10c95e5c55ccc1a04e8d2ac28bd1afd3b9bb9a7e9e2a5e3e8efb301421539980_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:60a310d4464b4817845703d14e95729321b883fbfc79fbf2dd8d514bb3c675e9_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:70e6c14d72f14d25a90f44043932fbd3f824b30e8ad4b36307100726b24d9c06_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:784129cf69b3bf77a907fe909fd73a2a4d0fbd947fe0037e47aa1d62c6ffcf0b_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:26e58654cdd092cb812207cb4473f5f5988ebd708d95c34152c2e8c124f7297d_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:40e5d9634aa7469df8247758961d486cfac3e7d7f0b59184e11ed5571b46bf40_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:5b59faed336de07965755c893cb9d0ffc52ec90f61cc8c54487f6c0cac53322e_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:b59aea0c9e859025988b0f0c9b6e7748c4acf6d0b4cee35f3fabb7b84feb598b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:2368703206d833e4cb73b7e8750efb9997633a6f9accbf032426bcfcae4c00d9_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:80b543b207e724e880ff932c514fe9c6a3925bfede1c31863531e4e69d050d40_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:82405a9a5715db5442dfa3d3f594888bd7b2f9c778d68357a7d8884f5ea46915_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:8fd2bda7b8d94ededf7973f76a159dd61105776a05d961ac9cfd9bee0a988213_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:4def845360282dad99181b96bcd834b4863eab39e246fda2476234c561c652ec_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:b67aec868b6366cf04f3980b15588e1a0af5c88b2248958bc3884261ad390ca0_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:ceacf3491ebec6f5613011fe8d36b66d00f8b3697832615a4d7024e23125085e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:d9f6a520b818dcccbedb94720b5979ef1cdec2e02491c76e3decb3ee18f2085d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:3e6519c0c789b946eb1b811867c41c4f204440bad5734760c0aca4e3fc602e5a_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:95684cfaf4d5d91bc9fe8cfbf64a6f113e944e3f0c102d27851be5232eca0dbb_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:9cb20990af88287dd8a27de4e4ef12eb244577a1844482d26107359c6efe8efa_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:a69ebb0c7e817d44cfabd86ad13ef4cc94a8bf5b6e8a607d17b197603d64a224_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:0eea35a3af36d08db945a70c387cc38eb326f75b4ed322f09d8c91863cfe5d02_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:22c48db227cd6f2ecec746674e31ac7f5a983a418679fc91678a0aa0ebb49496_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:8e8d249c39d562f819d347f12610dda7f5c01215c41101bfd5dca008e04edf6e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:f8adb8dd40a204bacb51cd423803097a514ec8e8e9f52209e02ecf14cad622bb_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:03adc6277e2bf409391941c6f4508154abc38a0c043139978754f6d4fd32c5a8_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:7e100af30ed11325cb2cbee02af09306e53df5db5847f2a4b733cd307e3cd623_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:91b474b4808b18c279c9f8eb3be8e6d1e1e47cf2b5f9553acd901c74b20bddbc_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:d56f884a9700a4f193d6f3db1895bd54745ec77e02ead3d43bd6e4fe04a2969e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:1f7ed606f69a74943aedb0a956e5a71019f8a1ab53cd3f8166be0f55a69809b9_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:4841076eb82f1f1748345556ff6c4e02a17f1f63c661e375eaba720291cbaf6a_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:a79ac7dcae109aa526e2a218327dd8c5dba2b924fc27447a07199b3b2f2f67b3_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:dee022821852f2d5ebdbbd9f09c9b97997a905061dadb3f78433291d462d49a7_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:1a746b16f362a83f399255d925b322b3440b3d89ae4d64ab7962db3d82ee91a1_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:417a31bec11c3ffb70f40fa955069d5160dc12e2426b67e1d2e35ae3f7fa06df_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:89a3cb77fdb3dcbddfe96785a9ba3fa2b6132098fce028f859663b31fcf77a34_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:b1ba0b4cd8f515895af7b9f797f6ea5b661f7254ce019ce5115375639dcd06e9_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:0827c96b922ca185b7a7321a4f504e8a5dc01aadafcfd20443060546981339a8_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:b5b732dfc0ce3d740781eda9a72e1542c7a30b28b39d2be6e0ba470af06a9680_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:f74081e5eb03227ccff5717a7d139ceee6c5b610625ff7b99e639a2652bf7663_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:f80976ae4fc332600e1d8e1d70b42c038ea05d76ac2c5b1d7d0cbaddbe89140a_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:4029ece83812237ce8b1d394252e9561012e8cd94af40680a90284fbea1bc32a_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:63a3465a7539a8a286c846a84d63e3feca9a11758e4c0d697889b0bdeb26a25c_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:81c227d7c7599b0d4357ccdc3b567f31b67bbd1198c9e7ddba1864c299bad11b_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:f392bde8ce22aca058d77132cc709440442931679dbe725c52516f1cdc97b38d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:4825fab15300bc911e0b2b5c4ae342004bfcff95fa64af0fdb1085fadd132aa2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:68f879679911c2ca828551b900eca1c2f4e8caec7312fbba502fabc4778d1832_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:b4188ac728c746769ef6586663dd6d7d07db984b083397d2c76fe847ef22ea60_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:f2805fc1e6f37bc8acc3187ea8712d38f32151d584c10d5996c0ad7076cd638b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:1c943edcf23df14f254e4aabb93cbc1665bbc7902076b3f04bd80edd2fe324db_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:84c5d2b24caf68c3a6a6d078bd9f66de9fb88e769f6c09c11a248693d463ac21_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:907d6e24922d6d372bceb21ad830c254c6a9c9d6be0ac4f4edf22c236437a09d_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:923a3ee0e3d5b7341b96826e465e6856855f2801dbaf381d139a632c77bda1c5_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:285d2e2d103b458f0603435aedb4d779d85e48fed2267845b798f4a04a0df4c7_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:44981f5fcbc9086470143fae6e21a5de3baad2258d9f8c81accecb2faad6b2a2_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:5ba248d0bc8fcde70e210319bb962f4043e5e8ab8a5625c8f8f30ec96d47c6b7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:f681cdac28ee9ff6375fb39d7b7d12917a06043db44c16e8f84bdb9e09e7b5e7_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:2057531884d897574fc0648e5d3cf21c4549738ac5f35d8095f400cdb80049cc_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:8be0e50a132a2c974893f36b51f3f40b6d6e1f913ae0f9ee6319ef0d5ec455b7_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:a2edc5d233d1547fa2e1d01f29d8a914930735f7098289892430ba9a17d20ab7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:c81c7aeb3dd05801e279a9fcc8d6c3baf00a2ccc08eab53f8acc8bd4d2d129c4_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:25e17bf203568420587cf5907e84e4167afab84dfce549c91bea99e70290b742_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:277f4e8ac5fc292b9f0f2d123f924c6b5cbc0a2eeba3c87a0e61c5ee2399aaa9_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:76766b77ed53513cd254195b25d205ab6964522816e1e3662800e38a105abdf2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:c7ace45f7cb86055e2ba18e27a660f6aa6cb4eff497204294875d5dd1d63cce3_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:3780b1bc80ab7ebc3cfed06ce69346d589dc07b53cea65ad3ed92cc912284300_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:681b356709778083448892513b4559f693e002bfda897a57e2d065f736a902b5_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:d110b52ce8ea022b3d35e7c4b0ce3b646f30513cf8abb55327132565ea4a6a87_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:f076ab59f3abe061e4553a61f98a144a472297dba5ed924ca887f130e9372da9_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:31bd91156f49687d2efffd3be971d9ee0e16abb420b8e8b958caa88b97770020_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:a6315866c67ba350665f5a92f960a5a44e427ca37ae7505e2072af4e02c42f76_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:b3ad6fa1de658f3a40c8b183ab501ebc66b359d8cc01439d4215aa52769df213_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:bfde9ebea1fcd27b6d104d5f67db62e870878f9517ccbec2f649dd2c1af4a073_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:08fed161d59299881ff7a54db859feaf8ed7bdb8238d6cf12628ccb73575665e_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:09436fe2649ca384b1bc1fd8f736fb1d71392733310e66758ed9f289e00471f9_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:3b83670e1c0e9d1f5b76bd7b75d77072bc6208646bc2201bd0bd200dbc59e34a_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:927146f966e4c5c2908d29d8ab45a8f3071dbd5ebd9cf0424460a23f814a72a7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:38a3bc59511133cae56827eba879e7c82c5a974bf1f16b6e8d95e1f79821e669_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:3fa04db82e3ce6169270db0ce29107b69d8e044e0a1ab13a2bf1050b8c26d087_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:6041a918713d4464c73560b68c294a12d33f297a980d2f9d0e0cc8c300a96f24_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:98bd72ba69bdfb3070d87b3edcbd7050579a514b72cfd67c2926541ba52dbaf7_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:938abc970731c2eeda8e2b7b73e96d4dfcbf7587330c7b7e52117a577700e426_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:a0876a25ce85d7d4616212813f012422826f152b8d71065e75cd9c3e23034d8a_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:c77077a0cca835a503a6529c89ab19c4027f949d361afdf8a5a259e1e87b0d55_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:d5bbf3fe886f27cdc27363dcb175e004487d9c8f36de4f1f8516fbeda3a95224_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:0f5d8cae3ba4ea4fcdc5fb9d08f797d576bc225b92af66f193bd4b1324cda4b9_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:2d3588825f8a714fa59b1648d0934d064165e333f322f7f31f01f07b940d42d9_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:68aa571827f5331f1d5a3bd0c60ad441a18877ba11921aff2633940236bafcd4_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:9b80c9c61d4befefa7f6a65ae8c001ce7e343a1e4f251e5ebe025625d9511730_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:9b2c24401a91903f023096d2b641aa977acff423eb6770a8e4c4a81aecfd4e62_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:9d74585acc098c13f3e9dac5ae7f5ef337fa82bd7119d7f1849c5f8a50e84907_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:a6ee95d0ed82bddef084684d11fa770bd646d9be9bc65b3bc386d7c58b33975c_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:f7b8654eb8bf675c8c26f0ad395d790f990308d3ad6683bb61b484c92073bbac_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:2a598e7fd07db27100d9a53a328ac9a0535865883bddd1373f4f1f2705068d2f_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:4f8f0b02d0969753e156226a998d442746c238a2a50ea606a49ca0cf695b8925_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:63c02348faa7d4e26e35c69aef5453613dd607a26116823b931b89fe5311e181_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:ae224866f0085d2c00ab18a28d2aed076e455731903989a49a544abf49950d1f_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:0a90a13f006ef0b271079b728ef6d54081f36ae19b6d0e9ab4dc24ea52a30fad_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:3a53629645832974a883002e53198df7c28e59dd6d1df99bf321b52d0ef84b61_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:879315f438ca43abb607d6c97f8fbd4ca2d38209b142e2d97cc0598740273252_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:c6c4d01f5fcee6cad3fc870cace92f45000624760e6e93654bb5e814afeed7bb_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:50f7647620c78fd6b445379c8762f5e978113fe3552906376a24459263f27459_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:53e641f48ddc05c63da2e6bc24e9e4636a10de2c3599d8f5f78622bdebca07ca_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:57114b7a386c406715e342637558fab57afeef2e193517f99173a441f39401d5_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:dcdcaa90f292f2d7ad3f10acbedfab9f7f22f3432c3156055f34760d9bf9429c_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:3723b1d5c74f37cba219e203fd2026a718d4821595cb505ec6626684695da65b_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:562291f52b6bce98ec8795856b808545c4fe30047b54544c7f6c2ab4678480ff_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:e6dfac9bc3e467e141a425944782f5087ed967ac4d02d8d47442e3d61ba5b882_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:f683186c2cc8be9ec09b8efdec66d6b8b1f991c7f7b9fd398dc7c3f9ab8b3079_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:2471edd63a94473c68cf37ee50de643e40003f2c5bba84063c154e4888a7f0bd_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:7cef49d68df5d8efe52061a18920e07e6c7efa3016c0cea7d1747e67851f254a_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:d912383405599032acffbad22bc154f63a87dd429ba882fd7a94cb82fe650d8e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:f3034211e16de48af540efe4ee460395dba0a4a544fa4f277a12840a25df1730_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:181d1decb2f16fcf6f5938027ed346aca29126687bbe6cdcc601c25087f70d11_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:ab5e4d27e23448d99a37b8c05442bb1254083cdc4ff325e721d97d80ec27346c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:ac172243d158e126594f28317e0cfb37dc1790c9f2121e95fe52506b5e05fc91_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:fd96b6284d270effa0f838d960ea4218b72b54c4718513eb523658f2f4972682_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:c59d9cd479c62730eda5d482fb2f4e9fbc17a90a5a2861b130aafe1f3a27a333_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:e547f672b14b6e8fc2ffd300b150aedbd3f6b6b36ddcad612f7c992a936a7c82_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:ead1263d538974c48790c65e44cd9cab07a62c2893b2eeb250174e7cf58d7f9d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:ed0457a57c7b39b79fb308176f45ffe678938b25fbb8c15de2cedbe54b916f64_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:9847a5752ec77e17861dcdac5546ee5c53679c80c3569609b21d9080ee3b7ef3_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:d3c823e61a0682ddc85e576e86234e580992886de471035630f9c89bbad6ebb7_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:ded425ed0af88a1411a06e5191aee25c4c59f1de85b041eba95c9997686cf09e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:ee63f59942f9df04e95fc4266f0d194cd62a7ca08dd5478283884d0ab6003da7_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:724377cabaa284a5197e7505a7150c89631c2f2bcc629e074c7c0be18abd8e6f_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:cbf797c9e93413540b20ebee9191375ddd8185ef22dc8c9e23cc3a4c015abaf7_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:d7609d62a801cf07ef639abcd4f193b2d68967fadebbfddf2349003d7e9eaa44_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:f61fe90362f793225591eb7e2a86d5cdc6fb35aa087e9b6a6218a42b1c1d945d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:1c4de9460688800b62bad6fb13653ef4b52bf215e4d41674291193e9b8e71b24_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:4f1e59610b2fbedc56f425b3fbd8f16c9ea6ea96025f18a404fe48f6a49bdc1e_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:ab0d28306dd6daa03af79bdc2ea650e59a50a03317987c4cdd0d1ee70f95b597_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:b700a8bb7ea6e4253afb8bcf94e5ad086349980ca0716a87817724d3da3fdce1_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4015f46d2172db26a348635e2e8cbd4bbcdbbaa56a4b12c232676a3d0f5bbee2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4169252c61ec70b91b10c750d5f9ecd53f5c3c906766bba9103afbac3c3f9edf_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4ab72a192553c21de76754f06fe38cf443e686e4b4edc2aa2ceb2b6b9d95bb6c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:579ef0925c6f56ed48f22121767189431bef6c4eaa72b2648a1b91488357a51d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:2b796bf55ecf7a14d1c87d829a2b20d998fc2943686373105b0a50f5053ef836_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:7e960b59f64547f7e9602b7c066a51ab52aba929726aec2bacdf486a9d4d28fd_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:a43e430a2ec0b86fb6ade361677be298b4e27444388a9bca35ddafbf9c77277c_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:d2394b121256985e5ca322aea77bb0bf999ba2d7a6f1627e62bbc125c475dbbd_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:1868e2ea03d063b4cd64601cb0aaf5c9ea7f55e83eba2e2d4dcf6f830efeafc7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:4bfbf0bdc882979bc94d85a4aeff8caa0ec7887aec7412e32ae1442811325d06_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:844e3d69d3c26914e02612466021592a876e6e2dd6cf77084723a70f567ba0e2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:bbe04eb8fd197f15875f498e3c18b9a7a445380efb5f696422d79df99a34a881_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:2c9f9b47c01c5e5e017c583c6a09c5c52f40ef88acf789689265cb31ef328fb8_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:7b5e883efde312c1571c4825b523ff04ab57af6a9f4162a36b80b973f9602c46_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:d896dd89fb924da246fc729041d9debc019d8a4210cfd3de8883834e429cca10_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:ede3e22d4e4de49789622149dec23beaa7e0569a3715ac2262929df543e05bc3_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:273a393b8c62fbc4edb4bf4033c47d8b52bda56fc9cafa289d9513210840815b_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:71f1b590785ce7f4577ecd687dbab9bc3c5931c568a3108eb84279c7aa892046_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:d1e1b4310eb64891c9456be7c34547bf36b0aafdeb471a49f0892d7eaf8f41f4_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:e0a7514406c7ffae080db6d4db3bbf7b77a606ea4632bf09f8301ce1d3739bb5_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:2a4c6c061d154ed9c74707a7a2e2390fde2a150f36197386c3e49c0612d345b2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:6ffcc051c955e198c6d96b59bda0ef26b5124ebbdef5357d36a84534f2c7097c_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:c9258bf58373f9c6859789c8ec272cd7d702c37e063fc2ee53c66d296e7ee3d0_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:d83c6bb4f2a91d2c4de3ffbf4aa8ceecb695f8491ba7586d55275c62cd1931e6_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:67637c5cba3eca1597885823c6e44c13db445d0ef38751eb8364b69dbf07caac_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:68fb5c2a3c8a0d5e6bbcf2c5568969f6b13e72006d4d54bc5c57cd9a032d1bf6_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:9f5fa40c88b0f5d1ae3634632240817a91f4575f8eae9c005b8e35a55cf38003_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:fcbcee9fc7e0bbf5775a33ae9b7e3d7e48a90e2aa1cb85605e05612b6e4d4e30_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:0c165bb93ce933c7f9998a615908bfcca0b4eb38e32e24a1c823e63791b7604b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:42aa392f82bdc45a3b857d1ed44e224ddfd14db1e3dcbb74dcc850ac0540e964_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:9dcd0c0ecf1523bf05bd296edbecd85841b2753dee7a5c9df32437f9a8e31471_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:c5505c462e6b2c04a6e14bc1e22dfc42dc8adea8f6eaf0615cd58b1973b7d62e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:1a93df314c31f10da7b1345fab07b15b846e28865764178e34124f84dc967152_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:34343f81973c3fbdd8630c32d0fad597745ea10f960ea64236408e58e0f10e14_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:7b3635784ebfb6343a73c9fa6de7bea57b3aacce1c49a0f7f250a471f7b897e3_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:f0a7fade2853193429bab16922b2e3bbe426e14632423d6550ff7dfb66d42827_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:94950d339fa382d6911f12fc23dcaf2cdb2854c4cab654f6058f5bf0df1bb371_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:bcfbd2284cbeeba5a835aaf5a5590ddd8156bd881ca24fd0fe1465fade1f84c2_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:bd739ced163053224e5b0ea2f3cd577481c6b6c1162cc0fbc186f1716b4a1fbd_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:d40496f114898985cde3860b9664c34d8c32de85e4d3d846df91a6ba27a2e99c_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:3f7cbe7605595d712e14d9a17717fafc6c6e334f2ad3e821c34947ec78411046_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:96775900ea90e57487da6afe59d058b33cb977a0247a1bbeb1bd07bed2816398_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:caa6b121538e074312314d9888d9b423bd225aefa4f25eb145893b9fc548c0ad_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:e59c90cfe8160b28f9d2aa9e59b1d04d742df44d2195210ebc1946ee3cb78b6f_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:10c95e5c55ccc1a04e8d2ac28bd1afd3b9bb9a7e9e2a5e3e8efb301421539980_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:60a310d4464b4817845703d14e95729321b883fbfc79fbf2dd8d514bb3c675e9_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:70e6c14d72f14d25a90f44043932fbd3f824b30e8ad4b36307100726b24d9c06_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:784129cf69b3bf77a907fe909fd73a2a4d0fbd947fe0037e47aa1d62c6ffcf0b_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:26e58654cdd092cb812207cb4473f5f5988ebd708d95c34152c2e8c124f7297d_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:40e5d9634aa7469df8247758961d486cfac3e7d7f0b59184e11ed5571b46bf40_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:5b59faed336de07965755c893cb9d0ffc52ec90f61cc8c54487f6c0cac53322e_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:b59aea0c9e859025988b0f0c9b6e7748c4acf6d0b4cee35f3fabb7b84feb598b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:2368703206d833e4cb73b7e8750efb9997633a6f9accbf032426bcfcae4c00d9_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:80b543b207e724e880ff932c514fe9c6a3925bfede1c31863531e4e69d050d40_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:82405a9a5715db5442dfa3d3f594888bd7b2f9c778d68357a7d8884f5ea46915_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:8fd2bda7b8d94ededf7973f76a159dd61105776a05d961ac9cfd9bee0a988213_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:4def845360282dad99181b96bcd834b4863eab39e246fda2476234c561c652ec_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:b67aec868b6366cf04f3980b15588e1a0af5c88b2248958bc3884261ad390ca0_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:ceacf3491ebec6f5613011fe8d36b66d00f8b3697832615a4d7024e23125085e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:d9f6a520b818dcccbedb94720b5979ef1cdec2e02491c76e3decb3ee18f2085d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:3e6519c0c789b946eb1b811867c41c4f204440bad5734760c0aca4e3fc602e5a_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:95684cfaf4d5d91bc9fe8cfbf64a6f113e944e3f0c102d27851be5232eca0dbb_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:9cb20990af88287dd8a27de4e4ef12eb244577a1844482d26107359c6efe8efa_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:a69ebb0c7e817d44cfabd86ad13ef4cc94a8bf5b6e8a607d17b197603d64a224_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:0eea35a3af36d08db945a70c387cc38eb326f75b4ed322f09d8c91863cfe5d02_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:22c48db227cd6f2ecec746674e31ac7f5a983a418679fc91678a0aa0ebb49496_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:8e8d249c39d562f819d347f12610dda7f5c01215c41101bfd5dca008e04edf6e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:f8adb8dd40a204bacb51cd423803097a514ec8e8e9f52209e02ecf14cad622bb_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:03adc6277e2bf409391941c6f4508154abc38a0c043139978754f6d4fd32c5a8_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:7e100af30ed11325cb2cbee02af09306e53df5db5847f2a4b733cd307e3cd623_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:91b474b4808b18c279c9f8eb3be8e6d1e1e47cf2b5f9553acd901c74b20bddbc_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:d56f884a9700a4f193d6f3db1895bd54745ec77e02ead3d43bd6e4fe04a2969e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:1f7ed606f69a74943aedb0a956e5a71019f8a1ab53cd3f8166be0f55a69809b9_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:4841076eb82f1f1748345556ff6c4e02a17f1f63c661e375eaba720291cbaf6a_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:a79ac7dcae109aa526e2a218327dd8c5dba2b924fc27447a07199b3b2f2f67b3_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:dee022821852f2d5ebdbbd9f09c9b97997a905061dadb3f78433291d462d49a7_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:1a746b16f362a83f399255d925b322b3440b3d89ae4d64ab7962db3d82ee91a1_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:417a31bec11c3ffb70f40fa955069d5160dc12e2426b67e1d2e35ae3f7fa06df_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:89a3cb77fdb3dcbddfe96785a9ba3fa2b6132098fce028f859663b31fcf77a34_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:b1ba0b4cd8f515895af7b9f797f6ea5b661f7254ce019ce5115375639dcd06e9_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:0827c96b922ca185b7a7321a4f504e8a5dc01aadafcfd20443060546981339a8_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:b5b732dfc0ce3d740781eda9a72e1542c7a30b28b39d2be6e0ba470af06a9680_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:f74081e5eb03227ccff5717a7d139ceee6c5b610625ff7b99e639a2652bf7663_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:f80976ae4fc332600e1d8e1d70b42c038ea05d76ac2c5b1d7d0cbaddbe89140a_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:4029ece83812237ce8b1d394252e9561012e8cd94af40680a90284fbea1bc32a_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:63a3465a7539a8a286c846a84d63e3feca9a11758e4c0d697889b0bdeb26a25c_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:81c227d7c7599b0d4357ccdc3b567f31b67bbd1198c9e7ddba1864c299bad11b_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:f392bde8ce22aca058d77132cc709440442931679dbe725c52516f1cdc97b38d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:4825fab15300bc911e0b2b5c4ae342004bfcff95fa64af0fdb1085fadd132aa2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:68f879679911c2ca828551b900eca1c2f4e8caec7312fbba502fabc4778d1832_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:b4188ac728c746769ef6586663dd6d7d07db984b083397d2c76fe847ef22ea60_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:f2805fc1e6f37bc8acc3187ea8712d38f32151d584c10d5996c0ad7076cd638b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:1c943edcf23df14f254e4aabb93cbc1665bbc7902076b3f04bd80edd2fe324db_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:84c5d2b24caf68c3a6a6d078bd9f66de9fb88e769f6c09c11a248693d463ac21_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:907d6e24922d6d372bceb21ad830c254c6a9c9d6be0ac4f4edf22c236437a09d_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:923a3ee0e3d5b7341b96826e465e6856855f2801dbaf381d139a632c77bda1c5_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:285d2e2d103b458f0603435aedb4d779d85e48fed2267845b798f4a04a0df4c7_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:44981f5fcbc9086470143fae6e21a5de3baad2258d9f8c81accecb2faad6b2a2_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:5ba248d0bc8fcde70e210319bb962f4043e5e8ab8a5625c8f8f30ec96d47c6b7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:f681cdac28ee9ff6375fb39d7b7d12917a06043db44c16e8f84bdb9e09e7b5e7_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:2057531884d897574fc0648e5d3cf21c4549738ac5f35d8095f400cdb80049cc_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:8be0e50a132a2c974893f36b51f3f40b6d6e1f913ae0f9ee6319ef0d5ec455b7_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:a2edc5d233d1547fa2e1d01f29d8a914930735f7098289892430ba9a17d20ab7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:c81c7aeb3dd05801e279a9fcc8d6c3baf00a2ccc08eab53f8acc8bd4d2d129c4_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:25e17bf203568420587cf5907e84e4167afab84dfce549c91bea99e70290b742_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:277f4e8ac5fc292b9f0f2d123f924c6b5cbc0a2eeba3c87a0e61c5ee2399aaa9_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:76766b77ed53513cd254195b25d205ab6964522816e1e3662800e38a105abdf2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:c7ace45f7cb86055e2ba18e27a660f6aa6cb4eff497204294875d5dd1d63cce3_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:3780b1bc80ab7ebc3cfed06ce69346d589dc07b53cea65ad3ed92cc912284300_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:681b356709778083448892513b4559f693e002bfda897a57e2d065f736a902b5_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:d110b52ce8ea022b3d35e7c4b0ce3b646f30513cf8abb55327132565ea4a6a87_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:f076ab59f3abe061e4553a61f98a144a472297dba5ed924ca887f130e9372da9_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries"
},
{
"cve": "CVE-2026-39821",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-05-22T16:00:52.844126+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:31bd91156f49687d2efffd3be971d9ee0e16abb420b8e8b958caa88b97770020_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:a6315866c67ba350665f5a92f960a5a44e427ca37ae7505e2072af4e02c42f76_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:b3ad6fa1de658f3a40c8b183ab501ebc66b359d8cc01439d4215aa52769df213_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:bfde9ebea1fcd27b6d104d5f67db62e870878f9517ccbec2f649dd2c1af4a073_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:08fed161d59299881ff7a54db859feaf8ed7bdb8238d6cf12628ccb73575665e_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:09436fe2649ca384b1bc1fd8f736fb1d71392733310e66758ed9f289e00471f9_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:3b83670e1c0e9d1f5b76bd7b75d77072bc6208646bc2201bd0bd200dbc59e34a_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:927146f966e4c5c2908d29d8ab45a8f3071dbd5ebd9cf0424460a23f814a72a7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:38a3bc59511133cae56827eba879e7c82c5a974bf1f16b6e8d95e1f79821e669_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:3fa04db82e3ce6169270db0ce29107b69d8e044e0a1ab13a2bf1050b8c26d087_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:6041a918713d4464c73560b68c294a12d33f297a980d2f9d0e0cc8c300a96f24_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:98bd72ba69bdfb3070d87b3edcbd7050579a514b72cfd67c2926541ba52dbaf7_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:938abc970731c2eeda8e2b7b73e96d4dfcbf7587330c7b7e52117a577700e426_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:a0876a25ce85d7d4616212813f012422826f152b8d71065e75cd9c3e23034d8a_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:c77077a0cca835a503a6529c89ab19c4027f949d361afdf8a5a259e1e87b0d55_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:d5bbf3fe886f27cdc27363dcb175e004487d9c8f36de4f1f8516fbeda3a95224_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:0f5d8cae3ba4ea4fcdc5fb9d08f797d576bc225b92af66f193bd4b1324cda4b9_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:2d3588825f8a714fa59b1648d0934d064165e333f322f7f31f01f07b940d42d9_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:68aa571827f5331f1d5a3bd0c60ad441a18877ba11921aff2633940236bafcd4_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:9b80c9c61d4befefa7f6a65ae8c001ce7e343a1e4f251e5ebe025625d9511730_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:9b2c24401a91903f023096d2b641aa977acff423eb6770a8e4c4a81aecfd4e62_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:9d74585acc098c13f3e9dac5ae7f5ef337fa82bd7119d7f1849c5f8a50e84907_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:a6ee95d0ed82bddef084684d11fa770bd646d9be9bc65b3bc386d7c58b33975c_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:f7b8654eb8bf675c8c26f0ad395d790f990308d3ad6683bb61b484c92073bbac_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:2a598e7fd07db27100d9a53a328ac9a0535865883bddd1373f4f1f2705068d2f_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:4f8f0b02d0969753e156226a998d442746c238a2a50ea606a49ca0cf695b8925_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:63c02348faa7d4e26e35c69aef5453613dd607a26116823b931b89fe5311e181_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:ae224866f0085d2c00ab18a28d2aed076e455731903989a49a544abf49950d1f_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:0a90a13f006ef0b271079b728ef6d54081f36ae19b6d0e9ab4dc24ea52a30fad_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:3a53629645832974a883002e53198df7c28e59dd6d1df99bf321b52d0ef84b61_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:879315f438ca43abb607d6c97f8fbd4ca2d38209b142e2d97cc0598740273252_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:c6c4d01f5fcee6cad3fc870cace92f45000624760e6e93654bb5e814afeed7bb_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:50f7647620c78fd6b445379c8762f5e978113fe3552906376a24459263f27459_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:53e641f48ddc05c63da2e6bc24e9e4636a10de2c3599d8f5f78622bdebca07ca_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:57114b7a386c406715e342637558fab57afeef2e193517f99173a441f39401d5_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:dcdcaa90f292f2d7ad3f10acbedfab9f7f22f3432c3156055f34760d9bf9429c_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:3723b1d5c74f37cba219e203fd2026a718d4821595cb505ec6626684695da65b_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:562291f52b6bce98ec8795856b808545c4fe30047b54544c7f6c2ab4678480ff_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:e6dfac9bc3e467e141a425944782f5087ed967ac4d02d8d47442e3d61ba5b882_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:f683186c2cc8be9ec09b8efdec66d6b8b1f991c7f7b9fd398dc7c3f9ab8b3079_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:2471edd63a94473c68cf37ee50de643e40003f2c5bba84063c154e4888a7f0bd_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:7cef49d68df5d8efe52061a18920e07e6c7efa3016c0cea7d1747e67851f254a_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:d912383405599032acffbad22bc154f63a87dd429ba882fd7a94cb82fe650d8e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:f3034211e16de48af540efe4ee460395dba0a4a544fa4f277a12840a25df1730_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:181d1decb2f16fcf6f5938027ed346aca29126687bbe6cdcc601c25087f70d11_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:ab5e4d27e23448d99a37b8c05442bb1254083cdc4ff325e721d97d80ec27346c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:ac172243d158e126594f28317e0cfb37dc1790c9f2121e95fe52506b5e05fc91_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:fd96b6284d270effa0f838d960ea4218b72b54c4718513eb523658f2f4972682_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:c59d9cd479c62730eda5d482fb2f4e9fbc17a90a5a2861b130aafe1f3a27a333_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:e547f672b14b6e8fc2ffd300b150aedbd3f6b6b36ddcad612f7c992a936a7c82_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:ead1263d538974c48790c65e44cd9cab07a62c2893b2eeb250174e7cf58d7f9d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:ed0457a57c7b39b79fb308176f45ffe678938b25fbb8c15de2cedbe54b916f64_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:9847a5752ec77e17861dcdac5546ee5c53679c80c3569609b21d9080ee3b7ef3_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:d3c823e61a0682ddc85e576e86234e580992886de471035630f9c89bbad6ebb7_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:ded425ed0af88a1411a06e5191aee25c4c59f1de85b041eba95c9997686cf09e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:ee63f59942f9df04e95fc4266f0d194cd62a7ca08dd5478283884d0ab6003da7_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:724377cabaa284a5197e7505a7150c89631c2f2bcc629e074c7c0be18abd8e6f_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:cbf797c9e93413540b20ebee9191375ddd8185ef22dc8c9e23cc3a4c015abaf7_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:d7609d62a801cf07ef639abcd4f193b2d68967fadebbfddf2349003d7e9eaa44_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:f61fe90362f793225591eb7e2a86d5cdc6fb35aa087e9b6a6218a42b1c1d945d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:1c4de9460688800b62bad6fb13653ef4b52bf215e4d41674291193e9b8e71b24_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:4f1e59610b2fbedc56f425b3fbd8f16c9ea6ea96025f18a404fe48f6a49bdc1e_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:ab0d28306dd6daa03af79bdc2ea650e59a50a03317987c4cdd0d1ee70f95b597_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:b700a8bb7ea6e4253afb8bcf94e5ad086349980ca0716a87817724d3da3fdce1_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4015f46d2172db26a348635e2e8cbd4bbcdbbaa56a4b12c232676a3d0f5bbee2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4169252c61ec70b91b10c750d5f9ecd53f5c3c906766bba9103afbac3c3f9edf_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4ab72a192553c21de76754f06fe38cf443e686e4b4edc2aa2ceb2b6b9d95bb6c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:579ef0925c6f56ed48f22121767189431bef6c4eaa72b2648a1b91488357a51d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:2b796bf55ecf7a14d1c87d829a2b20d998fc2943686373105b0a50f5053ef836_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:7e960b59f64547f7e9602b7c066a51ab52aba929726aec2bacdf486a9d4d28fd_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:a43e430a2ec0b86fb6ade361677be298b4e27444388a9bca35ddafbf9c77277c_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:d2394b121256985e5ca322aea77bb0bf999ba2d7a6f1627e62bbc125c475dbbd_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:1868e2ea03d063b4cd64601cb0aaf5c9ea7f55e83eba2e2d4dcf6f830efeafc7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:4bfbf0bdc882979bc94d85a4aeff8caa0ec7887aec7412e32ae1442811325d06_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:844e3d69d3c26914e02612466021592a876e6e2dd6cf77084723a70f567ba0e2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:bbe04eb8fd197f15875f498e3c18b9a7a445380efb5f696422d79df99a34a881_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:2c9f9b47c01c5e5e017c583c6a09c5c52f40ef88acf789689265cb31ef328fb8_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:7b5e883efde312c1571c4825b523ff04ab57af6a9f4162a36b80b973f9602c46_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:d896dd89fb924da246fc729041d9debc019d8a4210cfd3de8883834e429cca10_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:ede3e22d4e4de49789622149dec23beaa7e0569a3715ac2262929df543e05bc3_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:273a393b8c62fbc4edb4bf4033c47d8b52bda56fc9cafa289d9513210840815b_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:71f1b590785ce7f4577ecd687dbab9bc3c5931c568a3108eb84279c7aa892046_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:d1e1b4310eb64891c9456be7c34547bf36b0aafdeb471a49f0892d7eaf8f41f4_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:e0a7514406c7ffae080db6d4db3bbf7b77a606ea4632bf09f8301ce1d3739bb5_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:2a4c6c061d154ed9c74707a7a2e2390fde2a150f36197386c3e49c0612d345b2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:6ffcc051c955e198c6d96b59bda0ef26b5124ebbdef5357d36a84534f2c7097c_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:c9258bf58373f9c6859789c8ec272cd7d702c37e063fc2ee53c66d296e7ee3d0_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:d83c6bb4f2a91d2c4de3ffbf4aa8ceecb695f8491ba7586d55275c62cd1931e6_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:67637c5cba3eca1597885823c6e44c13db445d0ef38751eb8364b69dbf07caac_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:68fb5c2a3c8a0d5e6bbcf2c5568969f6b13e72006d4d54bc5c57cd9a032d1bf6_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:9f5fa40c88b0f5d1ae3634632240817a91f4575f8eae9c005b8e35a55cf38003_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:fcbcee9fc7e0bbf5775a33ae9b7e3d7e48a90e2aa1cb85605e05612b6e4d4e30_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:0c165bb93ce933c7f9998a615908bfcca0b4eb38e32e24a1c823e63791b7604b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:42aa392f82bdc45a3b857d1ed44e224ddfd14db1e3dcbb74dcc850ac0540e964_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:9dcd0c0ecf1523bf05bd296edbecd85841b2753dee7a5c9df32437f9a8e31471_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:c5505c462e6b2c04a6e14bc1e22dfc42dc8adea8f6eaf0615cd58b1973b7d62e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:1a93df314c31f10da7b1345fab07b15b846e28865764178e34124f84dc967152_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:34343f81973c3fbdd8630c32d0fad597745ea10f960ea64236408e58e0f10e14_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:7b3635784ebfb6343a73c9fa6de7bea57b3aacce1c49a0f7f250a471f7b897e3_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:f0a7fade2853193429bab16922b2e3bbe426e14632423d6550ff7dfb66d42827_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:94950d339fa382d6911f12fc23dcaf2cdb2854c4cab654f6058f5bf0df1bb371_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:bcfbd2284cbeeba5a835aaf5a5590ddd8156bd881ca24fd0fe1465fade1f84c2_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:bd739ced163053224e5b0ea2f3cd577481c6b6c1162cc0fbc186f1716b4a1fbd_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:d40496f114898985cde3860b9664c34d8c32de85e4d3d846df91a6ba27a2e99c_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:3f7cbe7605595d712e14d9a17717fafc6c6e334f2ad3e821c34947ec78411046_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:96775900ea90e57487da6afe59d058b33cb977a0247a1bbeb1bd07bed2816398_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:caa6b121538e074312314d9888d9b423bd225aefa4f25eb145893b9fc548c0ad_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:e59c90cfe8160b28f9d2aa9e59b1d04d742df44d2195210ebc1946ee3cb78b6f_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:10c95e5c55ccc1a04e8d2ac28bd1afd3b9bb9a7e9e2a5e3e8efb301421539980_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:60a310d4464b4817845703d14e95729321b883fbfc79fbf2dd8d514bb3c675e9_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:70e6c14d72f14d25a90f44043932fbd3f824b30e8ad4b36307100726b24d9c06_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:784129cf69b3bf77a907fe909fd73a2a4d0fbd947fe0037e47aa1d62c6ffcf0b_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:2368703206d833e4cb73b7e8750efb9997633a6f9accbf032426bcfcae4c00d9_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:80b543b207e724e880ff932c514fe9c6a3925bfede1c31863531e4e69d050d40_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:82405a9a5715db5442dfa3d3f594888bd7b2f9c778d68357a7d8884f5ea46915_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:8fd2bda7b8d94ededf7973f76a159dd61105776a05d961ac9cfd9bee0a988213_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:4def845360282dad99181b96bcd834b4863eab39e246fda2476234c561c652ec_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:b67aec868b6366cf04f3980b15588e1a0af5c88b2248958bc3884261ad390ca0_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:ceacf3491ebec6f5613011fe8d36b66d00f8b3697832615a4d7024e23125085e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:d9f6a520b818dcccbedb94720b5979ef1cdec2e02491c76e3decb3ee18f2085d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:3e6519c0c789b946eb1b811867c41c4f204440bad5734760c0aca4e3fc602e5a_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:95684cfaf4d5d91bc9fe8cfbf64a6f113e944e3f0c102d27851be5232eca0dbb_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:9cb20990af88287dd8a27de4e4ef12eb244577a1844482d26107359c6efe8efa_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:a69ebb0c7e817d44cfabd86ad13ef4cc94a8bf5b6e8a607d17b197603d64a224_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:1f7ed606f69a74943aedb0a956e5a71019f8a1ab53cd3f8166be0f55a69809b9_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:4841076eb82f1f1748345556ff6c4e02a17f1f63c661e375eaba720291cbaf6a_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:a79ac7dcae109aa526e2a218327dd8c5dba2b924fc27447a07199b3b2f2f67b3_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:dee022821852f2d5ebdbbd9f09c9b97997a905061dadb3f78433291d462d49a7_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:1a746b16f362a83f399255d925b322b3440b3d89ae4d64ab7962db3d82ee91a1_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:417a31bec11c3ffb70f40fa955069d5160dc12e2426b67e1d2e35ae3f7fa06df_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:89a3cb77fdb3dcbddfe96785a9ba3fa2b6132098fce028f859663b31fcf77a34_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:b1ba0b4cd8f515895af7b9f797f6ea5b661f7254ce019ce5115375639dcd06e9_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:0827c96b922ca185b7a7321a4f504e8a5dc01aadafcfd20443060546981339a8_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:b5b732dfc0ce3d740781eda9a72e1542c7a30b28b39d2be6e0ba470af06a9680_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:f74081e5eb03227ccff5717a7d139ceee6c5b610625ff7b99e639a2652bf7663_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:f80976ae4fc332600e1d8e1d70b42c038ea05d76ac2c5b1d7d0cbaddbe89140a_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:4029ece83812237ce8b1d394252e9561012e8cd94af40680a90284fbea1bc32a_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:63a3465a7539a8a286c846a84d63e3feca9a11758e4c0d697889b0bdeb26a25c_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:81c227d7c7599b0d4357ccdc3b567f31b67bbd1198c9e7ddba1864c299bad11b_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:f392bde8ce22aca058d77132cc709440442931679dbe725c52516f1cdc97b38d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:4825fab15300bc911e0b2b5c4ae342004bfcff95fa64af0fdb1085fadd132aa2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:68f879679911c2ca828551b900eca1c2f4e8caec7312fbba502fabc4778d1832_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:b4188ac728c746769ef6586663dd6d7d07db984b083397d2c76fe847ef22ea60_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:f2805fc1e6f37bc8acc3187ea8712d38f32151d584c10d5996c0ad7076cd638b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:1c943edcf23df14f254e4aabb93cbc1665bbc7902076b3f04bd80edd2fe324db_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:84c5d2b24caf68c3a6a6d078bd9f66de9fb88e769f6c09c11a248693d463ac21_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:907d6e24922d6d372bceb21ad830c254c6a9c9d6be0ac4f4edf22c236437a09d_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:923a3ee0e3d5b7341b96826e465e6856855f2801dbaf381d139a632c77bda1c5_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:285d2e2d103b458f0603435aedb4d779d85e48fed2267845b798f4a04a0df4c7_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:44981f5fcbc9086470143fae6e21a5de3baad2258d9f8c81accecb2faad6b2a2_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:5ba248d0bc8fcde70e210319bb962f4043e5e8ab8a5625c8f8f30ec96d47c6b7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:f681cdac28ee9ff6375fb39d7b7d12917a06043db44c16e8f84bdb9e09e7b5e7_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:2057531884d897574fc0648e5d3cf21c4549738ac5f35d8095f400cdb80049cc_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:8be0e50a132a2c974893f36b51f3f40b6d6e1f913ae0f9ee6319ef0d5ec455b7_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:a2edc5d233d1547fa2e1d01f29d8a914930735f7098289892430ba9a17d20ab7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:c81c7aeb3dd05801e279a9fcc8d6c3baf00a2ccc08eab53f8acc8bd4d2d129c4_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:25e17bf203568420587cf5907e84e4167afab84dfce549c91bea99e70290b742_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:277f4e8ac5fc292b9f0f2d123f924c6b5cbc0a2eeba3c87a0e61c5ee2399aaa9_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:76766b77ed53513cd254195b25d205ab6964522816e1e3662800e38a105abdf2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:c7ace45f7cb86055e2ba18e27a660f6aa6cb4eff497204294875d5dd1d63cce3_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:3780b1bc80ab7ebc3cfed06ce69346d589dc07b53cea65ad3ed92cc912284300_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:681b356709778083448892513b4559f693e002bfda897a57e2d065f736a902b5_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:d110b52ce8ea022b3d35e7c4b0ce3b646f30513cf8abb55327132565ea4a6a87_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:f076ab59f3abe061e4553a61f98a144a472297dba5ed924ca887f130e9372da9_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480756"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/net/idna is vulnerable to privilege escalation through incorrect Punycode label handling in ToASCII and ToUnicode. An attacker who can supply a Punycode hostname that passes an ASCII-only authorization check may have it normalized to a restricted ASCII name the application intended to block. Red Hat exposure is broad across products shipping the Go toolchain or bundling golang.org/x/net, including RHEL and RHEL-AI golang RPMs, hummingbird Go runtimes, OpenShift and ODF container builds, and Ceph/OpenShift components compiled against affected x/net versions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:26e58654cdd092cb812207cb4473f5f5988ebd708d95c34152c2e8c124f7297d_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:40e5d9634aa7469df8247758961d486cfac3e7d7f0b59184e11ed5571b46bf40_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:5b59faed336de07965755c893cb9d0ffc52ec90f61cc8c54487f6c0cac53322e_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:b59aea0c9e859025988b0f0c9b6e7748c4acf6d0b4cee35f3fabb7b84feb598b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:0eea35a3af36d08db945a70c387cc38eb326f75b4ed322f09d8c91863cfe5d02_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:22c48db227cd6f2ecec746674e31ac7f5a983a418679fc91678a0aa0ebb49496_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:8e8d249c39d562f819d347f12610dda7f5c01215c41101bfd5dca008e04edf6e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:f8adb8dd40a204bacb51cd423803097a514ec8e8e9f52209e02ecf14cad622bb_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:03adc6277e2bf409391941c6f4508154abc38a0c043139978754f6d4fd32c5a8_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:7e100af30ed11325cb2cbee02af09306e53df5db5847f2a4b733cd307e3cd623_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:91b474b4808b18c279c9f8eb3be8e6d1e1e47cf2b5f9553acd901c74b20bddbc_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:d56f884a9700a4f193d6f3db1895bd54745ec77e02ead3d43bd6e4fe04a2969e_s390x"
],
"known_not_affected": [
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:31bd91156f49687d2efffd3be971d9ee0e16abb420b8e8b958caa88b97770020_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:a6315866c67ba350665f5a92f960a5a44e427ca37ae7505e2072af4e02c42f76_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:b3ad6fa1de658f3a40c8b183ab501ebc66b359d8cc01439d4215aa52769df213_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:bfde9ebea1fcd27b6d104d5f67db62e870878f9517ccbec2f649dd2c1af4a073_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:08fed161d59299881ff7a54db859feaf8ed7bdb8238d6cf12628ccb73575665e_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:09436fe2649ca384b1bc1fd8f736fb1d71392733310e66758ed9f289e00471f9_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:3b83670e1c0e9d1f5b76bd7b75d77072bc6208646bc2201bd0bd200dbc59e34a_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:927146f966e4c5c2908d29d8ab45a8f3071dbd5ebd9cf0424460a23f814a72a7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:38a3bc59511133cae56827eba879e7c82c5a974bf1f16b6e8d95e1f79821e669_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:3fa04db82e3ce6169270db0ce29107b69d8e044e0a1ab13a2bf1050b8c26d087_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:6041a918713d4464c73560b68c294a12d33f297a980d2f9d0e0cc8c300a96f24_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:98bd72ba69bdfb3070d87b3edcbd7050579a514b72cfd67c2926541ba52dbaf7_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:938abc970731c2eeda8e2b7b73e96d4dfcbf7587330c7b7e52117a577700e426_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:a0876a25ce85d7d4616212813f012422826f152b8d71065e75cd9c3e23034d8a_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:c77077a0cca835a503a6529c89ab19c4027f949d361afdf8a5a259e1e87b0d55_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:d5bbf3fe886f27cdc27363dcb175e004487d9c8f36de4f1f8516fbeda3a95224_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:0f5d8cae3ba4ea4fcdc5fb9d08f797d576bc225b92af66f193bd4b1324cda4b9_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:2d3588825f8a714fa59b1648d0934d064165e333f322f7f31f01f07b940d42d9_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:68aa571827f5331f1d5a3bd0c60ad441a18877ba11921aff2633940236bafcd4_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:9b80c9c61d4befefa7f6a65ae8c001ce7e343a1e4f251e5ebe025625d9511730_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:9b2c24401a91903f023096d2b641aa977acff423eb6770a8e4c4a81aecfd4e62_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:9d74585acc098c13f3e9dac5ae7f5ef337fa82bd7119d7f1849c5f8a50e84907_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:a6ee95d0ed82bddef084684d11fa770bd646d9be9bc65b3bc386d7c58b33975c_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:f7b8654eb8bf675c8c26f0ad395d790f990308d3ad6683bb61b484c92073bbac_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:2a598e7fd07db27100d9a53a328ac9a0535865883bddd1373f4f1f2705068d2f_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:4f8f0b02d0969753e156226a998d442746c238a2a50ea606a49ca0cf695b8925_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:63c02348faa7d4e26e35c69aef5453613dd607a26116823b931b89fe5311e181_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:ae224866f0085d2c00ab18a28d2aed076e455731903989a49a544abf49950d1f_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:0a90a13f006ef0b271079b728ef6d54081f36ae19b6d0e9ab4dc24ea52a30fad_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:3a53629645832974a883002e53198df7c28e59dd6d1df99bf321b52d0ef84b61_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:879315f438ca43abb607d6c97f8fbd4ca2d38209b142e2d97cc0598740273252_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:c6c4d01f5fcee6cad3fc870cace92f45000624760e6e93654bb5e814afeed7bb_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:50f7647620c78fd6b445379c8762f5e978113fe3552906376a24459263f27459_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:53e641f48ddc05c63da2e6bc24e9e4636a10de2c3599d8f5f78622bdebca07ca_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:57114b7a386c406715e342637558fab57afeef2e193517f99173a441f39401d5_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:dcdcaa90f292f2d7ad3f10acbedfab9f7f22f3432c3156055f34760d9bf9429c_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:3723b1d5c74f37cba219e203fd2026a718d4821595cb505ec6626684695da65b_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:562291f52b6bce98ec8795856b808545c4fe30047b54544c7f6c2ab4678480ff_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:e6dfac9bc3e467e141a425944782f5087ed967ac4d02d8d47442e3d61ba5b882_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:f683186c2cc8be9ec09b8efdec66d6b8b1f991c7f7b9fd398dc7c3f9ab8b3079_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:2471edd63a94473c68cf37ee50de643e40003f2c5bba84063c154e4888a7f0bd_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:7cef49d68df5d8efe52061a18920e07e6c7efa3016c0cea7d1747e67851f254a_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:d912383405599032acffbad22bc154f63a87dd429ba882fd7a94cb82fe650d8e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:f3034211e16de48af540efe4ee460395dba0a4a544fa4f277a12840a25df1730_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:181d1decb2f16fcf6f5938027ed346aca29126687bbe6cdcc601c25087f70d11_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:ab5e4d27e23448d99a37b8c05442bb1254083cdc4ff325e721d97d80ec27346c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:ac172243d158e126594f28317e0cfb37dc1790c9f2121e95fe52506b5e05fc91_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:fd96b6284d270effa0f838d960ea4218b72b54c4718513eb523658f2f4972682_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:c59d9cd479c62730eda5d482fb2f4e9fbc17a90a5a2861b130aafe1f3a27a333_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:e547f672b14b6e8fc2ffd300b150aedbd3f6b6b36ddcad612f7c992a936a7c82_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:ead1263d538974c48790c65e44cd9cab07a62c2893b2eeb250174e7cf58d7f9d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:ed0457a57c7b39b79fb308176f45ffe678938b25fbb8c15de2cedbe54b916f64_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:9847a5752ec77e17861dcdac5546ee5c53679c80c3569609b21d9080ee3b7ef3_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:d3c823e61a0682ddc85e576e86234e580992886de471035630f9c89bbad6ebb7_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:ded425ed0af88a1411a06e5191aee25c4c59f1de85b041eba95c9997686cf09e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:ee63f59942f9df04e95fc4266f0d194cd62a7ca08dd5478283884d0ab6003da7_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:724377cabaa284a5197e7505a7150c89631c2f2bcc629e074c7c0be18abd8e6f_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:cbf797c9e93413540b20ebee9191375ddd8185ef22dc8c9e23cc3a4c015abaf7_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:d7609d62a801cf07ef639abcd4f193b2d68967fadebbfddf2349003d7e9eaa44_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:f61fe90362f793225591eb7e2a86d5cdc6fb35aa087e9b6a6218a42b1c1d945d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:1c4de9460688800b62bad6fb13653ef4b52bf215e4d41674291193e9b8e71b24_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:4f1e59610b2fbedc56f425b3fbd8f16c9ea6ea96025f18a404fe48f6a49bdc1e_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:ab0d28306dd6daa03af79bdc2ea650e59a50a03317987c4cdd0d1ee70f95b597_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:b700a8bb7ea6e4253afb8bcf94e5ad086349980ca0716a87817724d3da3fdce1_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4015f46d2172db26a348635e2e8cbd4bbcdbbaa56a4b12c232676a3d0f5bbee2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4169252c61ec70b91b10c750d5f9ecd53f5c3c906766bba9103afbac3c3f9edf_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4ab72a192553c21de76754f06fe38cf443e686e4b4edc2aa2ceb2b6b9d95bb6c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:579ef0925c6f56ed48f22121767189431bef6c4eaa72b2648a1b91488357a51d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:2b796bf55ecf7a14d1c87d829a2b20d998fc2943686373105b0a50f5053ef836_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:7e960b59f64547f7e9602b7c066a51ab52aba929726aec2bacdf486a9d4d28fd_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:a43e430a2ec0b86fb6ade361677be298b4e27444388a9bca35ddafbf9c77277c_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:d2394b121256985e5ca322aea77bb0bf999ba2d7a6f1627e62bbc125c475dbbd_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:1868e2ea03d063b4cd64601cb0aaf5c9ea7f55e83eba2e2d4dcf6f830efeafc7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:4bfbf0bdc882979bc94d85a4aeff8caa0ec7887aec7412e32ae1442811325d06_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:844e3d69d3c26914e02612466021592a876e6e2dd6cf77084723a70f567ba0e2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:bbe04eb8fd197f15875f498e3c18b9a7a445380efb5f696422d79df99a34a881_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:2c9f9b47c01c5e5e017c583c6a09c5c52f40ef88acf789689265cb31ef328fb8_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:7b5e883efde312c1571c4825b523ff04ab57af6a9f4162a36b80b973f9602c46_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:d896dd89fb924da246fc729041d9debc019d8a4210cfd3de8883834e429cca10_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:ede3e22d4e4de49789622149dec23beaa7e0569a3715ac2262929df543e05bc3_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:273a393b8c62fbc4edb4bf4033c47d8b52bda56fc9cafa289d9513210840815b_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:71f1b590785ce7f4577ecd687dbab9bc3c5931c568a3108eb84279c7aa892046_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:d1e1b4310eb64891c9456be7c34547bf36b0aafdeb471a49f0892d7eaf8f41f4_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:e0a7514406c7ffae080db6d4db3bbf7b77a606ea4632bf09f8301ce1d3739bb5_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:2a4c6c061d154ed9c74707a7a2e2390fde2a150f36197386c3e49c0612d345b2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:6ffcc051c955e198c6d96b59bda0ef26b5124ebbdef5357d36a84534f2c7097c_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:c9258bf58373f9c6859789c8ec272cd7d702c37e063fc2ee53c66d296e7ee3d0_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:d83c6bb4f2a91d2c4de3ffbf4aa8ceecb695f8491ba7586d55275c62cd1931e6_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:67637c5cba3eca1597885823c6e44c13db445d0ef38751eb8364b69dbf07caac_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:68fb5c2a3c8a0d5e6bbcf2c5568969f6b13e72006d4d54bc5c57cd9a032d1bf6_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:9f5fa40c88b0f5d1ae3634632240817a91f4575f8eae9c005b8e35a55cf38003_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:fcbcee9fc7e0bbf5775a33ae9b7e3d7e48a90e2aa1cb85605e05612b6e4d4e30_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:0c165bb93ce933c7f9998a615908bfcca0b4eb38e32e24a1c823e63791b7604b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:42aa392f82bdc45a3b857d1ed44e224ddfd14db1e3dcbb74dcc850ac0540e964_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:9dcd0c0ecf1523bf05bd296edbecd85841b2753dee7a5c9df32437f9a8e31471_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:c5505c462e6b2c04a6e14bc1e22dfc42dc8adea8f6eaf0615cd58b1973b7d62e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:1a93df314c31f10da7b1345fab07b15b846e28865764178e34124f84dc967152_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:34343f81973c3fbdd8630c32d0fad597745ea10f960ea64236408e58e0f10e14_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:7b3635784ebfb6343a73c9fa6de7bea57b3aacce1c49a0f7f250a471f7b897e3_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:f0a7fade2853193429bab16922b2e3bbe426e14632423d6550ff7dfb66d42827_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:94950d339fa382d6911f12fc23dcaf2cdb2854c4cab654f6058f5bf0df1bb371_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:bcfbd2284cbeeba5a835aaf5a5590ddd8156bd881ca24fd0fe1465fade1f84c2_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:bd739ced163053224e5b0ea2f3cd577481c6b6c1162cc0fbc186f1716b4a1fbd_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:d40496f114898985cde3860b9664c34d8c32de85e4d3d846df91a6ba27a2e99c_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:3f7cbe7605595d712e14d9a17717fafc6c6e334f2ad3e821c34947ec78411046_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:96775900ea90e57487da6afe59d058b33cb977a0247a1bbeb1bd07bed2816398_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:caa6b121538e074312314d9888d9b423bd225aefa4f25eb145893b9fc548c0ad_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:e59c90cfe8160b28f9d2aa9e59b1d04d742df44d2195210ebc1946ee3cb78b6f_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:10c95e5c55ccc1a04e8d2ac28bd1afd3b9bb9a7e9e2a5e3e8efb301421539980_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:60a310d4464b4817845703d14e95729321b883fbfc79fbf2dd8d514bb3c675e9_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:70e6c14d72f14d25a90f44043932fbd3f824b30e8ad4b36307100726b24d9c06_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:784129cf69b3bf77a907fe909fd73a2a4d0fbd947fe0037e47aa1d62c6ffcf0b_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:2368703206d833e4cb73b7e8750efb9997633a6f9accbf032426bcfcae4c00d9_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:80b543b207e724e880ff932c514fe9c6a3925bfede1c31863531e4e69d050d40_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:82405a9a5715db5442dfa3d3f594888bd7b2f9c778d68357a7d8884f5ea46915_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:8fd2bda7b8d94ededf7973f76a159dd61105776a05d961ac9cfd9bee0a988213_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:4def845360282dad99181b96bcd834b4863eab39e246fda2476234c561c652ec_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:b67aec868b6366cf04f3980b15588e1a0af5c88b2248958bc3884261ad390ca0_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:ceacf3491ebec6f5613011fe8d36b66d00f8b3697832615a4d7024e23125085e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:d9f6a520b818dcccbedb94720b5979ef1cdec2e02491c76e3decb3ee18f2085d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:3e6519c0c789b946eb1b811867c41c4f204440bad5734760c0aca4e3fc602e5a_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:95684cfaf4d5d91bc9fe8cfbf64a6f113e944e3f0c102d27851be5232eca0dbb_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:9cb20990af88287dd8a27de4e4ef12eb244577a1844482d26107359c6efe8efa_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:a69ebb0c7e817d44cfabd86ad13ef4cc94a8bf5b6e8a607d17b197603d64a224_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:1f7ed606f69a74943aedb0a956e5a71019f8a1ab53cd3f8166be0f55a69809b9_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:4841076eb82f1f1748345556ff6c4e02a17f1f63c661e375eaba720291cbaf6a_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:a79ac7dcae109aa526e2a218327dd8c5dba2b924fc27447a07199b3b2f2f67b3_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:dee022821852f2d5ebdbbd9f09c9b97997a905061dadb3f78433291d462d49a7_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:1a746b16f362a83f399255d925b322b3440b3d89ae4d64ab7962db3d82ee91a1_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:417a31bec11c3ffb70f40fa955069d5160dc12e2426b67e1d2e35ae3f7fa06df_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:89a3cb77fdb3dcbddfe96785a9ba3fa2b6132098fce028f859663b31fcf77a34_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:b1ba0b4cd8f515895af7b9f797f6ea5b661f7254ce019ce5115375639dcd06e9_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:0827c96b922ca185b7a7321a4f504e8a5dc01aadafcfd20443060546981339a8_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:b5b732dfc0ce3d740781eda9a72e1542c7a30b28b39d2be6e0ba470af06a9680_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:f74081e5eb03227ccff5717a7d139ceee6c5b610625ff7b99e639a2652bf7663_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:f80976ae4fc332600e1d8e1d70b42c038ea05d76ac2c5b1d7d0cbaddbe89140a_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:4029ece83812237ce8b1d394252e9561012e8cd94af40680a90284fbea1bc32a_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:63a3465a7539a8a286c846a84d63e3feca9a11758e4c0d697889b0bdeb26a25c_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:81c227d7c7599b0d4357ccdc3b567f31b67bbd1198c9e7ddba1864c299bad11b_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:f392bde8ce22aca058d77132cc709440442931679dbe725c52516f1cdc97b38d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:4825fab15300bc911e0b2b5c4ae342004bfcff95fa64af0fdb1085fadd132aa2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:68f879679911c2ca828551b900eca1c2f4e8caec7312fbba502fabc4778d1832_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:b4188ac728c746769ef6586663dd6d7d07db984b083397d2c76fe847ef22ea60_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:f2805fc1e6f37bc8acc3187ea8712d38f32151d584c10d5996c0ad7076cd638b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:1c943edcf23df14f254e4aabb93cbc1665bbc7902076b3f04bd80edd2fe324db_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:84c5d2b24caf68c3a6a6d078bd9f66de9fb88e769f6c09c11a248693d463ac21_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:907d6e24922d6d372bceb21ad830c254c6a9c9d6be0ac4f4edf22c236437a09d_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:923a3ee0e3d5b7341b96826e465e6856855f2801dbaf381d139a632c77bda1c5_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:285d2e2d103b458f0603435aedb4d779d85e48fed2267845b798f4a04a0df4c7_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:44981f5fcbc9086470143fae6e21a5de3baad2258d9f8c81accecb2faad6b2a2_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:5ba248d0bc8fcde70e210319bb962f4043e5e8ab8a5625c8f8f30ec96d47c6b7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:f681cdac28ee9ff6375fb39d7b7d12917a06043db44c16e8f84bdb9e09e7b5e7_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:2057531884d897574fc0648e5d3cf21c4549738ac5f35d8095f400cdb80049cc_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:8be0e50a132a2c974893f36b51f3f40b6d6e1f913ae0f9ee6319ef0d5ec455b7_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:a2edc5d233d1547fa2e1d01f29d8a914930735f7098289892430ba9a17d20ab7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:c81c7aeb3dd05801e279a9fcc8d6c3baf00a2ccc08eab53f8acc8bd4d2d129c4_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:25e17bf203568420587cf5907e84e4167afab84dfce549c91bea99e70290b742_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:277f4e8ac5fc292b9f0f2d123f924c6b5cbc0a2eeba3c87a0e61c5ee2399aaa9_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:76766b77ed53513cd254195b25d205ab6964522816e1e3662800e38a105abdf2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:c7ace45f7cb86055e2ba18e27a660f6aa6cb4eff497204294875d5dd1d63cce3_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:3780b1bc80ab7ebc3cfed06ce69346d589dc07b53cea65ad3ed92cc912284300_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:681b356709778083448892513b4559f693e002bfda897a57e2d065f736a902b5_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:d110b52ce8ea022b3d35e7c4b0ce3b646f30513cf8abb55327132565ea4a6a87_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:f076ab59f3abe061e4553a61f98a144a472297dba5ed924ca887f130e9372da9_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "RHBZ#2480756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39821",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39821"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://go.dev/cl/767220",
"url": "https://go.dev/cl/767220"
},
{
"category": "external",
"summary": "https://go.dev/issue/78760",
"url": "https://go.dev/issue/78760"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5026",
"url": "https://pkg.go.dev/vuln/GO-2026-5026"
}
],
"release_date": "2026-05-22T15:01:21.462000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T07:47:11+00:00",
"details": "Before you apply this update, make sure all previously released errata\nthat are relevant to your system are applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:26e58654cdd092cb812207cb4473f5f5988ebd708d95c34152c2e8c124f7297d_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:40e5d9634aa7469df8247758961d486cfac3e7d7f0b59184e11ed5571b46bf40_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:5b59faed336de07965755c893cb9d0ffc52ec90f61cc8c54487f6c0cac53322e_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:b59aea0c9e859025988b0f0c9b6e7748c4acf6d0b4cee35f3fabb7b84feb598b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:0eea35a3af36d08db945a70c387cc38eb326f75b4ed322f09d8c91863cfe5d02_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:22c48db227cd6f2ecec746674e31ac7f5a983a418679fc91678a0aa0ebb49496_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:8e8d249c39d562f819d347f12610dda7f5c01215c41101bfd5dca008e04edf6e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:f8adb8dd40a204bacb51cd423803097a514ec8e8e9f52209e02ecf14cad622bb_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:03adc6277e2bf409391941c6f4508154abc38a0c043139978754f6d4fd32c5a8_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:7e100af30ed11325cb2cbee02af09306e53df5db5847f2a4b733cd307e3cd623_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:91b474b4808b18c279c9f8eb3be8e6d1e1e47cf2b5f9553acd901c74b20bddbc_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:d56f884a9700a4f193d6f3db1895bd54745ec77e02ead3d43bd6e4fe04a2969e_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:47737"
},
{
"category": "workaround",
"details": "Upgrade to a fixed golang.org/x/net release that includes the idna correction, via updated golang or dependent package rebuilds.",
"product_ids": [
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:31bd91156f49687d2efffd3be971d9ee0e16abb420b8e8b958caa88b97770020_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:a6315866c67ba350665f5a92f960a5a44e427ca37ae7505e2072af4e02c42f76_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:b3ad6fa1de658f3a40c8b183ab501ebc66b359d8cc01439d4215aa52769df213_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:bfde9ebea1fcd27b6d104d5f67db62e870878f9517ccbec2f649dd2c1af4a073_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:08fed161d59299881ff7a54db859feaf8ed7bdb8238d6cf12628ccb73575665e_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:09436fe2649ca384b1bc1fd8f736fb1d71392733310e66758ed9f289e00471f9_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:3b83670e1c0e9d1f5b76bd7b75d77072bc6208646bc2201bd0bd200dbc59e34a_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:927146f966e4c5c2908d29d8ab45a8f3071dbd5ebd9cf0424460a23f814a72a7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:38a3bc59511133cae56827eba879e7c82c5a974bf1f16b6e8d95e1f79821e669_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:3fa04db82e3ce6169270db0ce29107b69d8e044e0a1ab13a2bf1050b8c26d087_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:6041a918713d4464c73560b68c294a12d33f297a980d2f9d0e0cc8c300a96f24_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:98bd72ba69bdfb3070d87b3edcbd7050579a514b72cfd67c2926541ba52dbaf7_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:938abc970731c2eeda8e2b7b73e96d4dfcbf7587330c7b7e52117a577700e426_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:a0876a25ce85d7d4616212813f012422826f152b8d71065e75cd9c3e23034d8a_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:c77077a0cca835a503a6529c89ab19c4027f949d361afdf8a5a259e1e87b0d55_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:d5bbf3fe886f27cdc27363dcb175e004487d9c8f36de4f1f8516fbeda3a95224_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:0f5d8cae3ba4ea4fcdc5fb9d08f797d576bc225b92af66f193bd4b1324cda4b9_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:2d3588825f8a714fa59b1648d0934d064165e333f322f7f31f01f07b940d42d9_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:68aa571827f5331f1d5a3bd0c60ad441a18877ba11921aff2633940236bafcd4_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:9b80c9c61d4befefa7f6a65ae8c001ce7e343a1e4f251e5ebe025625d9511730_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:9b2c24401a91903f023096d2b641aa977acff423eb6770a8e4c4a81aecfd4e62_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:9d74585acc098c13f3e9dac5ae7f5ef337fa82bd7119d7f1849c5f8a50e84907_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:a6ee95d0ed82bddef084684d11fa770bd646d9be9bc65b3bc386d7c58b33975c_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:f7b8654eb8bf675c8c26f0ad395d790f990308d3ad6683bb61b484c92073bbac_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:2a598e7fd07db27100d9a53a328ac9a0535865883bddd1373f4f1f2705068d2f_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:4f8f0b02d0969753e156226a998d442746c238a2a50ea606a49ca0cf695b8925_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:63c02348faa7d4e26e35c69aef5453613dd607a26116823b931b89fe5311e181_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:ae224866f0085d2c00ab18a28d2aed076e455731903989a49a544abf49950d1f_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:0a90a13f006ef0b271079b728ef6d54081f36ae19b6d0e9ab4dc24ea52a30fad_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:3a53629645832974a883002e53198df7c28e59dd6d1df99bf321b52d0ef84b61_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:879315f438ca43abb607d6c97f8fbd4ca2d38209b142e2d97cc0598740273252_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:c6c4d01f5fcee6cad3fc870cace92f45000624760e6e93654bb5e814afeed7bb_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:50f7647620c78fd6b445379c8762f5e978113fe3552906376a24459263f27459_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:53e641f48ddc05c63da2e6bc24e9e4636a10de2c3599d8f5f78622bdebca07ca_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:57114b7a386c406715e342637558fab57afeef2e193517f99173a441f39401d5_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:dcdcaa90f292f2d7ad3f10acbedfab9f7f22f3432c3156055f34760d9bf9429c_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:3723b1d5c74f37cba219e203fd2026a718d4821595cb505ec6626684695da65b_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:562291f52b6bce98ec8795856b808545c4fe30047b54544c7f6c2ab4678480ff_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:e6dfac9bc3e467e141a425944782f5087ed967ac4d02d8d47442e3d61ba5b882_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:f683186c2cc8be9ec09b8efdec66d6b8b1f991c7f7b9fd398dc7c3f9ab8b3079_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:2471edd63a94473c68cf37ee50de643e40003f2c5bba84063c154e4888a7f0bd_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:7cef49d68df5d8efe52061a18920e07e6c7efa3016c0cea7d1747e67851f254a_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:d912383405599032acffbad22bc154f63a87dd429ba882fd7a94cb82fe650d8e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:f3034211e16de48af540efe4ee460395dba0a4a544fa4f277a12840a25df1730_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:181d1decb2f16fcf6f5938027ed346aca29126687bbe6cdcc601c25087f70d11_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:ab5e4d27e23448d99a37b8c05442bb1254083cdc4ff325e721d97d80ec27346c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:ac172243d158e126594f28317e0cfb37dc1790c9f2121e95fe52506b5e05fc91_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:fd96b6284d270effa0f838d960ea4218b72b54c4718513eb523658f2f4972682_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:c59d9cd479c62730eda5d482fb2f4e9fbc17a90a5a2861b130aafe1f3a27a333_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:e547f672b14b6e8fc2ffd300b150aedbd3f6b6b36ddcad612f7c992a936a7c82_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:ead1263d538974c48790c65e44cd9cab07a62c2893b2eeb250174e7cf58d7f9d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:ed0457a57c7b39b79fb308176f45ffe678938b25fbb8c15de2cedbe54b916f64_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:9847a5752ec77e17861dcdac5546ee5c53679c80c3569609b21d9080ee3b7ef3_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:d3c823e61a0682ddc85e576e86234e580992886de471035630f9c89bbad6ebb7_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:ded425ed0af88a1411a06e5191aee25c4c59f1de85b041eba95c9997686cf09e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:ee63f59942f9df04e95fc4266f0d194cd62a7ca08dd5478283884d0ab6003da7_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:724377cabaa284a5197e7505a7150c89631c2f2bcc629e074c7c0be18abd8e6f_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:cbf797c9e93413540b20ebee9191375ddd8185ef22dc8c9e23cc3a4c015abaf7_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:d7609d62a801cf07ef639abcd4f193b2d68967fadebbfddf2349003d7e9eaa44_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:f61fe90362f793225591eb7e2a86d5cdc6fb35aa087e9b6a6218a42b1c1d945d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:1c4de9460688800b62bad6fb13653ef4b52bf215e4d41674291193e9b8e71b24_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:4f1e59610b2fbedc56f425b3fbd8f16c9ea6ea96025f18a404fe48f6a49bdc1e_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:ab0d28306dd6daa03af79bdc2ea650e59a50a03317987c4cdd0d1ee70f95b597_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:b700a8bb7ea6e4253afb8bcf94e5ad086349980ca0716a87817724d3da3fdce1_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4015f46d2172db26a348635e2e8cbd4bbcdbbaa56a4b12c232676a3d0f5bbee2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4169252c61ec70b91b10c750d5f9ecd53f5c3c906766bba9103afbac3c3f9edf_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4ab72a192553c21de76754f06fe38cf443e686e4b4edc2aa2ceb2b6b9d95bb6c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:579ef0925c6f56ed48f22121767189431bef6c4eaa72b2648a1b91488357a51d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:2b796bf55ecf7a14d1c87d829a2b20d998fc2943686373105b0a50f5053ef836_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:7e960b59f64547f7e9602b7c066a51ab52aba929726aec2bacdf486a9d4d28fd_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:a43e430a2ec0b86fb6ade361677be298b4e27444388a9bca35ddafbf9c77277c_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:d2394b121256985e5ca322aea77bb0bf999ba2d7a6f1627e62bbc125c475dbbd_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:1868e2ea03d063b4cd64601cb0aaf5c9ea7f55e83eba2e2d4dcf6f830efeafc7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:4bfbf0bdc882979bc94d85a4aeff8caa0ec7887aec7412e32ae1442811325d06_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:844e3d69d3c26914e02612466021592a876e6e2dd6cf77084723a70f567ba0e2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:bbe04eb8fd197f15875f498e3c18b9a7a445380efb5f696422d79df99a34a881_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:2c9f9b47c01c5e5e017c583c6a09c5c52f40ef88acf789689265cb31ef328fb8_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:7b5e883efde312c1571c4825b523ff04ab57af6a9f4162a36b80b973f9602c46_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:d896dd89fb924da246fc729041d9debc019d8a4210cfd3de8883834e429cca10_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:ede3e22d4e4de49789622149dec23beaa7e0569a3715ac2262929df543e05bc3_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:273a393b8c62fbc4edb4bf4033c47d8b52bda56fc9cafa289d9513210840815b_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:71f1b590785ce7f4577ecd687dbab9bc3c5931c568a3108eb84279c7aa892046_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:d1e1b4310eb64891c9456be7c34547bf36b0aafdeb471a49f0892d7eaf8f41f4_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:e0a7514406c7ffae080db6d4db3bbf7b77a606ea4632bf09f8301ce1d3739bb5_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:2a4c6c061d154ed9c74707a7a2e2390fde2a150f36197386c3e49c0612d345b2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:6ffcc051c955e198c6d96b59bda0ef26b5124ebbdef5357d36a84534f2c7097c_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:c9258bf58373f9c6859789c8ec272cd7d702c37e063fc2ee53c66d296e7ee3d0_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:d83c6bb4f2a91d2c4de3ffbf4aa8ceecb695f8491ba7586d55275c62cd1931e6_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:67637c5cba3eca1597885823c6e44c13db445d0ef38751eb8364b69dbf07caac_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:68fb5c2a3c8a0d5e6bbcf2c5568969f6b13e72006d4d54bc5c57cd9a032d1bf6_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:9f5fa40c88b0f5d1ae3634632240817a91f4575f8eae9c005b8e35a55cf38003_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:fcbcee9fc7e0bbf5775a33ae9b7e3d7e48a90e2aa1cb85605e05612b6e4d4e30_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:0c165bb93ce933c7f9998a615908bfcca0b4eb38e32e24a1c823e63791b7604b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:42aa392f82bdc45a3b857d1ed44e224ddfd14db1e3dcbb74dcc850ac0540e964_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:9dcd0c0ecf1523bf05bd296edbecd85841b2753dee7a5c9df32437f9a8e31471_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:c5505c462e6b2c04a6e14bc1e22dfc42dc8adea8f6eaf0615cd58b1973b7d62e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:1a93df314c31f10da7b1345fab07b15b846e28865764178e34124f84dc967152_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:34343f81973c3fbdd8630c32d0fad597745ea10f960ea64236408e58e0f10e14_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:7b3635784ebfb6343a73c9fa6de7bea57b3aacce1c49a0f7f250a471f7b897e3_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:f0a7fade2853193429bab16922b2e3bbe426e14632423d6550ff7dfb66d42827_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:94950d339fa382d6911f12fc23dcaf2cdb2854c4cab654f6058f5bf0df1bb371_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:bcfbd2284cbeeba5a835aaf5a5590ddd8156bd881ca24fd0fe1465fade1f84c2_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:bd739ced163053224e5b0ea2f3cd577481c6b6c1162cc0fbc186f1716b4a1fbd_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:d40496f114898985cde3860b9664c34d8c32de85e4d3d846df91a6ba27a2e99c_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:3f7cbe7605595d712e14d9a17717fafc6c6e334f2ad3e821c34947ec78411046_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:96775900ea90e57487da6afe59d058b33cb977a0247a1bbeb1bd07bed2816398_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:caa6b121538e074312314d9888d9b423bd225aefa4f25eb145893b9fc548c0ad_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:e59c90cfe8160b28f9d2aa9e59b1d04d742df44d2195210ebc1946ee3cb78b6f_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:10c95e5c55ccc1a04e8d2ac28bd1afd3b9bb9a7e9e2a5e3e8efb301421539980_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:60a310d4464b4817845703d14e95729321b883fbfc79fbf2dd8d514bb3c675e9_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:70e6c14d72f14d25a90f44043932fbd3f824b30e8ad4b36307100726b24d9c06_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:784129cf69b3bf77a907fe909fd73a2a4d0fbd947fe0037e47aa1d62c6ffcf0b_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:26e58654cdd092cb812207cb4473f5f5988ebd708d95c34152c2e8c124f7297d_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:40e5d9634aa7469df8247758961d486cfac3e7d7f0b59184e11ed5571b46bf40_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:5b59faed336de07965755c893cb9d0ffc52ec90f61cc8c54487f6c0cac53322e_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:b59aea0c9e859025988b0f0c9b6e7748c4acf6d0b4cee35f3fabb7b84feb598b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:2368703206d833e4cb73b7e8750efb9997633a6f9accbf032426bcfcae4c00d9_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:80b543b207e724e880ff932c514fe9c6a3925bfede1c31863531e4e69d050d40_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:82405a9a5715db5442dfa3d3f594888bd7b2f9c778d68357a7d8884f5ea46915_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:8fd2bda7b8d94ededf7973f76a159dd61105776a05d961ac9cfd9bee0a988213_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:4def845360282dad99181b96bcd834b4863eab39e246fda2476234c561c652ec_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:b67aec868b6366cf04f3980b15588e1a0af5c88b2248958bc3884261ad390ca0_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:ceacf3491ebec6f5613011fe8d36b66d00f8b3697832615a4d7024e23125085e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:d9f6a520b818dcccbedb94720b5979ef1cdec2e02491c76e3decb3ee18f2085d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:3e6519c0c789b946eb1b811867c41c4f204440bad5734760c0aca4e3fc602e5a_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:95684cfaf4d5d91bc9fe8cfbf64a6f113e944e3f0c102d27851be5232eca0dbb_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:9cb20990af88287dd8a27de4e4ef12eb244577a1844482d26107359c6efe8efa_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:a69ebb0c7e817d44cfabd86ad13ef4cc94a8bf5b6e8a607d17b197603d64a224_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:0eea35a3af36d08db945a70c387cc38eb326f75b4ed322f09d8c91863cfe5d02_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:22c48db227cd6f2ecec746674e31ac7f5a983a418679fc91678a0aa0ebb49496_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:8e8d249c39d562f819d347f12610dda7f5c01215c41101bfd5dca008e04edf6e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:f8adb8dd40a204bacb51cd423803097a514ec8e8e9f52209e02ecf14cad622bb_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:03adc6277e2bf409391941c6f4508154abc38a0c043139978754f6d4fd32c5a8_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:7e100af30ed11325cb2cbee02af09306e53df5db5847f2a4b733cd307e3cd623_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:91b474b4808b18c279c9f8eb3be8e6d1e1e47cf2b5f9553acd901c74b20bddbc_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:d56f884a9700a4f193d6f3db1895bd54745ec77e02ead3d43bd6e4fe04a2969e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:1f7ed606f69a74943aedb0a956e5a71019f8a1ab53cd3f8166be0f55a69809b9_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:4841076eb82f1f1748345556ff6c4e02a17f1f63c661e375eaba720291cbaf6a_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:a79ac7dcae109aa526e2a218327dd8c5dba2b924fc27447a07199b3b2f2f67b3_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:dee022821852f2d5ebdbbd9f09c9b97997a905061dadb3f78433291d462d49a7_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:1a746b16f362a83f399255d925b322b3440b3d89ae4d64ab7962db3d82ee91a1_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:417a31bec11c3ffb70f40fa955069d5160dc12e2426b67e1d2e35ae3f7fa06df_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:89a3cb77fdb3dcbddfe96785a9ba3fa2b6132098fce028f859663b31fcf77a34_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:b1ba0b4cd8f515895af7b9f797f6ea5b661f7254ce019ce5115375639dcd06e9_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:0827c96b922ca185b7a7321a4f504e8a5dc01aadafcfd20443060546981339a8_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:b5b732dfc0ce3d740781eda9a72e1542c7a30b28b39d2be6e0ba470af06a9680_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:f74081e5eb03227ccff5717a7d139ceee6c5b610625ff7b99e639a2652bf7663_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:f80976ae4fc332600e1d8e1d70b42c038ea05d76ac2c5b1d7d0cbaddbe89140a_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:4029ece83812237ce8b1d394252e9561012e8cd94af40680a90284fbea1bc32a_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:63a3465a7539a8a286c846a84d63e3feca9a11758e4c0d697889b0bdeb26a25c_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:81c227d7c7599b0d4357ccdc3b567f31b67bbd1198c9e7ddba1864c299bad11b_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:f392bde8ce22aca058d77132cc709440442931679dbe725c52516f1cdc97b38d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:4825fab15300bc911e0b2b5c4ae342004bfcff95fa64af0fdb1085fadd132aa2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:68f879679911c2ca828551b900eca1c2f4e8caec7312fbba502fabc4778d1832_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:b4188ac728c746769ef6586663dd6d7d07db984b083397d2c76fe847ef22ea60_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:f2805fc1e6f37bc8acc3187ea8712d38f32151d584c10d5996c0ad7076cd638b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:1c943edcf23df14f254e4aabb93cbc1665bbc7902076b3f04bd80edd2fe324db_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:84c5d2b24caf68c3a6a6d078bd9f66de9fb88e769f6c09c11a248693d463ac21_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:907d6e24922d6d372bceb21ad830c254c6a9c9d6be0ac4f4edf22c236437a09d_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:923a3ee0e3d5b7341b96826e465e6856855f2801dbaf381d139a632c77bda1c5_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:285d2e2d103b458f0603435aedb4d779d85e48fed2267845b798f4a04a0df4c7_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:44981f5fcbc9086470143fae6e21a5de3baad2258d9f8c81accecb2faad6b2a2_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:5ba248d0bc8fcde70e210319bb962f4043e5e8ab8a5625c8f8f30ec96d47c6b7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:f681cdac28ee9ff6375fb39d7b7d12917a06043db44c16e8f84bdb9e09e7b5e7_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:2057531884d897574fc0648e5d3cf21c4549738ac5f35d8095f400cdb80049cc_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:8be0e50a132a2c974893f36b51f3f40b6d6e1f913ae0f9ee6319ef0d5ec455b7_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:a2edc5d233d1547fa2e1d01f29d8a914930735f7098289892430ba9a17d20ab7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:c81c7aeb3dd05801e279a9fcc8d6c3baf00a2ccc08eab53f8acc8bd4d2d129c4_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:25e17bf203568420587cf5907e84e4167afab84dfce549c91bea99e70290b742_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:277f4e8ac5fc292b9f0f2d123f924c6b5cbc0a2eeba3c87a0e61c5ee2399aaa9_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:76766b77ed53513cd254195b25d205ab6964522816e1e3662800e38a105abdf2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:c7ace45f7cb86055e2ba18e27a660f6aa6cb4eff497204294875d5dd1d63cce3_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:3780b1bc80ab7ebc3cfed06ce69346d589dc07b53cea65ad3ed92cc912284300_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:681b356709778083448892513b4559f693e002bfda897a57e2d065f736a902b5_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:d110b52ce8ea022b3d35e7c4b0ce3b646f30513cf8abb55327132565ea4a6a87_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:f076ab59f3abe061e4553a61f98a144a472297dba5ed924ca887f130e9372da9_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:31bd91156f49687d2efffd3be971d9ee0e16abb420b8e8b958caa88b97770020_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:a6315866c67ba350665f5a92f960a5a44e427ca37ae7505e2072af4e02c42f76_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:b3ad6fa1de658f3a40c8b183ab501ebc66b359d8cc01439d4215aa52769df213_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:bfde9ebea1fcd27b6d104d5f67db62e870878f9517ccbec2f649dd2c1af4a073_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:08fed161d59299881ff7a54db859feaf8ed7bdb8238d6cf12628ccb73575665e_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:09436fe2649ca384b1bc1fd8f736fb1d71392733310e66758ed9f289e00471f9_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:3b83670e1c0e9d1f5b76bd7b75d77072bc6208646bc2201bd0bd200dbc59e34a_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:927146f966e4c5c2908d29d8ab45a8f3071dbd5ebd9cf0424460a23f814a72a7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:38a3bc59511133cae56827eba879e7c82c5a974bf1f16b6e8d95e1f79821e669_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:3fa04db82e3ce6169270db0ce29107b69d8e044e0a1ab13a2bf1050b8c26d087_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:6041a918713d4464c73560b68c294a12d33f297a980d2f9d0e0cc8c300a96f24_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:98bd72ba69bdfb3070d87b3edcbd7050579a514b72cfd67c2926541ba52dbaf7_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:938abc970731c2eeda8e2b7b73e96d4dfcbf7587330c7b7e52117a577700e426_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:a0876a25ce85d7d4616212813f012422826f152b8d71065e75cd9c3e23034d8a_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:c77077a0cca835a503a6529c89ab19c4027f949d361afdf8a5a259e1e87b0d55_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:d5bbf3fe886f27cdc27363dcb175e004487d9c8f36de4f1f8516fbeda3a95224_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:0f5d8cae3ba4ea4fcdc5fb9d08f797d576bc225b92af66f193bd4b1324cda4b9_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:2d3588825f8a714fa59b1648d0934d064165e333f322f7f31f01f07b940d42d9_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:68aa571827f5331f1d5a3bd0c60ad441a18877ba11921aff2633940236bafcd4_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:9b80c9c61d4befefa7f6a65ae8c001ce7e343a1e4f251e5ebe025625d9511730_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:9b2c24401a91903f023096d2b641aa977acff423eb6770a8e4c4a81aecfd4e62_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:9d74585acc098c13f3e9dac5ae7f5ef337fa82bd7119d7f1849c5f8a50e84907_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:a6ee95d0ed82bddef084684d11fa770bd646d9be9bc65b3bc386d7c58b33975c_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:f7b8654eb8bf675c8c26f0ad395d790f990308d3ad6683bb61b484c92073bbac_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:2a598e7fd07db27100d9a53a328ac9a0535865883bddd1373f4f1f2705068d2f_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:4f8f0b02d0969753e156226a998d442746c238a2a50ea606a49ca0cf695b8925_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:63c02348faa7d4e26e35c69aef5453613dd607a26116823b931b89fe5311e181_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:ae224866f0085d2c00ab18a28d2aed076e455731903989a49a544abf49950d1f_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:0a90a13f006ef0b271079b728ef6d54081f36ae19b6d0e9ab4dc24ea52a30fad_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:3a53629645832974a883002e53198df7c28e59dd6d1df99bf321b52d0ef84b61_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:879315f438ca43abb607d6c97f8fbd4ca2d38209b142e2d97cc0598740273252_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:c6c4d01f5fcee6cad3fc870cace92f45000624760e6e93654bb5e814afeed7bb_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:50f7647620c78fd6b445379c8762f5e978113fe3552906376a24459263f27459_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:53e641f48ddc05c63da2e6bc24e9e4636a10de2c3599d8f5f78622bdebca07ca_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:57114b7a386c406715e342637558fab57afeef2e193517f99173a441f39401d5_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:dcdcaa90f292f2d7ad3f10acbedfab9f7f22f3432c3156055f34760d9bf9429c_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:3723b1d5c74f37cba219e203fd2026a718d4821595cb505ec6626684695da65b_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:562291f52b6bce98ec8795856b808545c4fe30047b54544c7f6c2ab4678480ff_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:e6dfac9bc3e467e141a425944782f5087ed967ac4d02d8d47442e3d61ba5b882_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:f683186c2cc8be9ec09b8efdec66d6b8b1f991c7f7b9fd398dc7c3f9ab8b3079_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:2471edd63a94473c68cf37ee50de643e40003f2c5bba84063c154e4888a7f0bd_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:7cef49d68df5d8efe52061a18920e07e6c7efa3016c0cea7d1747e67851f254a_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:d912383405599032acffbad22bc154f63a87dd429ba882fd7a94cb82fe650d8e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:f3034211e16de48af540efe4ee460395dba0a4a544fa4f277a12840a25df1730_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:181d1decb2f16fcf6f5938027ed346aca29126687bbe6cdcc601c25087f70d11_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:ab5e4d27e23448d99a37b8c05442bb1254083cdc4ff325e721d97d80ec27346c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:ac172243d158e126594f28317e0cfb37dc1790c9f2121e95fe52506b5e05fc91_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:fd96b6284d270effa0f838d960ea4218b72b54c4718513eb523658f2f4972682_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:c59d9cd479c62730eda5d482fb2f4e9fbc17a90a5a2861b130aafe1f3a27a333_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:e547f672b14b6e8fc2ffd300b150aedbd3f6b6b36ddcad612f7c992a936a7c82_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:ead1263d538974c48790c65e44cd9cab07a62c2893b2eeb250174e7cf58d7f9d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:ed0457a57c7b39b79fb308176f45ffe678938b25fbb8c15de2cedbe54b916f64_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:9847a5752ec77e17861dcdac5546ee5c53679c80c3569609b21d9080ee3b7ef3_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:d3c823e61a0682ddc85e576e86234e580992886de471035630f9c89bbad6ebb7_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:ded425ed0af88a1411a06e5191aee25c4c59f1de85b041eba95c9997686cf09e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:ee63f59942f9df04e95fc4266f0d194cd62a7ca08dd5478283884d0ab6003da7_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:724377cabaa284a5197e7505a7150c89631c2f2bcc629e074c7c0be18abd8e6f_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:cbf797c9e93413540b20ebee9191375ddd8185ef22dc8c9e23cc3a4c015abaf7_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:d7609d62a801cf07ef639abcd4f193b2d68967fadebbfddf2349003d7e9eaa44_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:f61fe90362f793225591eb7e2a86d5cdc6fb35aa087e9b6a6218a42b1c1d945d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:1c4de9460688800b62bad6fb13653ef4b52bf215e4d41674291193e9b8e71b24_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:4f1e59610b2fbedc56f425b3fbd8f16c9ea6ea96025f18a404fe48f6a49bdc1e_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:ab0d28306dd6daa03af79bdc2ea650e59a50a03317987c4cdd0d1ee70f95b597_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:b700a8bb7ea6e4253afb8bcf94e5ad086349980ca0716a87817724d3da3fdce1_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4015f46d2172db26a348635e2e8cbd4bbcdbbaa56a4b12c232676a3d0f5bbee2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4169252c61ec70b91b10c750d5f9ecd53f5c3c906766bba9103afbac3c3f9edf_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4ab72a192553c21de76754f06fe38cf443e686e4b4edc2aa2ceb2b6b9d95bb6c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:579ef0925c6f56ed48f22121767189431bef6c4eaa72b2648a1b91488357a51d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:2b796bf55ecf7a14d1c87d829a2b20d998fc2943686373105b0a50f5053ef836_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:7e960b59f64547f7e9602b7c066a51ab52aba929726aec2bacdf486a9d4d28fd_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:a43e430a2ec0b86fb6ade361677be298b4e27444388a9bca35ddafbf9c77277c_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:d2394b121256985e5ca322aea77bb0bf999ba2d7a6f1627e62bbc125c475dbbd_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:1868e2ea03d063b4cd64601cb0aaf5c9ea7f55e83eba2e2d4dcf6f830efeafc7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:4bfbf0bdc882979bc94d85a4aeff8caa0ec7887aec7412e32ae1442811325d06_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:844e3d69d3c26914e02612466021592a876e6e2dd6cf77084723a70f567ba0e2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:bbe04eb8fd197f15875f498e3c18b9a7a445380efb5f696422d79df99a34a881_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:2c9f9b47c01c5e5e017c583c6a09c5c52f40ef88acf789689265cb31ef328fb8_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:7b5e883efde312c1571c4825b523ff04ab57af6a9f4162a36b80b973f9602c46_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:d896dd89fb924da246fc729041d9debc019d8a4210cfd3de8883834e429cca10_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:ede3e22d4e4de49789622149dec23beaa7e0569a3715ac2262929df543e05bc3_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:273a393b8c62fbc4edb4bf4033c47d8b52bda56fc9cafa289d9513210840815b_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:71f1b590785ce7f4577ecd687dbab9bc3c5931c568a3108eb84279c7aa892046_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:d1e1b4310eb64891c9456be7c34547bf36b0aafdeb471a49f0892d7eaf8f41f4_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:e0a7514406c7ffae080db6d4db3bbf7b77a606ea4632bf09f8301ce1d3739bb5_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:2a4c6c061d154ed9c74707a7a2e2390fde2a150f36197386c3e49c0612d345b2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:6ffcc051c955e198c6d96b59bda0ef26b5124ebbdef5357d36a84534f2c7097c_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:c9258bf58373f9c6859789c8ec272cd7d702c37e063fc2ee53c66d296e7ee3d0_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:d83c6bb4f2a91d2c4de3ffbf4aa8ceecb695f8491ba7586d55275c62cd1931e6_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:67637c5cba3eca1597885823c6e44c13db445d0ef38751eb8364b69dbf07caac_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:68fb5c2a3c8a0d5e6bbcf2c5568969f6b13e72006d4d54bc5c57cd9a032d1bf6_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:9f5fa40c88b0f5d1ae3634632240817a91f4575f8eae9c005b8e35a55cf38003_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:fcbcee9fc7e0bbf5775a33ae9b7e3d7e48a90e2aa1cb85605e05612b6e4d4e30_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:0c165bb93ce933c7f9998a615908bfcca0b4eb38e32e24a1c823e63791b7604b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:42aa392f82bdc45a3b857d1ed44e224ddfd14db1e3dcbb74dcc850ac0540e964_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:9dcd0c0ecf1523bf05bd296edbecd85841b2753dee7a5c9df32437f9a8e31471_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:c5505c462e6b2c04a6e14bc1e22dfc42dc8adea8f6eaf0615cd58b1973b7d62e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:1a93df314c31f10da7b1345fab07b15b846e28865764178e34124f84dc967152_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:34343f81973c3fbdd8630c32d0fad597745ea10f960ea64236408e58e0f10e14_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:7b3635784ebfb6343a73c9fa6de7bea57b3aacce1c49a0f7f250a471f7b897e3_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:f0a7fade2853193429bab16922b2e3bbe426e14632423d6550ff7dfb66d42827_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:94950d339fa382d6911f12fc23dcaf2cdb2854c4cab654f6058f5bf0df1bb371_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:bcfbd2284cbeeba5a835aaf5a5590ddd8156bd881ca24fd0fe1465fade1f84c2_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:bd739ced163053224e5b0ea2f3cd577481c6b6c1162cc0fbc186f1716b4a1fbd_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:d40496f114898985cde3860b9664c34d8c32de85e4d3d846df91a6ba27a2e99c_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:3f7cbe7605595d712e14d9a17717fafc6c6e334f2ad3e821c34947ec78411046_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:96775900ea90e57487da6afe59d058b33cb977a0247a1bbeb1bd07bed2816398_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:caa6b121538e074312314d9888d9b423bd225aefa4f25eb145893b9fc548c0ad_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:e59c90cfe8160b28f9d2aa9e59b1d04d742df44d2195210ebc1946ee3cb78b6f_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:10c95e5c55ccc1a04e8d2ac28bd1afd3b9bb9a7e9e2a5e3e8efb301421539980_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:60a310d4464b4817845703d14e95729321b883fbfc79fbf2dd8d514bb3c675e9_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:70e6c14d72f14d25a90f44043932fbd3f824b30e8ad4b36307100726b24d9c06_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:784129cf69b3bf77a907fe909fd73a2a4d0fbd947fe0037e47aa1d62c6ffcf0b_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:26e58654cdd092cb812207cb4473f5f5988ebd708d95c34152c2e8c124f7297d_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:40e5d9634aa7469df8247758961d486cfac3e7d7f0b59184e11ed5571b46bf40_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:5b59faed336de07965755c893cb9d0ffc52ec90f61cc8c54487f6c0cac53322e_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:b59aea0c9e859025988b0f0c9b6e7748c4acf6d0b4cee35f3fabb7b84feb598b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:2368703206d833e4cb73b7e8750efb9997633a6f9accbf032426bcfcae4c00d9_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:80b543b207e724e880ff932c514fe9c6a3925bfede1c31863531e4e69d050d40_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:82405a9a5715db5442dfa3d3f594888bd7b2f9c778d68357a7d8884f5ea46915_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:8fd2bda7b8d94ededf7973f76a159dd61105776a05d961ac9cfd9bee0a988213_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:4def845360282dad99181b96bcd834b4863eab39e246fda2476234c561c652ec_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:b67aec868b6366cf04f3980b15588e1a0af5c88b2248958bc3884261ad390ca0_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:ceacf3491ebec6f5613011fe8d36b66d00f8b3697832615a4d7024e23125085e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:d9f6a520b818dcccbedb94720b5979ef1cdec2e02491c76e3decb3ee18f2085d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:3e6519c0c789b946eb1b811867c41c4f204440bad5734760c0aca4e3fc602e5a_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:95684cfaf4d5d91bc9fe8cfbf64a6f113e944e3f0c102d27851be5232eca0dbb_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:9cb20990af88287dd8a27de4e4ef12eb244577a1844482d26107359c6efe8efa_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:a69ebb0c7e817d44cfabd86ad13ef4cc94a8bf5b6e8a607d17b197603d64a224_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:0eea35a3af36d08db945a70c387cc38eb326f75b4ed322f09d8c91863cfe5d02_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:22c48db227cd6f2ecec746674e31ac7f5a983a418679fc91678a0aa0ebb49496_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:8e8d249c39d562f819d347f12610dda7f5c01215c41101bfd5dca008e04edf6e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:f8adb8dd40a204bacb51cd423803097a514ec8e8e9f52209e02ecf14cad622bb_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:03adc6277e2bf409391941c6f4508154abc38a0c043139978754f6d4fd32c5a8_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:7e100af30ed11325cb2cbee02af09306e53df5db5847f2a4b733cd307e3cd623_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:91b474b4808b18c279c9f8eb3be8e6d1e1e47cf2b5f9553acd901c74b20bddbc_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:d56f884a9700a4f193d6f3db1895bd54745ec77e02ead3d43bd6e4fe04a2969e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:1f7ed606f69a74943aedb0a956e5a71019f8a1ab53cd3f8166be0f55a69809b9_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:4841076eb82f1f1748345556ff6c4e02a17f1f63c661e375eaba720291cbaf6a_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:a79ac7dcae109aa526e2a218327dd8c5dba2b924fc27447a07199b3b2f2f67b3_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:dee022821852f2d5ebdbbd9f09c9b97997a905061dadb3f78433291d462d49a7_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:1a746b16f362a83f399255d925b322b3440b3d89ae4d64ab7962db3d82ee91a1_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:417a31bec11c3ffb70f40fa955069d5160dc12e2426b67e1d2e35ae3f7fa06df_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:89a3cb77fdb3dcbddfe96785a9ba3fa2b6132098fce028f859663b31fcf77a34_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:b1ba0b4cd8f515895af7b9f797f6ea5b661f7254ce019ce5115375639dcd06e9_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:0827c96b922ca185b7a7321a4f504e8a5dc01aadafcfd20443060546981339a8_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:b5b732dfc0ce3d740781eda9a72e1542c7a30b28b39d2be6e0ba470af06a9680_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:f74081e5eb03227ccff5717a7d139ceee6c5b610625ff7b99e639a2652bf7663_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:f80976ae4fc332600e1d8e1d70b42c038ea05d76ac2c5b1d7d0cbaddbe89140a_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:4029ece83812237ce8b1d394252e9561012e8cd94af40680a90284fbea1bc32a_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:63a3465a7539a8a286c846a84d63e3feca9a11758e4c0d697889b0bdeb26a25c_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:81c227d7c7599b0d4357ccdc3b567f31b67bbd1198c9e7ddba1864c299bad11b_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:f392bde8ce22aca058d77132cc709440442931679dbe725c52516f1cdc97b38d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:4825fab15300bc911e0b2b5c4ae342004bfcff95fa64af0fdb1085fadd132aa2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:68f879679911c2ca828551b900eca1c2f4e8caec7312fbba502fabc4778d1832_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:b4188ac728c746769ef6586663dd6d7d07db984b083397d2c76fe847ef22ea60_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:f2805fc1e6f37bc8acc3187ea8712d38f32151d584c10d5996c0ad7076cd638b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:1c943edcf23df14f254e4aabb93cbc1665bbc7902076b3f04bd80edd2fe324db_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:84c5d2b24caf68c3a6a6d078bd9f66de9fb88e769f6c09c11a248693d463ac21_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:907d6e24922d6d372bceb21ad830c254c6a9c9d6be0ac4f4edf22c236437a09d_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:923a3ee0e3d5b7341b96826e465e6856855f2801dbaf381d139a632c77bda1c5_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:285d2e2d103b458f0603435aedb4d779d85e48fed2267845b798f4a04a0df4c7_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:44981f5fcbc9086470143fae6e21a5de3baad2258d9f8c81accecb2faad6b2a2_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:5ba248d0bc8fcde70e210319bb962f4043e5e8ab8a5625c8f8f30ec96d47c6b7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:f681cdac28ee9ff6375fb39d7b7d12917a06043db44c16e8f84bdb9e09e7b5e7_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:2057531884d897574fc0648e5d3cf21c4549738ac5f35d8095f400cdb80049cc_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:8be0e50a132a2c974893f36b51f3f40b6d6e1f913ae0f9ee6319ef0d5ec455b7_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:a2edc5d233d1547fa2e1d01f29d8a914930735f7098289892430ba9a17d20ab7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:c81c7aeb3dd05801e279a9fcc8d6c3baf00a2ccc08eab53f8acc8bd4d2d129c4_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:25e17bf203568420587cf5907e84e4167afab84dfce549c91bea99e70290b742_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:277f4e8ac5fc292b9f0f2d123f924c6b5cbc0a2eeba3c87a0e61c5ee2399aaa9_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:76766b77ed53513cd254195b25d205ab6964522816e1e3662800e38a105abdf2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:c7ace45f7cb86055e2ba18e27a660f6aa6cb4eff497204294875d5dd1d63cce3_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:3780b1bc80ab7ebc3cfed06ce69346d589dc07b53cea65ad3ed92cc912284300_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:681b356709778083448892513b4559f693e002bfda897a57e2d065f736a902b5_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:d110b52ce8ea022b3d35e7c4b0ce3b646f30513cf8abb55327132565ea4a6a87_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:f076ab59f3abe061e4553a61f98a144a472297dba5ed924ca887f130e9372da9_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing"
},
{
"cve": "CVE-2026-42508",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-05-22T04:01:49.515058+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:31bd91156f49687d2efffd3be971d9ee0e16abb420b8e8b958caa88b97770020_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:a6315866c67ba350665f5a92f960a5a44e427ca37ae7505e2072af4e02c42f76_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:b3ad6fa1de658f3a40c8b183ab501ebc66b359d8cc01439d4215aa52769df213_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:bfde9ebea1fcd27b6d104d5f67db62e870878f9517ccbec2f649dd2c1af4a073_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:08fed161d59299881ff7a54db859feaf8ed7bdb8238d6cf12628ccb73575665e_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:09436fe2649ca384b1bc1fd8f736fb1d71392733310e66758ed9f289e00471f9_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:3b83670e1c0e9d1f5b76bd7b75d77072bc6208646bc2201bd0bd200dbc59e34a_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:927146f966e4c5c2908d29d8ab45a8f3071dbd5ebd9cf0424460a23f814a72a7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:38a3bc59511133cae56827eba879e7c82c5a974bf1f16b6e8d95e1f79821e669_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:3fa04db82e3ce6169270db0ce29107b69d8e044e0a1ab13a2bf1050b8c26d087_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:6041a918713d4464c73560b68c294a12d33f297a980d2f9d0e0cc8c300a96f24_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:98bd72ba69bdfb3070d87b3edcbd7050579a514b72cfd67c2926541ba52dbaf7_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:938abc970731c2eeda8e2b7b73e96d4dfcbf7587330c7b7e52117a577700e426_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:a0876a25ce85d7d4616212813f012422826f152b8d71065e75cd9c3e23034d8a_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:c77077a0cca835a503a6529c89ab19c4027f949d361afdf8a5a259e1e87b0d55_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:d5bbf3fe886f27cdc27363dcb175e004487d9c8f36de4f1f8516fbeda3a95224_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:0f5d8cae3ba4ea4fcdc5fb9d08f797d576bc225b92af66f193bd4b1324cda4b9_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:2d3588825f8a714fa59b1648d0934d064165e333f322f7f31f01f07b940d42d9_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:68aa571827f5331f1d5a3bd0c60ad441a18877ba11921aff2633940236bafcd4_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:9b80c9c61d4befefa7f6a65ae8c001ce7e343a1e4f251e5ebe025625d9511730_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:9b2c24401a91903f023096d2b641aa977acff423eb6770a8e4c4a81aecfd4e62_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:9d74585acc098c13f3e9dac5ae7f5ef337fa82bd7119d7f1849c5f8a50e84907_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:a6ee95d0ed82bddef084684d11fa770bd646d9be9bc65b3bc386d7c58b33975c_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:f7b8654eb8bf675c8c26f0ad395d790f990308d3ad6683bb61b484c92073bbac_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:2a598e7fd07db27100d9a53a328ac9a0535865883bddd1373f4f1f2705068d2f_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:4f8f0b02d0969753e156226a998d442746c238a2a50ea606a49ca0cf695b8925_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:63c02348faa7d4e26e35c69aef5453613dd607a26116823b931b89fe5311e181_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:ae224866f0085d2c00ab18a28d2aed076e455731903989a49a544abf49950d1f_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:0a90a13f006ef0b271079b728ef6d54081f36ae19b6d0e9ab4dc24ea52a30fad_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:3a53629645832974a883002e53198df7c28e59dd6d1df99bf321b52d0ef84b61_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:879315f438ca43abb607d6c97f8fbd4ca2d38209b142e2d97cc0598740273252_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:c6c4d01f5fcee6cad3fc870cace92f45000624760e6e93654bb5e814afeed7bb_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:50f7647620c78fd6b445379c8762f5e978113fe3552906376a24459263f27459_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:53e641f48ddc05c63da2e6bc24e9e4636a10de2c3599d8f5f78622bdebca07ca_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:57114b7a386c406715e342637558fab57afeef2e193517f99173a441f39401d5_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:dcdcaa90f292f2d7ad3f10acbedfab9f7f22f3432c3156055f34760d9bf9429c_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:3723b1d5c74f37cba219e203fd2026a718d4821595cb505ec6626684695da65b_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:562291f52b6bce98ec8795856b808545c4fe30047b54544c7f6c2ab4678480ff_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:e6dfac9bc3e467e141a425944782f5087ed967ac4d02d8d47442e3d61ba5b882_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:f683186c2cc8be9ec09b8efdec66d6b8b1f991c7f7b9fd398dc7c3f9ab8b3079_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:2471edd63a94473c68cf37ee50de643e40003f2c5bba84063c154e4888a7f0bd_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:7cef49d68df5d8efe52061a18920e07e6c7efa3016c0cea7d1747e67851f254a_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:d912383405599032acffbad22bc154f63a87dd429ba882fd7a94cb82fe650d8e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:f3034211e16de48af540efe4ee460395dba0a4a544fa4f277a12840a25df1730_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:181d1decb2f16fcf6f5938027ed346aca29126687bbe6cdcc601c25087f70d11_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:ab5e4d27e23448d99a37b8c05442bb1254083cdc4ff325e721d97d80ec27346c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:ac172243d158e126594f28317e0cfb37dc1790c9f2121e95fe52506b5e05fc91_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:fd96b6284d270effa0f838d960ea4218b72b54c4718513eb523658f2f4972682_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:c59d9cd479c62730eda5d482fb2f4e9fbc17a90a5a2861b130aafe1f3a27a333_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:e547f672b14b6e8fc2ffd300b150aedbd3f6b6b36ddcad612f7c992a936a7c82_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:ead1263d538974c48790c65e44cd9cab07a62c2893b2eeb250174e7cf58d7f9d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:ed0457a57c7b39b79fb308176f45ffe678938b25fbb8c15de2cedbe54b916f64_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:9847a5752ec77e17861dcdac5546ee5c53679c80c3569609b21d9080ee3b7ef3_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:d3c823e61a0682ddc85e576e86234e580992886de471035630f9c89bbad6ebb7_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:ded425ed0af88a1411a06e5191aee25c4c59f1de85b041eba95c9997686cf09e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:ee63f59942f9df04e95fc4266f0d194cd62a7ca08dd5478283884d0ab6003da7_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:724377cabaa284a5197e7505a7150c89631c2f2bcc629e074c7c0be18abd8e6f_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:cbf797c9e93413540b20ebee9191375ddd8185ef22dc8c9e23cc3a4c015abaf7_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:d7609d62a801cf07ef639abcd4f193b2d68967fadebbfddf2349003d7e9eaa44_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:f61fe90362f793225591eb7e2a86d5cdc6fb35aa087e9b6a6218a42b1c1d945d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:1c4de9460688800b62bad6fb13653ef4b52bf215e4d41674291193e9b8e71b24_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:4f1e59610b2fbedc56f425b3fbd8f16c9ea6ea96025f18a404fe48f6a49bdc1e_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:ab0d28306dd6daa03af79bdc2ea650e59a50a03317987c4cdd0d1ee70f95b597_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:b700a8bb7ea6e4253afb8bcf94e5ad086349980ca0716a87817724d3da3fdce1_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4015f46d2172db26a348635e2e8cbd4bbcdbbaa56a4b12c232676a3d0f5bbee2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4169252c61ec70b91b10c750d5f9ecd53f5c3c906766bba9103afbac3c3f9edf_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4ab72a192553c21de76754f06fe38cf443e686e4b4edc2aa2ceb2b6b9d95bb6c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:579ef0925c6f56ed48f22121767189431bef6c4eaa72b2648a1b91488357a51d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:2b796bf55ecf7a14d1c87d829a2b20d998fc2943686373105b0a50f5053ef836_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:7e960b59f64547f7e9602b7c066a51ab52aba929726aec2bacdf486a9d4d28fd_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:a43e430a2ec0b86fb6ade361677be298b4e27444388a9bca35ddafbf9c77277c_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:d2394b121256985e5ca322aea77bb0bf999ba2d7a6f1627e62bbc125c475dbbd_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:1868e2ea03d063b4cd64601cb0aaf5c9ea7f55e83eba2e2d4dcf6f830efeafc7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:4bfbf0bdc882979bc94d85a4aeff8caa0ec7887aec7412e32ae1442811325d06_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:844e3d69d3c26914e02612466021592a876e6e2dd6cf77084723a70f567ba0e2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:bbe04eb8fd197f15875f498e3c18b9a7a445380efb5f696422d79df99a34a881_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:2c9f9b47c01c5e5e017c583c6a09c5c52f40ef88acf789689265cb31ef328fb8_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:7b5e883efde312c1571c4825b523ff04ab57af6a9f4162a36b80b973f9602c46_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:d896dd89fb924da246fc729041d9debc019d8a4210cfd3de8883834e429cca10_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:ede3e22d4e4de49789622149dec23beaa7e0569a3715ac2262929df543e05bc3_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:273a393b8c62fbc4edb4bf4033c47d8b52bda56fc9cafa289d9513210840815b_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:71f1b590785ce7f4577ecd687dbab9bc3c5931c568a3108eb84279c7aa892046_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:d1e1b4310eb64891c9456be7c34547bf36b0aafdeb471a49f0892d7eaf8f41f4_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:e0a7514406c7ffae080db6d4db3bbf7b77a606ea4632bf09f8301ce1d3739bb5_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:2a4c6c061d154ed9c74707a7a2e2390fde2a150f36197386c3e49c0612d345b2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:6ffcc051c955e198c6d96b59bda0ef26b5124ebbdef5357d36a84534f2c7097c_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:c9258bf58373f9c6859789c8ec272cd7d702c37e063fc2ee53c66d296e7ee3d0_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:d83c6bb4f2a91d2c4de3ffbf4aa8ceecb695f8491ba7586d55275c62cd1931e6_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:67637c5cba3eca1597885823c6e44c13db445d0ef38751eb8364b69dbf07caac_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:68fb5c2a3c8a0d5e6bbcf2c5568969f6b13e72006d4d54bc5c57cd9a032d1bf6_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:9f5fa40c88b0f5d1ae3634632240817a91f4575f8eae9c005b8e35a55cf38003_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:fcbcee9fc7e0bbf5775a33ae9b7e3d7e48a90e2aa1cb85605e05612b6e4d4e30_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:0c165bb93ce933c7f9998a615908bfcca0b4eb38e32e24a1c823e63791b7604b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:42aa392f82bdc45a3b857d1ed44e224ddfd14db1e3dcbb74dcc850ac0540e964_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:9dcd0c0ecf1523bf05bd296edbecd85841b2753dee7a5c9df32437f9a8e31471_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:c5505c462e6b2c04a6e14bc1e22dfc42dc8adea8f6eaf0615cd58b1973b7d62e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:1a93df314c31f10da7b1345fab07b15b846e28865764178e34124f84dc967152_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:34343f81973c3fbdd8630c32d0fad597745ea10f960ea64236408e58e0f10e14_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:7b3635784ebfb6343a73c9fa6de7bea57b3aacce1c49a0f7f250a471f7b897e3_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:f0a7fade2853193429bab16922b2e3bbe426e14632423d6550ff7dfb66d42827_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:94950d339fa382d6911f12fc23dcaf2cdb2854c4cab654f6058f5bf0df1bb371_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:bcfbd2284cbeeba5a835aaf5a5590ddd8156bd881ca24fd0fe1465fade1f84c2_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:bd739ced163053224e5b0ea2f3cd577481c6b6c1162cc0fbc186f1716b4a1fbd_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:d40496f114898985cde3860b9664c34d8c32de85e4d3d846df91a6ba27a2e99c_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:3f7cbe7605595d712e14d9a17717fafc6c6e334f2ad3e821c34947ec78411046_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:96775900ea90e57487da6afe59d058b33cb977a0247a1bbeb1bd07bed2816398_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:caa6b121538e074312314d9888d9b423bd225aefa4f25eb145893b9fc548c0ad_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:e59c90cfe8160b28f9d2aa9e59b1d04d742df44d2195210ebc1946ee3cb78b6f_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:10c95e5c55ccc1a04e8d2ac28bd1afd3b9bb9a7e9e2a5e3e8efb301421539980_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:60a310d4464b4817845703d14e95729321b883fbfc79fbf2dd8d514bb3c675e9_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:70e6c14d72f14d25a90f44043932fbd3f824b30e8ad4b36307100726b24d9c06_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:784129cf69b3bf77a907fe909fd73a2a4d0fbd947fe0037e47aa1d62c6ffcf0b_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:26e58654cdd092cb812207cb4473f5f5988ebd708d95c34152c2e8c124f7297d_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:40e5d9634aa7469df8247758961d486cfac3e7d7f0b59184e11ed5571b46bf40_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:5b59faed336de07965755c893cb9d0ffc52ec90f61cc8c54487f6c0cac53322e_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:b59aea0c9e859025988b0f0c9b6e7748c4acf6d0b4cee35f3fabb7b84feb598b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:2368703206d833e4cb73b7e8750efb9997633a6f9accbf032426bcfcae4c00d9_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:80b543b207e724e880ff932c514fe9c6a3925bfede1c31863531e4e69d050d40_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:82405a9a5715db5442dfa3d3f594888bd7b2f9c778d68357a7d8884f5ea46915_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:8fd2bda7b8d94ededf7973f76a159dd61105776a05d961ac9cfd9bee0a988213_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:4def845360282dad99181b96bcd834b4863eab39e246fda2476234c561c652ec_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:b67aec868b6366cf04f3980b15588e1a0af5c88b2248958bc3884261ad390ca0_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:ceacf3491ebec6f5613011fe8d36b66d00f8b3697832615a4d7024e23125085e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:d9f6a520b818dcccbedb94720b5979ef1cdec2e02491c76e3decb3ee18f2085d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:3e6519c0c789b946eb1b811867c41c4f204440bad5734760c0aca4e3fc602e5a_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:95684cfaf4d5d91bc9fe8cfbf64a6f113e944e3f0c102d27851be5232eca0dbb_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:9cb20990af88287dd8a27de4e4ef12eb244577a1844482d26107359c6efe8efa_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:a69ebb0c7e817d44cfabd86ad13ef4cc94a8bf5b6e8a607d17b197603d64a224_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:03adc6277e2bf409391941c6f4508154abc38a0c043139978754f6d4fd32c5a8_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:7e100af30ed11325cb2cbee02af09306e53df5db5847f2a4b733cd307e3cd623_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:91b474b4808b18c279c9f8eb3be8e6d1e1e47cf2b5f9553acd901c74b20bddbc_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:d56f884a9700a4f193d6f3db1895bd54745ec77e02ead3d43bd6e4fe04a2969e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:1f7ed606f69a74943aedb0a956e5a71019f8a1ab53cd3f8166be0f55a69809b9_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:4841076eb82f1f1748345556ff6c4e02a17f1f63c661e375eaba720291cbaf6a_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:a79ac7dcae109aa526e2a218327dd8c5dba2b924fc27447a07199b3b2f2f67b3_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:dee022821852f2d5ebdbbd9f09c9b97997a905061dadb3f78433291d462d49a7_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:1a746b16f362a83f399255d925b322b3440b3d89ae4d64ab7962db3d82ee91a1_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:417a31bec11c3ffb70f40fa955069d5160dc12e2426b67e1d2e35ae3f7fa06df_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:89a3cb77fdb3dcbddfe96785a9ba3fa2b6132098fce028f859663b31fcf77a34_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:b1ba0b4cd8f515895af7b9f797f6ea5b661f7254ce019ce5115375639dcd06e9_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:0827c96b922ca185b7a7321a4f504e8a5dc01aadafcfd20443060546981339a8_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:b5b732dfc0ce3d740781eda9a72e1542c7a30b28b39d2be6e0ba470af06a9680_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:f74081e5eb03227ccff5717a7d139ceee6c5b610625ff7b99e639a2652bf7663_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:f80976ae4fc332600e1d8e1d70b42c038ea05d76ac2c5b1d7d0cbaddbe89140a_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:4029ece83812237ce8b1d394252e9561012e8cd94af40680a90284fbea1bc32a_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:63a3465a7539a8a286c846a84d63e3feca9a11758e4c0d697889b0bdeb26a25c_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:81c227d7c7599b0d4357ccdc3b567f31b67bbd1198c9e7ddba1864c299bad11b_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:f392bde8ce22aca058d77132cc709440442931679dbe725c52516f1cdc97b38d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:4825fab15300bc911e0b2b5c4ae342004bfcff95fa64af0fdb1085fadd132aa2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:68f879679911c2ca828551b900eca1c2f4e8caec7312fbba502fabc4778d1832_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:b4188ac728c746769ef6586663dd6d7d07db984b083397d2c76fe847ef22ea60_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:f2805fc1e6f37bc8acc3187ea8712d38f32151d584c10d5996c0ad7076cd638b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:1c943edcf23df14f254e4aabb93cbc1665bbc7902076b3f04bd80edd2fe324db_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:84c5d2b24caf68c3a6a6d078bd9f66de9fb88e769f6c09c11a248693d463ac21_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:907d6e24922d6d372bceb21ad830c254c6a9c9d6be0ac4f4edf22c236437a09d_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:923a3ee0e3d5b7341b96826e465e6856855f2801dbaf381d139a632c77bda1c5_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:285d2e2d103b458f0603435aedb4d779d85e48fed2267845b798f4a04a0df4c7_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:44981f5fcbc9086470143fae6e21a5de3baad2258d9f8c81accecb2faad6b2a2_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:5ba248d0bc8fcde70e210319bb962f4043e5e8ab8a5625c8f8f30ec96d47c6b7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:f681cdac28ee9ff6375fb39d7b7d12917a06043db44c16e8f84bdb9e09e7b5e7_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:2057531884d897574fc0648e5d3cf21c4549738ac5f35d8095f400cdb80049cc_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:8be0e50a132a2c974893f36b51f3f40b6d6e1f913ae0f9ee6319ef0d5ec455b7_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:a2edc5d233d1547fa2e1d01f29d8a914930735f7098289892430ba9a17d20ab7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:c81c7aeb3dd05801e279a9fcc8d6c3baf00a2ccc08eab53f8acc8bd4d2d129c4_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:25e17bf203568420587cf5907e84e4167afab84dfce549c91bea99e70290b742_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:277f4e8ac5fc292b9f0f2d123f924c6b5cbc0a2eeba3c87a0e61c5ee2399aaa9_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:76766b77ed53513cd254195b25d205ab6964522816e1e3662800e38a105abdf2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:c7ace45f7cb86055e2ba18e27a660f6aa6cb4eff497204294875d5dd1d63cce3_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:3780b1bc80ab7ebc3cfed06ce69346d589dc07b53cea65ad3ed92cc912284300_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:681b356709778083448892513b4559f693e002bfda897a57e2d065f736a902b5_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:d110b52ce8ea022b3d35e7c4b0ce3b646f30513cf8abb55327132565ea4a6a87_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:f076ab59f3abe061e4553a61f98a144a472297dba5ed924ca887f130e9372da9_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480688"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh/knownhosts. This vulnerability occurs because the system did not correctly check for the revocation status of a SignatureKey belonging to a Certificate Authority (CA). A remote attacker could potentially exploit this by presenting a revoked key, leading to the system accepting it as valid. This could allow an attacker to bypass security checks and potentially gain unauthorized access or spoof legitimate entities.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: A flaw in `golang.org/x/crypto/ssh/knownhosts` allows a remote attacker to bypass security checks. This vulnerability arises because the system fails to properly verify the revocation status of a Certificate Authority (CA) `SignatureKey`. In Red Hat environments, this could enable an attacker to present a revoked key, leading to its acceptance as valid and potentially granting unauthorized access or facilitating the spoofing of legitimate entities.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:0eea35a3af36d08db945a70c387cc38eb326f75b4ed322f09d8c91863cfe5d02_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:22c48db227cd6f2ecec746674e31ac7f5a983a418679fc91678a0aa0ebb49496_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:8e8d249c39d562f819d347f12610dda7f5c01215c41101bfd5dca008e04edf6e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:f8adb8dd40a204bacb51cd423803097a514ec8e8e9f52209e02ecf14cad622bb_ppc64le"
],
"known_not_affected": [
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:31bd91156f49687d2efffd3be971d9ee0e16abb420b8e8b958caa88b97770020_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:a6315866c67ba350665f5a92f960a5a44e427ca37ae7505e2072af4e02c42f76_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:b3ad6fa1de658f3a40c8b183ab501ebc66b359d8cc01439d4215aa52769df213_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:bfde9ebea1fcd27b6d104d5f67db62e870878f9517ccbec2f649dd2c1af4a073_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:08fed161d59299881ff7a54db859feaf8ed7bdb8238d6cf12628ccb73575665e_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:09436fe2649ca384b1bc1fd8f736fb1d71392733310e66758ed9f289e00471f9_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:3b83670e1c0e9d1f5b76bd7b75d77072bc6208646bc2201bd0bd200dbc59e34a_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:927146f966e4c5c2908d29d8ab45a8f3071dbd5ebd9cf0424460a23f814a72a7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:38a3bc59511133cae56827eba879e7c82c5a974bf1f16b6e8d95e1f79821e669_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:3fa04db82e3ce6169270db0ce29107b69d8e044e0a1ab13a2bf1050b8c26d087_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:6041a918713d4464c73560b68c294a12d33f297a980d2f9d0e0cc8c300a96f24_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:98bd72ba69bdfb3070d87b3edcbd7050579a514b72cfd67c2926541ba52dbaf7_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:938abc970731c2eeda8e2b7b73e96d4dfcbf7587330c7b7e52117a577700e426_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:a0876a25ce85d7d4616212813f012422826f152b8d71065e75cd9c3e23034d8a_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:c77077a0cca835a503a6529c89ab19c4027f949d361afdf8a5a259e1e87b0d55_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:d5bbf3fe886f27cdc27363dcb175e004487d9c8f36de4f1f8516fbeda3a95224_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:0f5d8cae3ba4ea4fcdc5fb9d08f797d576bc225b92af66f193bd4b1324cda4b9_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:2d3588825f8a714fa59b1648d0934d064165e333f322f7f31f01f07b940d42d9_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:68aa571827f5331f1d5a3bd0c60ad441a18877ba11921aff2633940236bafcd4_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:9b80c9c61d4befefa7f6a65ae8c001ce7e343a1e4f251e5ebe025625d9511730_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:9b2c24401a91903f023096d2b641aa977acff423eb6770a8e4c4a81aecfd4e62_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:9d74585acc098c13f3e9dac5ae7f5ef337fa82bd7119d7f1849c5f8a50e84907_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:a6ee95d0ed82bddef084684d11fa770bd646d9be9bc65b3bc386d7c58b33975c_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:f7b8654eb8bf675c8c26f0ad395d790f990308d3ad6683bb61b484c92073bbac_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:2a598e7fd07db27100d9a53a328ac9a0535865883bddd1373f4f1f2705068d2f_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:4f8f0b02d0969753e156226a998d442746c238a2a50ea606a49ca0cf695b8925_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:63c02348faa7d4e26e35c69aef5453613dd607a26116823b931b89fe5311e181_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:ae224866f0085d2c00ab18a28d2aed076e455731903989a49a544abf49950d1f_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:0a90a13f006ef0b271079b728ef6d54081f36ae19b6d0e9ab4dc24ea52a30fad_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:3a53629645832974a883002e53198df7c28e59dd6d1df99bf321b52d0ef84b61_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:879315f438ca43abb607d6c97f8fbd4ca2d38209b142e2d97cc0598740273252_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:c6c4d01f5fcee6cad3fc870cace92f45000624760e6e93654bb5e814afeed7bb_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:50f7647620c78fd6b445379c8762f5e978113fe3552906376a24459263f27459_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:53e641f48ddc05c63da2e6bc24e9e4636a10de2c3599d8f5f78622bdebca07ca_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:57114b7a386c406715e342637558fab57afeef2e193517f99173a441f39401d5_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:dcdcaa90f292f2d7ad3f10acbedfab9f7f22f3432c3156055f34760d9bf9429c_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:3723b1d5c74f37cba219e203fd2026a718d4821595cb505ec6626684695da65b_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:562291f52b6bce98ec8795856b808545c4fe30047b54544c7f6c2ab4678480ff_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:e6dfac9bc3e467e141a425944782f5087ed967ac4d02d8d47442e3d61ba5b882_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:f683186c2cc8be9ec09b8efdec66d6b8b1f991c7f7b9fd398dc7c3f9ab8b3079_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:2471edd63a94473c68cf37ee50de643e40003f2c5bba84063c154e4888a7f0bd_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:7cef49d68df5d8efe52061a18920e07e6c7efa3016c0cea7d1747e67851f254a_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:d912383405599032acffbad22bc154f63a87dd429ba882fd7a94cb82fe650d8e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:f3034211e16de48af540efe4ee460395dba0a4a544fa4f277a12840a25df1730_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:181d1decb2f16fcf6f5938027ed346aca29126687bbe6cdcc601c25087f70d11_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:ab5e4d27e23448d99a37b8c05442bb1254083cdc4ff325e721d97d80ec27346c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:ac172243d158e126594f28317e0cfb37dc1790c9f2121e95fe52506b5e05fc91_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:fd96b6284d270effa0f838d960ea4218b72b54c4718513eb523658f2f4972682_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:c59d9cd479c62730eda5d482fb2f4e9fbc17a90a5a2861b130aafe1f3a27a333_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:e547f672b14b6e8fc2ffd300b150aedbd3f6b6b36ddcad612f7c992a936a7c82_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:ead1263d538974c48790c65e44cd9cab07a62c2893b2eeb250174e7cf58d7f9d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:ed0457a57c7b39b79fb308176f45ffe678938b25fbb8c15de2cedbe54b916f64_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:9847a5752ec77e17861dcdac5546ee5c53679c80c3569609b21d9080ee3b7ef3_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:d3c823e61a0682ddc85e576e86234e580992886de471035630f9c89bbad6ebb7_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:ded425ed0af88a1411a06e5191aee25c4c59f1de85b041eba95c9997686cf09e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:ee63f59942f9df04e95fc4266f0d194cd62a7ca08dd5478283884d0ab6003da7_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:724377cabaa284a5197e7505a7150c89631c2f2bcc629e074c7c0be18abd8e6f_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:cbf797c9e93413540b20ebee9191375ddd8185ef22dc8c9e23cc3a4c015abaf7_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:d7609d62a801cf07ef639abcd4f193b2d68967fadebbfddf2349003d7e9eaa44_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:f61fe90362f793225591eb7e2a86d5cdc6fb35aa087e9b6a6218a42b1c1d945d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:1c4de9460688800b62bad6fb13653ef4b52bf215e4d41674291193e9b8e71b24_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:4f1e59610b2fbedc56f425b3fbd8f16c9ea6ea96025f18a404fe48f6a49bdc1e_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:ab0d28306dd6daa03af79bdc2ea650e59a50a03317987c4cdd0d1ee70f95b597_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:b700a8bb7ea6e4253afb8bcf94e5ad086349980ca0716a87817724d3da3fdce1_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4015f46d2172db26a348635e2e8cbd4bbcdbbaa56a4b12c232676a3d0f5bbee2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4169252c61ec70b91b10c750d5f9ecd53f5c3c906766bba9103afbac3c3f9edf_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4ab72a192553c21de76754f06fe38cf443e686e4b4edc2aa2ceb2b6b9d95bb6c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:579ef0925c6f56ed48f22121767189431bef6c4eaa72b2648a1b91488357a51d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:2b796bf55ecf7a14d1c87d829a2b20d998fc2943686373105b0a50f5053ef836_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:7e960b59f64547f7e9602b7c066a51ab52aba929726aec2bacdf486a9d4d28fd_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:a43e430a2ec0b86fb6ade361677be298b4e27444388a9bca35ddafbf9c77277c_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:d2394b121256985e5ca322aea77bb0bf999ba2d7a6f1627e62bbc125c475dbbd_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:1868e2ea03d063b4cd64601cb0aaf5c9ea7f55e83eba2e2d4dcf6f830efeafc7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:4bfbf0bdc882979bc94d85a4aeff8caa0ec7887aec7412e32ae1442811325d06_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:844e3d69d3c26914e02612466021592a876e6e2dd6cf77084723a70f567ba0e2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:bbe04eb8fd197f15875f498e3c18b9a7a445380efb5f696422d79df99a34a881_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:2c9f9b47c01c5e5e017c583c6a09c5c52f40ef88acf789689265cb31ef328fb8_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:7b5e883efde312c1571c4825b523ff04ab57af6a9f4162a36b80b973f9602c46_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:d896dd89fb924da246fc729041d9debc019d8a4210cfd3de8883834e429cca10_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:ede3e22d4e4de49789622149dec23beaa7e0569a3715ac2262929df543e05bc3_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:273a393b8c62fbc4edb4bf4033c47d8b52bda56fc9cafa289d9513210840815b_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:71f1b590785ce7f4577ecd687dbab9bc3c5931c568a3108eb84279c7aa892046_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:d1e1b4310eb64891c9456be7c34547bf36b0aafdeb471a49f0892d7eaf8f41f4_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:e0a7514406c7ffae080db6d4db3bbf7b77a606ea4632bf09f8301ce1d3739bb5_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:2a4c6c061d154ed9c74707a7a2e2390fde2a150f36197386c3e49c0612d345b2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:6ffcc051c955e198c6d96b59bda0ef26b5124ebbdef5357d36a84534f2c7097c_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:c9258bf58373f9c6859789c8ec272cd7d702c37e063fc2ee53c66d296e7ee3d0_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:d83c6bb4f2a91d2c4de3ffbf4aa8ceecb695f8491ba7586d55275c62cd1931e6_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:67637c5cba3eca1597885823c6e44c13db445d0ef38751eb8364b69dbf07caac_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:68fb5c2a3c8a0d5e6bbcf2c5568969f6b13e72006d4d54bc5c57cd9a032d1bf6_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:9f5fa40c88b0f5d1ae3634632240817a91f4575f8eae9c005b8e35a55cf38003_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:fcbcee9fc7e0bbf5775a33ae9b7e3d7e48a90e2aa1cb85605e05612b6e4d4e30_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:0c165bb93ce933c7f9998a615908bfcca0b4eb38e32e24a1c823e63791b7604b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:42aa392f82bdc45a3b857d1ed44e224ddfd14db1e3dcbb74dcc850ac0540e964_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:9dcd0c0ecf1523bf05bd296edbecd85841b2753dee7a5c9df32437f9a8e31471_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:c5505c462e6b2c04a6e14bc1e22dfc42dc8adea8f6eaf0615cd58b1973b7d62e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:1a93df314c31f10da7b1345fab07b15b846e28865764178e34124f84dc967152_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:34343f81973c3fbdd8630c32d0fad597745ea10f960ea64236408e58e0f10e14_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:7b3635784ebfb6343a73c9fa6de7bea57b3aacce1c49a0f7f250a471f7b897e3_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:f0a7fade2853193429bab16922b2e3bbe426e14632423d6550ff7dfb66d42827_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:94950d339fa382d6911f12fc23dcaf2cdb2854c4cab654f6058f5bf0df1bb371_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:bcfbd2284cbeeba5a835aaf5a5590ddd8156bd881ca24fd0fe1465fade1f84c2_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:bd739ced163053224e5b0ea2f3cd577481c6b6c1162cc0fbc186f1716b4a1fbd_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:d40496f114898985cde3860b9664c34d8c32de85e4d3d846df91a6ba27a2e99c_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:3f7cbe7605595d712e14d9a17717fafc6c6e334f2ad3e821c34947ec78411046_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:96775900ea90e57487da6afe59d058b33cb977a0247a1bbeb1bd07bed2816398_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:caa6b121538e074312314d9888d9b423bd225aefa4f25eb145893b9fc548c0ad_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:e59c90cfe8160b28f9d2aa9e59b1d04d742df44d2195210ebc1946ee3cb78b6f_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:10c95e5c55ccc1a04e8d2ac28bd1afd3b9bb9a7e9e2a5e3e8efb301421539980_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:60a310d4464b4817845703d14e95729321b883fbfc79fbf2dd8d514bb3c675e9_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:70e6c14d72f14d25a90f44043932fbd3f824b30e8ad4b36307100726b24d9c06_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:784129cf69b3bf77a907fe909fd73a2a4d0fbd947fe0037e47aa1d62c6ffcf0b_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:26e58654cdd092cb812207cb4473f5f5988ebd708d95c34152c2e8c124f7297d_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:40e5d9634aa7469df8247758961d486cfac3e7d7f0b59184e11ed5571b46bf40_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:5b59faed336de07965755c893cb9d0ffc52ec90f61cc8c54487f6c0cac53322e_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:b59aea0c9e859025988b0f0c9b6e7748c4acf6d0b4cee35f3fabb7b84feb598b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:2368703206d833e4cb73b7e8750efb9997633a6f9accbf032426bcfcae4c00d9_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:80b543b207e724e880ff932c514fe9c6a3925bfede1c31863531e4e69d050d40_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:82405a9a5715db5442dfa3d3f594888bd7b2f9c778d68357a7d8884f5ea46915_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:8fd2bda7b8d94ededf7973f76a159dd61105776a05d961ac9cfd9bee0a988213_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:4def845360282dad99181b96bcd834b4863eab39e246fda2476234c561c652ec_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:b67aec868b6366cf04f3980b15588e1a0af5c88b2248958bc3884261ad390ca0_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:ceacf3491ebec6f5613011fe8d36b66d00f8b3697832615a4d7024e23125085e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:d9f6a520b818dcccbedb94720b5979ef1cdec2e02491c76e3decb3ee18f2085d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:3e6519c0c789b946eb1b811867c41c4f204440bad5734760c0aca4e3fc602e5a_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:95684cfaf4d5d91bc9fe8cfbf64a6f113e944e3f0c102d27851be5232eca0dbb_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:9cb20990af88287dd8a27de4e4ef12eb244577a1844482d26107359c6efe8efa_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:a69ebb0c7e817d44cfabd86ad13ef4cc94a8bf5b6e8a607d17b197603d64a224_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:03adc6277e2bf409391941c6f4508154abc38a0c043139978754f6d4fd32c5a8_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:7e100af30ed11325cb2cbee02af09306e53df5db5847f2a4b733cd307e3cd623_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:91b474b4808b18c279c9f8eb3be8e6d1e1e47cf2b5f9553acd901c74b20bddbc_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:d56f884a9700a4f193d6f3db1895bd54745ec77e02ead3d43bd6e4fe04a2969e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:1f7ed606f69a74943aedb0a956e5a71019f8a1ab53cd3f8166be0f55a69809b9_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:4841076eb82f1f1748345556ff6c4e02a17f1f63c661e375eaba720291cbaf6a_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:a79ac7dcae109aa526e2a218327dd8c5dba2b924fc27447a07199b3b2f2f67b3_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:dee022821852f2d5ebdbbd9f09c9b97997a905061dadb3f78433291d462d49a7_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:1a746b16f362a83f399255d925b322b3440b3d89ae4d64ab7962db3d82ee91a1_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:417a31bec11c3ffb70f40fa955069d5160dc12e2426b67e1d2e35ae3f7fa06df_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:89a3cb77fdb3dcbddfe96785a9ba3fa2b6132098fce028f859663b31fcf77a34_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:b1ba0b4cd8f515895af7b9f797f6ea5b661f7254ce019ce5115375639dcd06e9_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:0827c96b922ca185b7a7321a4f504e8a5dc01aadafcfd20443060546981339a8_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:b5b732dfc0ce3d740781eda9a72e1542c7a30b28b39d2be6e0ba470af06a9680_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:f74081e5eb03227ccff5717a7d139ceee6c5b610625ff7b99e639a2652bf7663_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:f80976ae4fc332600e1d8e1d70b42c038ea05d76ac2c5b1d7d0cbaddbe89140a_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:4029ece83812237ce8b1d394252e9561012e8cd94af40680a90284fbea1bc32a_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:63a3465a7539a8a286c846a84d63e3feca9a11758e4c0d697889b0bdeb26a25c_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:81c227d7c7599b0d4357ccdc3b567f31b67bbd1198c9e7ddba1864c299bad11b_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:f392bde8ce22aca058d77132cc709440442931679dbe725c52516f1cdc97b38d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:4825fab15300bc911e0b2b5c4ae342004bfcff95fa64af0fdb1085fadd132aa2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:68f879679911c2ca828551b900eca1c2f4e8caec7312fbba502fabc4778d1832_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:b4188ac728c746769ef6586663dd6d7d07db984b083397d2c76fe847ef22ea60_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:f2805fc1e6f37bc8acc3187ea8712d38f32151d584c10d5996c0ad7076cd638b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:1c943edcf23df14f254e4aabb93cbc1665bbc7902076b3f04bd80edd2fe324db_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:84c5d2b24caf68c3a6a6d078bd9f66de9fb88e769f6c09c11a248693d463ac21_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:907d6e24922d6d372bceb21ad830c254c6a9c9d6be0ac4f4edf22c236437a09d_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:923a3ee0e3d5b7341b96826e465e6856855f2801dbaf381d139a632c77bda1c5_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:285d2e2d103b458f0603435aedb4d779d85e48fed2267845b798f4a04a0df4c7_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:44981f5fcbc9086470143fae6e21a5de3baad2258d9f8c81accecb2faad6b2a2_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:5ba248d0bc8fcde70e210319bb962f4043e5e8ab8a5625c8f8f30ec96d47c6b7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:f681cdac28ee9ff6375fb39d7b7d12917a06043db44c16e8f84bdb9e09e7b5e7_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:2057531884d897574fc0648e5d3cf21c4549738ac5f35d8095f400cdb80049cc_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:8be0e50a132a2c974893f36b51f3f40b6d6e1f913ae0f9ee6319ef0d5ec455b7_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:a2edc5d233d1547fa2e1d01f29d8a914930735f7098289892430ba9a17d20ab7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:c81c7aeb3dd05801e279a9fcc8d6c3baf00a2ccc08eab53f8acc8bd4d2d129c4_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:25e17bf203568420587cf5907e84e4167afab84dfce549c91bea99e70290b742_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:277f4e8ac5fc292b9f0f2d123f924c6b5cbc0a2eeba3c87a0e61c5ee2399aaa9_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:76766b77ed53513cd254195b25d205ab6964522816e1e3662800e38a105abdf2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:c7ace45f7cb86055e2ba18e27a660f6aa6cb4eff497204294875d5dd1d63cce3_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:3780b1bc80ab7ebc3cfed06ce69346d589dc07b53cea65ad3ed92cc912284300_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:681b356709778083448892513b4559f693e002bfda897a57e2d065f736a902b5_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:d110b52ce8ea022b3d35e7c4b0ce3b646f30513cf8abb55327132565ea4a6a87_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:f076ab59f3abe061e4553a61f98a144a472297dba5ed924ca887f130e9372da9_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42508"
},
{
"category": "external",
"summary": "RHBZ#2480688",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480688"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42508",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42508"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42508",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42508"
},
{
"category": "external",
"summary": "https://go.dev/cl/781220",
"url": "https://go.dev/cl/781220"
},
{
"category": "external",
"summary": "https://go.dev/issue/79568",
"url": "https://go.dev/issue/79568"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5021",
"url": "https://pkg.go.dev/vuln/GO-2026-5021"
}
],
"release_date": "2026-05-22T02:31:27.644000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T07:47:11+00:00",
"details": "Before you apply this update, make sure all previously released errata\nthat are relevant to your system are applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:0eea35a3af36d08db945a70c387cc38eb326f75b4ed322f09d8c91863cfe5d02_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:22c48db227cd6f2ecec746674e31ac7f5a983a418679fc91678a0aa0ebb49496_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:8e8d249c39d562f819d347f12610dda7f5c01215c41101bfd5dca008e04edf6e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:f8adb8dd40a204bacb51cd423803097a514ec8e8e9f52209e02ecf14cad622bb_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:47737"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:31bd91156f49687d2efffd3be971d9ee0e16abb420b8e8b958caa88b97770020_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:a6315866c67ba350665f5a92f960a5a44e427ca37ae7505e2072af4e02c42f76_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:b3ad6fa1de658f3a40c8b183ab501ebc66b359d8cc01439d4215aa52769df213_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:bfde9ebea1fcd27b6d104d5f67db62e870878f9517ccbec2f649dd2c1af4a073_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:08fed161d59299881ff7a54db859feaf8ed7bdb8238d6cf12628ccb73575665e_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:09436fe2649ca384b1bc1fd8f736fb1d71392733310e66758ed9f289e00471f9_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:3b83670e1c0e9d1f5b76bd7b75d77072bc6208646bc2201bd0bd200dbc59e34a_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:927146f966e4c5c2908d29d8ab45a8f3071dbd5ebd9cf0424460a23f814a72a7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:38a3bc59511133cae56827eba879e7c82c5a974bf1f16b6e8d95e1f79821e669_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:3fa04db82e3ce6169270db0ce29107b69d8e044e0a1ab13a2bf1050b8c26d087_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:6041a918713d4464c73560b68c294a12d33f297a980d2f9d0e0cc8c300a96f24_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:98bd72ba69bdfb3070d87b3edcbd7050579a514b72cfd67c2926541ba52dbaf7_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:938abc970731c2eeda8e2b7b73e96d4dfcbf7587330c7b7e52117a577700e426_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:a0876a25ce85d7d4616212813f012422826f152b8d71065e75cd9c3e23034d8a_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:c77077a0cca835a503a6529c89ab19c4027f949d361afdf8a5a259e1e87b0d55_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:d5bbf3fe886f27cdc27363dcb175e004487d9c8f36de4f1f8516fbeda3a95224_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:0f5d8cae3ba4ea4fcdc5fb9d08f797d576bc225b92af66f193bd4b1324cda4b9_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:2d3588825f8a714fa59b1648d0934d064165e333f322f7f31f01f07b940d42d9_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:68aa571827f5331f1d5a3bd0c60ad441a18877ba11921aff2633940236bafcd4_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:9b80c9c61d4befefa7f6a65ae8c001ce7e343a1e4f251e5ebe025625d9511730_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:9b2c24401a91903f023096d2b641aa977acff423eb6770a8e4c4a81aecfd4e62_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:9d74585acc098c13f3e9dac5ae7f5ef337fa82bd7119d7f1849c5f8a50e84907_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:a6ee95d0ed82bddef084684d11fa770bd646d9be9bc65b3bc386d7c58b33975c_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:f7b8654eb8bf675c8c26f0ad395d790f990308d3ad6683bb61b484c92073bbac_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:2a598e7fd07db27100d9a53a328ac9a0535865883bddd1373f4f1f2705068d2f_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:4f8f0b02d0969753e156226a998d442746c238a2a50ea606a49ca0cf695b8925_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:63c02348faa7d4e26e35c69aef5453613dd607a26116823b931b89fe5311e181_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:ae224866f0085d2c00ab18a28d2aed076e455731903989a49a544abf49950d1f_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:0a90a13f006ef0b271079b728ef6d54081f36ae19b6d0e9ab4dc24ea52a30fad_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:3a53629645832974a883002e53198df7c28e59dd6d1df99bf321b52d0ef84b61_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:879315f438ca43abb607d6c97f8fbd4ca2d38209b142e2d97cc0598740273252_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:c6c4d01f5fcee6cad3fc870cace92f45000624760e6e93654bb5e814afeed7bb_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:50f7647620c78fd6b445379c8762f5e978113fe3552906376a24459263f27459_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:53e641f48ddc05c63da2e6bc24e9e4636a10de2c3599d8f5f78622bdebca07ca_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:57114b7a386c406715e342637558fab57afeef2e193517f99173a441f39401d5_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:dcdcaa90f292f2d7ad3f10acbedfab9f7f22f3432c3156055f34760d9bf9429c_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:3723b1d5c74f37cba219e203fd2026a718d4821595cb505ec6626684695da65b_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:562291f52b6bce98ec8795856b808545c4fe30047b54544c7f6c2ab4678480ff_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:e6dfac9bc3e467e141a425944782f5087ed967ac4d02d8d47442e3d61ba5b882_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:f683186c2cc8be9ec09b8efdec66d6b8b1f991c7f7b9fd398dc7c3f9ab8b3079_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:2471edd63a94473c68cf37ee50de643e40003f2c5bba84063c154e4888a7f0bd_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:7cef49d68df5d8efe52061a18920e07e6c7efa3016c0cea7d1747e67851f254a_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:d912383405599032acffbad22bc154f63a87dd429ba882fd7a94cb82fe650d8e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:f3034211e16de48af540efe4ee460395dba0a4a544fa4f277a12840a25df1730_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:181d1decb2f16fcf6f5938027ed346aca29126687bbe6cdcc601c25087f70d11_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:ab5e4d27e23448d99a37b8c05442bb1254083cdc4ff325e721d97d80ec27346c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:ac172243d158e126594f28317e0cfb37dc1790c9f2121e95fe52506b5e05fc91_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:fd96b6284d270effa0f838d960ea4218b72b54c4718513eb523658f2f4972682_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:c59d9cd479c62730eda5d482fb2f4e9fbc17a90a5a2861b130aafe1f3a27a333_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:e547f672b14b6e8fc2ffd300b150aedbd3f6b6b36ddcad612f7c992a936a7c82_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:ead1263d538974c48790c65e44cd9cab07a62c2893b2eeb250174e7cf58d7f9d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:ed0457a57c7b39b79fb308176f45ffe678938b25fbb8c15de2cedbe54b916f64_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:9847a5752ec77e17861dcdac5546ee5c53679c80c3569609b21d9080ee3b7ef3_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:d3c823e61a0682ddc85e576e86234e580992886de471035630f9c89bbad6ebb7_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:ded425ed0af88a1411a06e5191aee25c4c59f1de85b041eba95c9997686cf09e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:ee63f59942f9df04e95fc4266f0d194cd62a7ca08dd5478283884d0ab6003da7_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:724377cabaa284a5197e7505a7150c89631c2f2bcc629e074c7c0be18abd8e6f_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:cbf797c9e93413540b20ebee9191375ddd8185ef22dc8c9e23cc3a4c015abaf7_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:d7609d62a801cf07ef639abcd4f193b2d68967fadebbfddf2349003d7e9eaa44_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:f61fe90362f793225591eb7e2a86d5cdc6fb35aa087e9b6a6218a42b1c1d945d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:1c4de9460688800b62bad6fb13653ef4b52bf215e4d41674291193e9b8e71b24_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:4f1e59610b2fbedc56f425b3fbd8f16c9ea6ea96025f18a404fe48f6a49bdc1e_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:ab0d28306dd6daa03af79bdc2ea650e59a50a03317987c4cdd0d1ee70f95b597_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:b700a8bb7ea6e4253afb8bcf94e5ad086349980ca0716a87817724d3da3fdce1_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4015f46d2172db26a348635e2e8cbd4bbcdbbaa56a4b12c232676a3d0f5bbee2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4169252c61ec70b91b10c750d5f9ecd53f5c3c906766bba9103afbac3c3f9edf_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4ab72a192553c21de76754f06fe38cf443e686e4b4edc2aa2ceb2b6b9d95bb6c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:579ef0925c6f56ed48f22121767189431bef6c4eaa72b2648a1b91488357a51d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:2b796bf55ecf7a14d1c87d829a2b20d998fc2943686373105b0a50f5053ef836_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:7e960b59f64547f7e9602b7c066a51ab52aba929726aec2bacdf486a9d4d28fd_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:a43e430a2ec0b86fb6ade361677be298b4e27444388a9bca35ddafbf9c77277c_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:d2394b121256985e5ca322aea77bb0bf999ba2d7a6f1627e62bbc125c475dbbd_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:1868e2ea03d063b4cd64601cb0aaf5c9ea7f55e83eba2e2d4dcf6f830efeafc7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:4bfbf0bdc882979bc94d85a4aeff8caa0ec7887aec7412e32ae1442811325d06_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:844e3d69d3c26914e02612466021592a876e6e2dd6cf77084723a70f567ba0e2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:bbe04eb8fd197f15875f498e3c18b9a7a445380efb5f696422d79df99a34a881_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:2c9f9b47c01c5e5e017c583c6a09c5c52f40ef88acf789689265cb31ef328fb8_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:7b5e883efde312c1571c4825b523ff04ab57af6a9f4162a36b80b973f9602c46_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:d896dd89fb924da246fc729041d9debc019d8a4210cfd3de8883834e429cca10_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:ede3e22d4e4de49789622149dec23beaa7e0569a3715ac2262929df543e05bc3_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:273a393b8c62fbc4edb4bf4033c47d8b52bda56fc9cafa289d9513210840815b_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:71f1b590785ce7f4577ecd687dbab9bc3c5931c568a3108eb84279c7aa892046_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:d1e1b4310eb64891c9456be7c34547bf36b0aafdeb471a49f0892d7eaf8f41f4_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:e0a7514406c7ffae080db6d4db3bbf7b77a606ea4632bf09f8301ce1d3739bb5_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:2a4c6c061d154ed9c74707a7a2e2390fde2a150f36197386c3e49c0612d345b2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:6ffcc051c955e198c6d96b59bda0ef26b5124ebbdef5357d36a84534f2c7097c_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:c9258bf58373f9c6859789c8ec272cd7d702c37e063fc2ee53c66d296e7ee3d0_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:d83c6bb4f2a91d2c4de3ffbf4aa8ceecb695f8491ba7586d55275c62cd1931e6_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:67637c5cba3eca1597885823c6e44c13db445d0ef38751eb8364b69dbf07caac_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:68fb5c2a3c8a0d5e6bbcf2c5568969f6b13e72006d4d54bc5c57cd9a032d1bf6_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:9f5fa40c88b0f5d1ae3634632240817a91f4575f8eae9c005b8e35a55cf38003_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:fcbcee9fc7e0bbf5775a33ae9b7e3d7e48a90e2aa1cb85605e05612b6e4d4e30_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:0c165bb93ce933c7f9998a615908bfcca0b4eb38e32e24a1c823e63791b7604b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:42aa392f82bdc45a3b857d1ed44e224ddfd14db1e3dcbb74dcc850ac0540e964_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:9dcd0c0ecf1523bf05bd296edbecd85841b2753dee7a5c9df32437f9a8e31471_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:c5505c462e6b2c04a6e14bc1e22dfc42dc8adea8f6eaf0615cd58b1973b7d62e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:1a93df314c31f10da7b1345fab07b15b846e28865764178e34124f84dc967152_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:34343f81973c3fbdd8630c32d0fad597745ea10f960ea64236408e58e0f10e14_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:7b3635784ebfb6343a73c9fa6de7bea57b3aacce1c49a0f7f250a471f7b897e3_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:f0a7fade2853193429bab16922b2e3bbe426e14632423d6550ff7dfb66d42827_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:94950d339fa382d6911f12fc23dcaf2cdb2854c4cab654f6058f5bf0df1bb371_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:bcfbd2284cbeeba5a835aaf5a5590ddd8156bd881ca24fd0fe1465fade1f84c2_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:bd739ced163053224e5b0ea2f3cd577481c6b6c1162cc0fbc186f1716b4a1fbd_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:d40496f114898985cde3860b9664c34d8c32de85e4d3d846df91a6ba27a2e99c_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:3f7cbe7605595d712e14d9a17717fafc6c6e334f2ad3e821c34947ec78411046_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:96775900ea90e57487da6afe59d058b33cb977a0247a1bbeb1bd07bed2816398_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:caa6b121538e074312314d9888d9b423bd225aefa4f25eb145893b9fc548c0ad_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:e59c90cfe8160b28f9d2aa9e59b1d04d742df44d2195210ebc1946ee3cb78b6f_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:10c95e5c55ccc1a04e8d2ac28bd1afd3b9bb9a7e9e2a5e3e8efb301421539980_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:60a310d4464b4817845703d14e95729321b883fbfc79fbf2dd8d514bb3c675e9_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:70e6c14d72f14d25a90f44043932fbd3f824b30e8ad4b36307100726b24d9c06_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:784129cf69b3bf77a907fe909fd73a2a4d0fbd947fe0037e47aa1d62c6ffcf0b_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:26e58654cdd092cb812207cb4473f5f5988ebd708d95c34152c2e8c124f7297d_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:40e5d9634aa7469df8247758961d486cfac3e7d7f0b59184e11ed5571b46bf40_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:5b59faed336de07965755c893cb9d0ffc52ec90f61cc8c54487f6c0cac53322e_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:b59aea0c9e859025988b0f0c9b6e7748c4acf6d0b4cee35f3fabb7b84feb598b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:2368703206d833e4cb73b7e8750efb9997633a6f9accbf032426bcfcae4c00d9_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:80b543b207e724e880ff932c514fe9c6a3925bfede1c31863531e4e69d050d40_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:82405a9a5715db5442dfa3d3f594888bd7b2f9c778d68357a7d8884f5ea46915_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:8fd2bda7b8d94ededf7973f76a159dd61105776a05d961ac9cfd9bee0a988213_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:4def845360282dad99181b96bcd834b4863eab39e246fda2476234c561c652ec_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:b67aec868b6366cf04f3980b15588e1a0af5c88b2248958bc3884261ad390ca0_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:ceacf3491ebec6f5613011fe8d36b66d00f8b3697832615a4d7024e23125085e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:d9f6a520b818dcccbedb94720b5979ef1cdec2e02491c76e3decb3ee18f2085d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:3e6519c0c789b946eb1b811867c41c4f204440bad5734760c0aca4e3fc602e5a_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:95684cfaf4d5d91bc9fe8cfbf64a6f113e944e3f0c102d27851be5232eca0dbb_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:9cb20990af88287dd8a27de4e4ef12eb244577a1844482d26107359c6efe8efa_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:a69ebb0c7e817d44cfabd86ad13ef4cc94a8bf5b6e8a607d17b197603d64a224_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:0eea35a3af36d08db945a70c387cc38eb326f75b4ed322f09d8c91863cfe5d02_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:22c48db227cd6f2ecec746674e31ac7f5a983a418679fc91678a0aa0ebb49496_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:8e8d249c39d562f819d347f12610dda7f5c01215c41101bfd5dca008e04edf6e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:f8adb8dd40a204bacb51cd423803097a514ec8e8e9f52209e02ecf14cad622bb_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:03adc6277e2bf409391941c6f4508154abc38a0c043139978754f6d4fd32c5a8_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:7e100af30ed11325cb2cbee02af09306e53df5db5847f2a4b733cd307e3cd623_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:91b474b4808b18c279c9f8eb3be8e6d1e1e47cf2b5f9553acd901c74b20bddbc_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:d56f884a9700a4f193d6f3db1895bd54745ec77e02ead3d43bd6e4fe04a2969e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:1f7ed606f69a74943aedb0a956e5a71019f8a1ab53cd3f8166be0f55a69809b9_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:4841076eb82f1f1748345556ff6c4e02a17f1f63c661e375eaba720291cbaf6a_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:a79ac7dcae109aa526e2a218327dd8c5dba2b924fc27447a07199b3b2f2f67b3_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:dee022821852f2d5ebdbbd9f09c9b97997a905061dadb3f78433291d462d49a7_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:1a746b16f362a83f399255d925b322b3440b3d89ae4d64ab7962db3d82ee91a1_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:417a31bec11c3ffb70f40fa955069d5160dc12e2426b67e1d2e35ae3f7fa06df_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:89a3cb77fdb3dcbddfe96785a9ba3fa2b6132098fce028f859663b31fcf77a34_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:b1ba0b4cd8f515895af7b9f797f6ea5b661f7254ce019ce5115375639dcd06e9_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:0827c96b922ca185b7a7321a4f504e8a5dc01aadafcfd20443060546981339a8_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:b5b732dfc0ce3d740781eda9a72e1542c7a30b28b39d2be6e0ba470af06a9680_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:f74081e5eb03227ccff5717a7d139ceee6c5b610625ff7b99e639a2652bf7663_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:f80976ae4fc332600e1d8e1d70b42c038ea05d76ac2c5b1d7d0cbaddbe89140a_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:4029ece83812237ce8b1d394252e9561012e8cd94af40680a90284fbea1bc32a_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:63a3465a7539a8a286c846a84d63e3feca9a11758e4c0d697889b0bdeb26a25c_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:81c227d7c7599b0d4357ccdc3b567f31b67bbd1198c9e7ddba1864c299bad11b_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:f392bde8ce22aca058d77132cc709440442931679dbe725c52516f1cdc97b38d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:4825fab15300bc911e0b2b5c4ae342004bfcff95fa64af0fdb1085fadd132aa2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:68f879679911c2ca828551b900eca1c2f4e8caec7312fbba502fabc4778d1832_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:b4188ac728c746769ef6586663dd6d7d07db984b083397d2c76fe847ef22ea60_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:f2805fc1e6f37bc8acc3187ea8712d38f32151d584c10d5996c0ad7076cd638b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:1c943edcf23df14f254e4aabb93cbc1665bbc7902076b3f04bd80edd2fe324db_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:84c5d2b24caf68c3a6a6d078bd9f66de9fb88e769f6c09c11a248693d463ac21_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:907d6e24922d6d372bceb21ad830c254c6a9c9d6be0ac4f4edf22c236437a09d_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:923a3ee0e3d5b7341b96826e465e6856855f2801dbaf381d139a632c77bda1c5_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:285d2e2d103b458f0603435aedb4d779d85e48fed2267845b798f4a04a0df4c7_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:44981f5fcbc9086470143fae6e21a5de3baad2258d9f8c81accecb2faad6b2a2_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:5ba248d0bc8fcde70e210319bb962f4043e5e8ab8a5625c8f8f30ec96d47c6b7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:f681cdac28ee9ff6375fb39d7b7d12917a06043db44c16e8f84bdb9e09e7b5e7_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:2057531884d897574fc0648e5d3cf21c4549738ac5f35d8095f400cdb80049cc_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:8be0e50a132a2c974893f36b51f3f40b6d6e1f913ae0f9ee6319ef0d5ec455b7_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:a2edc5d233d1547fa2e1d01f29d8a914930735f7098289892430ba9a17d20ab7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:c81c7aeb3dd05801e279a9fcc8d6c3baf00a2ccc08eab53f8acc8bd4d2d129c4_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:25e17bf203568420587cf5907e84e4167afab84dfce549c91bea99e70290b742_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:277f4e8ac5fc292b9f0f2d123f924c6b5cbc0a2eeba3c87a0e61c5ee2399aaa9_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:76766b77ed53513cd254195b25d205ab6964522816e1e3662800e38a105abdf2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:c7ace45f7cb86055e2ba18e27a660f6aa6cb4eff497204294875d5dd1d63cce3_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:3780b1bc80ab7ebc3cfed06ce69346d589dc07b53cea65ad3ed92cc912284300_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:681b356709778083448892513b4559f693e002bfda897a57e2d065f736a902b5_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:d110b52ce8ea022b3d35e7c4b0ce3b646f30513cf8abb55327132565ea4a6a87_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:f076ab59f3abe061e4553a61f98a144a472297dba5ed924ca887f130e9372da9_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey"
},
{
"cve": "CVE-2026-44740",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-06-01T17:01:53.685793+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:31bd91156f49687d2efffd3be971d9ee0e16abb420b8e8b958caa88b97770020_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:a6315866c67ba350665f5a92f960a5a44e427ca37ae7505e2072af4e02c42f76_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:b3ad6fa1de658f3a40c8b183ab501ebc66b359d8cc01439d4215aa52769df213_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:bfde9ebea1fcd27b6d104d5f67db62e870878f9517ccbec2f649dd2c1af4a073_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:08fed161d59299881ff7a54db859feaf8ed7bdb8238d6cf12628ccb73575665e_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:09436fe2649ca384b1bc1fd8f736fb1d71392733310e66758ed9f289e00471f9_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:3b83670e1c0e9d1f5b76bd7b75d77072bc6208646bc2201bd0bd200dbc59e34a_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:927146f966e4c5c2908d29d8ab45a8f3071dbd5ebd9cf0424460a23f814a72a7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:38a3bc59511133cae56827eba879e7c82c5a974bf1f16b6e8d95e1f79821e669_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:3fa04db82e3ce6169270db0ce29107b69d8e044e0a1ab13a2bf1050b8c26d087_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:6041a918713d4464c73560b68c294a12d33f297a980d2f9d0e0cc8c300a96f24_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:98bd72ba69bdfb3070d87b3edcbd7050579a514b72cfd67c2926541ba52dbaf7_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:938abc970731c2eeda8e2b7b73e96d4dfcbf7587330c7b7e52117a577700e426_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:a0876a25ce85d7d4616212813f012422826f152b8d71065e75cd9c3e23034d8a_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:c77077a0cca835a503a6529c89ab19c4027f949d361afdf8a5a259e1e87b0d55_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:d5bbf3fe886f27cdc27363dcb175e004487d9c8f36de4f1f8516fbeda3a95224_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:0f5d8cae3ba4ea4fcdc5fb9d08f797d576bc225b92af66f193bd4b1324cda4b9_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:2d3588825f8a714fa59b1648d0934d064165e333f322f7f31f01f07b940d42d9_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:68aa571827f5331f1d5a3bd0c60ad441a18877ba11921aff2633940236bafcd4_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:9b80c9c61d4befefa7f6a65ae8c001ce7e343a1e4f251e5ebe025625d9511730_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:9b2c24401a91903f023096d2b641aa977acff423eb6770a8e4c4a81aecfd4e62_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:9d74585acc098c13f3e9dac5ae7f5ef337fa82bd7119d7f1849c5f8a50e84907_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:a6ee95d0ed82bddef084684d11fa770bd646d9be9bc65b3bc386d7c58b33975c_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:f7b8654eb8bf675c8c26f0ad395d790f990308d3ad6683bb61b484c92073bbac_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:2a598e7fd07db27100d9a53a328ac9a0535865883bddd1373f4f1f2705068d2f_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:4f8f0b02d0969753e156226a998d442746c238a2a50ea606a49ca0cf695b8925_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:63c02348faa7d4e26e35c69aef5453613dd607a26116823b931b89fe5311e181_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:ae224866f0085d2c00ab18a28d2aed076e455731903989a49a544abf49950d1f_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:0a90a13f006ef0b271079b728ef6d54081f36ae19b6d0e9ab4dc24ea52a30fad_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:3a53629645832974a883002e53198df7c28e59dd6d1df99bf321b52d0ef84b61_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:879315f438ca43abb607d6c97f8fbd4ca2d38209b142e2d97cc0598740273252_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:c6c4d01f5fcee6cad3fc870cace92f45000624760e6e93654bb5e814afeed7bb_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:50f7647620c78fd6b445379c8762f5e978113fe3552906376a24459263f27459_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:53e641f48ddc05c63da2e6bc24e9e4636a10de2c3599d8f5f78622bdebca07ca_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:57114b7a386c406715e342637558fab57afeef2e193517f99173a441f39401d5_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:dcdcaa90f292f2d7ad3f10acbedfab9f7f22f3432c3156055f34760d9bf9429c_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:3723b1d5c74f37cba219e203fd2026a718d4821595cb505ec6626684695da65b_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:562291f52b6bce98ec8795856b808545c4fe30047b54544c7f6c2ab4678480ff_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:e6dfac9bc3e467e141a425944782f5087ed967ac4d02d8d47442e3d61ba5b882_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:f683186c2cc8be9ec09b8efdec66d6b8b1f991c7f7b9fd398dc7c3f9ab8b3079_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:2471edd63a94473c68cf37ee50de643e40003f2c5bba84063c154e4888a7f0bd_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:7cef49d68df5d8efe52061a18920e07e6c7efa3016c0cea7d1747e67851f254a_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:d912383405599032acffbad22bc154f63a87dd429ba882fd7a94cb82fe650d8e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:f3034211e16de48af540efe4ee460395dba0a4a544fa4f277a12840a25df1730_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:181d1decb2f16fcf6f5938027ed346aca29126687bbe6cdcc601c25087f70d11_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:ab5e4d27e23448d99a37b8c05442bb1254083cdc4ff325e721d97d80ec27346c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:ac172243d158e126594f28317e0cfb37dc1790c9f2121e95fe52506b5e05fc91_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:fd96b6284d270effa0f838d960ea4218b72b54c4718513eb523658f2f4972682_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:c59d9cd479c62730eda5d482fb2f4e9fbc17a90a5a2861b130aafe1f3a27a333_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:e547f672b14b6e8fc2ffd300b150aedbd3f6b6b36ddcad612f7c992a936a7c82_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:ead1263d538974c48790c65e44cd9cab07a62c2893b2eeb250174e7cf58d7f9d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:ed0457a57c7b39b79fb308176f45ffe678938b25fbb8c15de2cedbe54b916f64_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:9847a5752ec77e17861dcdac5546ee5c53679c80c3569609b21d9080ee3b7ef3_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:d3c823e61a0682ddc85e576e86234e580992886de471035630f9c89bbad6ebb7_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:ded425ed0af88a1411a06e5191aee25c4c59f1de85b041eba95c9997686cf09e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:ee63f59942f9df04e95fc4266f0d194cd62a7ca08dd5478283884d0ab6003da7_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:724377cabaa284a5197e7505a7150c89631c2f2bcc629e074c7c0be18abd8e6f_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:cbf797c9e93413540b20ebee9191375ddd8185ef22dc8c9e23cc3a4c015abaf7_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:d7609d62a801cf07ef639abcd4f193b2d68967fadebbfddf2349003d7e9eaa44_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:f61fe90362f793225591eb7e2a86d5cdc6fb35aa087e9b6a6218a42b1c1d945d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:1c4de9460688800b62bad6fb13653ef4b52bf215e4d41674291193e9b8e71b24_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:4f1e59610b2fbedc56f425b3fbd8f16c9ea6ea96025f18a404fe48f6a49bdc1e_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:ab0d28306dd6daa03af79bdc2ea650e59a50a03317987c4cdd0d1ee70f95b597_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:b700a8bb7ea6e4253afb8bcf94e5ad086349980ca0716a87817724d3da3fdce1_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4015f46d2172db26a348635e2e8cbd4bbcdbbaa56a4b12c232676a3d0f5bbee2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4169252c61ec70b91b10c750d5f9ecd53f5c3c906766bba9103afbac3c3f9edf_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4ab72a192553c21de76754f06fe38cf443e686e4b4edc2aa2ceb2b6b9d95bb6c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:579ef0925c6f56ed48f22121767189431bef6c4eaa72b2648a1b91488357a51d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:2b796bf55ecf7a14d1c87d829a2b20d998fc2943686373105b0a50f5053ef836_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:7e960b59f64547f7e9602b7c066a51ab52aba929726aec2bacdf486a9d4d28fd_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:a43e430a2ec0b86fb6ade361677be298b4e27444388a9bca35ddafbf9c77277c_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:d2394b121256985e5ca322aea77bb0bf999ba2d7a6f1627e62bbc125c475dbbd_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:1868e2ea03d063b4cd64601cb0aaf5c9ea7f55e83eba2e2d4dcf6f830efeafc7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:4bfbf0bdc882979bc94d85a4aeff8caa0ec7887aec7412e32ae1442811325d06_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:844e3d69d3c26914e02612466021592a876e6e2dd6cf77084723a70f567ba0e2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:bbe04eb8fd197f15875f498e3c18b9a7a445380efb5f696422d79df99a34a881_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:2c9f9b47c01c5e5e017c583c6a09c5c52f40ef88acf789689265cb31ef328fb8_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:7b5e883efde312c1571c4825b523ff04ab57af6a9f4162a36b80b973f9602c46_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:d896dd89fb924da246fc729041d9debc019d8a4210cfd3de8883834e429cca10_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:ede3e22d4e4de49789622149dec23beaa7e0569a3715ac2262929df543e05bc3_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:273a393b8c62fbc4edb4bf4033c47d8b52bda56fc9cafa289d9513210840815b_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:71f1b590785ce7f4577ecd687dbab9bc3c5931c568a3108eb84279c7aa892046_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:d1e1b4310eb64891c9456be7c34547bf36b0aafdeb471a49f0892d7eaf8f41f4_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:e0a7514406c7ffae080db6d4db3bbf7b77a606ea4632bf09f8301ce1d3739bb5_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:2a4c6c061d154ed9c74707a7a2e2390fde2a150f36197386c3e49c0612d345b2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:6ffcc051c955e198c6d96b59bda0ef26b5124ebbdef5357d36a84534f2c7097c_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:c9258bf58373f9c6859789c8ec272cd7d702c37e063fc2ee53c66d296e7ee3d0_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:d83c6bb4f2a91d2c4de3ffbf4aa8ceecb695f8491ba7586d55275c62cd1931e6_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:67637c5cba3eca1597885823c6e44c13db445d0ef38751eb8364b69dbf07caac_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:68fb5c2a3c8a0d5e6bbcf2c5568969f6b13e72006d4d54bc5c57cd9a032d1bf6_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:9f5fa40c88b0f5d1ae3634632240817a91f4575f8eae9c005b8e35a55cf38003_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:fcbcee9fc7e0bbf5775a33ae9b7e3d7e48a90e2aa1cb85605e05612b6e4d4e30_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:0c165bb93ce933c7f9998a615908bfcca0b4eb38e32e24a1c823e63791b7604b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:42aa392f82bdc45a3b857d1ed44e224ddfd14db1e3dcbb74dcc850ac0540e964_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:9dcd0c0ecf1523bf05bd296edbecd85841b2753dee7a5c9df32437f9a8e31471_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:c5505c462e6b2c04a6e14bc1e22dfc42dc8adea8f6eaf0615cd58b1973b7d62e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:1a93df314c31f10da7b1345fab07b15b846e28865764178e34124f84dc967152_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:34343f81973c3fbdd8630c32d0fad597745ea10f960ea64236408e58e0f10e14_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:7b3635784ebfb6343a73c9fa6de7bea57b3aacce1c49a0f7f250a471f7b897e3_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:f0a7fade2853193429bab16922b2e3bbe426e14632423d6550ff7dfb66d42827_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:94950d339fa382d6911f12fc23dcaf2cdb2854c4cab654f6058f5bf0df1bb371_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:bcfbd2284cbeeba5a835aaf5a5590ddd8156bd881ca24fd0fe1465fade1f84c2_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:bd739ced163053224e5b0ea2f3cd577481c6b6c1162cc0fbc186f1716b4a1fbd_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:d40496f114898985cde3860b9664c34d8c32de85e4d3d846df91a6ba27a2e99c_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:3f7cbe7605595d712e14d9a17717fafc6c6e334f2ad3e821c34947ec78411046_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:96775900ea90e57487da6afe59d058b33cb977a0247a1bbeb1bd07bed2816398_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:caa6b121538e074312314d9888d9b423bd225aefa4f25eb145893b9fc548c0ad_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:e59c90cfe8160b28f9d2aa9e59b1d04d742df44d2195210ebc1946ee3cb78b6f_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:10c95e5c55ccc1a04e8d2ac28bd1afd3b9bb9a7e9e2a5e3e8efb301421539980_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:60a310d4464b4817845703d14e95729321b883fbfc79fbf2dd8d514bb3c675e9_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:70e6c14d72f14d25a90f44043932fbd3f824b30e8ad4b36307100726b24d9c06_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:784129cf69b3bf77a907fe909fd73a2a4d0fbd947fe0037e47aa1d62c6ffcf0b_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:26e58654cdd092cb812207cb4473f5f5988ebd708d95c34152c2e8c124f7297d_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:40e5d9634aa7469df8247758961d486cfac3e7d7f0b59184e11ed5571b46bf40_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:5b59faed336de07965755c893cb9d0ffc52ec90f61cc8c54487f6c0cac53322e_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:b59aea0c9e859025988b0f0c9b6e7748c4acf6d0b4cee35f3fabb7b84feb598b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:2368703206d833e4cb73b7e8750efb9997633a6f9accbf032426bcfcae4c00d9_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:80b543b207e724e880ff932c514fe9c6a3925bfede1c31863531e4e69d050d40_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:82405a9a5715db5442dfa3d3f594888bd7b2f9c778d68357a7d8884f5ea46915_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:8fd2bda7b8d94ededf7973f76a159dd61105776a05d961ac9cfd9bee0a988213_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:4def845360282dad99181b96bcd834b4863eab39e246fda2476234c561c652ec_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:b67aec868b6366cf04f3980b15588e1a0af5c88b2248958bc3884261ad390ca0_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:ceacf3491ebec6f5613011fe8d36b66d00f8b3697832615a4d7024e23125085e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:d9f6a520b818dcccbedb94720b5979ef1cdec2e02491c76e3decb3ee18f2085d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:3e6519c0c789b946eb1b811867c41c4f204440bad5734760c0aca4e3fc602e5a_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:95684cfaf4d5d91bc9fe8cfbf64a6f113e944e3f0c102d27851be5232eca0dbb_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:9cb20990af88287dd8a27de4e4ef12eb244577a1844482d26107359c6efe8efa_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:a69ebb0c7e817d44cfabd86ad13ef4cc94a8bf5b6e8a607d17b197603d64a224_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:03adc6277e2bf409391941c6f4508154abc38a0c043139978754f6d4fd32c5a8_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:7e100af30ed11325cb2cbee02af09306e53df5db5847f2a4b733cd307e3cd623_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:91b474b4808b18c279c9f8eb3be8e6d1e1e47cf2b5f9553acd901c74b20bddbc_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:d56f884a9700a4f193d6f3db1895bd54745ec77e02ead3d43bd6e4fe04a2969e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:1f7ed606f69a74943aedb0a956e5a71019f8a1ab53cd3f8166be0f55a69809b9_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:4841076eb82f1f1748345556ff6c4e02a17f1f63c661e375eaba720291cbaf6a_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:a79ac7dcae109aa526e2a218327dd8c5dba2b924fc27447a07199b3b2f2f67b3_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:dee022821852f2d5ebdbbd9f09c9b97997a905061dadb3f78433291d462d49a7_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:1a746b16f362a83f399255d925b322b3440b3d89ae4d64ab7962db3d82ee91a1_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:417a31bec11c3ffb70f40fa955069d5160dc12e2426b67e1d2e35ae3f7fa06df_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:89a3cb77fdb3dcbddfe96785a9ba3fa2b6132098fce028f859663b31fcf77a34_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:b1ba0b4cd8f515895af7b9f797f6ea5b661f7254ce019ce5115375639dcd06e9_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:0827c96b922ca185b7a7321a4f504e8a5dc01aadafcfd20443060546981339a8_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:b5b732dfc0ce3d740781eda9a72e1542c7a30b28b39d2be6e0ba470af06a9680_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:f74081e5eb03227ccff5717a7d139ceee6c5b610625ff7b99e639a2652bf7663_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:f80976ae4fc332600e1d8e1d70b42c038ea05d76ac2c5b1d7d0cbaddbe89140a_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:4029ece83812237ce8b1d394252e9561012e8cd94af40680a90284fbea1bc32a_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:63a3465a7539a8a286c846a84d63e3feca9a11758e4c0d697889b0bdeb26a25c_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:81c227d7c7599b0d4357ccdc3b567f31b67bbd1198c9e7ddba1864c299bad11b_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:f392bde8ce22aca058d77132cc709440442931679dbe725c52516f1cdc97b38d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:4825fab15300bc911e0b2b5c4ae342004bfcff95fa64af0fdb1085fadd132aa2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:68f879679911c2ca828551b900eca1c2f4e8caec7312fbba502fabc4778d1832_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:b4188ac728c746769ef6586663dd6d7d07db984b083397d2c76fe847ef22ea60_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:f2805fc1e6f37bc8acc3187ea8712d38f32151d584c10d5996c0ad7076cd638b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:1c943edcf23df14f254e4aabb93cbc1665bbc7902076b3f04bd80edd2fe324db_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:84c5d2b24caf68c3a6a6d078bd9f66de9fb88e769f6c09c11a248693d463ac21_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:907d6e24922d6d372bceb21ad830c254c6a9c9d6be0ac4f4edf22c236437a09d_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:923a3ee0e3d5b7341b96826e465e6856855f2801dbaf381d139a632c77bda1c5_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:285d2e2d103b458f0603435aedb4d779d85e48fed2267845b798f4a04a0df4c7_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:44981f5fcbc9086470143fae6e21a5de3baad2258d9f8c81accecb2faad6b2a2_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:5ba248d0bc8fcde70e210319bb962f4043e5e8ab8a5625c8f8f30ec96d47c6b7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:f681cdac28ee9ff6375fb39d7b7d12917a06043db44c16e8f84bdb9e09e7b5e7_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:2057531884d897574fc0648e5d3cf21c4549738ac5f35d8095f400cdb80049cc_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:8be0e50a132a2c974893f36b51f3f40b6d6e1f913ae0f9ee6319ef0d5ec455b7_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:a2edc5d233d1547fa2e1d01f29d8a914930735f7098289892430ba9a17d20ab7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:c81c7aeb3dd05801e279a9fcc8d6c3baf00a2ccc08eab53f8acc8bd4d2d129c4_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:25e17bf203568420587cf5907e84e4167afab84dfce549c91bea99e70290b742_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:277f4e8ac5fc292b9f0f2d123f924c6b5cbc0a2eeba3c87a0e61c5ee2399aaa9_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:76766b77ed53513cd254195b25d205ab6964522816e1e3662800e38a105abdf2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:c7ace45f7cb86055e2ba18e27a660f6aa6cb4eff497204294875d5dd1d63cce3_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:3780b1bc80ab7ebc3cfed06ce69346d589dc07b53cea65ad3ed92cc912284300_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:681b356709778083448892513b4559f693e002bfda897a57e2d065f736a902b5_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:d110b52ce8ea022b3d35e7c4b0ce3b646f30513cf8abb55327132565ea4a6a87_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:f076ab59f3abe061e4553a61f98a144a472297dba5ed924ca887f130e9372da9_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2483894"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Billy, an interface filesystem abstraction for Go. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by providing crafted or malformed input. The issue arises from insufficient validation and missing safety mechanisms when processing untrusted repository data and filesystem structures, leading to panics, infinite loops, uncontrolled recursion, or excessive resource consumption.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/go-git/go-billy: Billy: Denial of Service via crafted input due to insufficient validation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is rated as an Important severity issue. The `go-billy` library, a Go filesystem abstraction, is vulnerable to a denial of service when processing crafted or malformed input, such as untrusted repository data or filesystem structures. Insufficient validation and missing safety mechanisms can lead to panics, infinite loops, or excessive resource consumption, potentially impacting the availability of applications that rely on this library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:0eea35a3af36d08db945a70c387cc38eb326f75b4ed322f09d8c91863cfe5d02_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:22c48db227cd6f2ecec746674e31ac7f5a983a418679fc91678a0aa0ebb49496_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:8e8d249c39d562f819d347f12610dda7f5c01215c41101bfd5dca008e04edf6e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:f8adb8dd40a204bacb51cd423803097a514ec8e8e9f52209e02ecf14cad622bb_ppc64le"
],
"known_not_affected": [
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:31bd91156f49687d2efffd3be971d9ee0e16abb420b8e8b958caa88b97770020_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:a6315866c67ba350665f5a92f960a5a44e427ca37ae7505e2072af4e02c42f76_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:b3ad6fa1de658f3a40c8b183ab501ebc66b359d8cc01439d4215aa52769df213_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:bfde9ebea1fcd27b6d104d5f67db62e870878f9517ccbec2f649dd2c1af4a073_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:08fed161d59299881ff7a54db859feaf8ed7bdb8238d6cf12628ccb73575665e_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:09436fe2649ca384b1bc1fd8f736fb1d71392733310e66758ed9f289e00471f9_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:3b83670e1c0e9d1f5b76bd7b75d77072bc6208646bc2201bd0bd200dbc59e34a_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:927146f966e4c5c2908d29d8ab45a8f3071dbd5ebd9cf0424460a23f814a72a7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:38a3bc59511133cae56827eba879e7c82c5a974bf1f16b6e8d95e1f79821e669_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:3fa04db82e3ce6169270db0ce29107b69d8e044e0a1ab13a2bf1050b8c26d087_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:6041a918713d4464c73560b68c294a12d33f297a980d2f9d0e0cc8c300a96f24_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:98bd72ba69bdfb3070d87b3edcbd7050579a514b72cfd67c2926541ba52dbaf7_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:938abc970731c2eeda8e2b7b73e96d4dfcbf7587330c7b7e52117a577700e426_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:a0876a25ce85d7d4616212813f012422826f152b8d71065e75cd9c3e23034d8a_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:c77077a0cca835a503a6529c89ab19c4027f949d361afdf8a5a259e1e87b0d55_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:d5bbf3fe886f27cdc27363dcb175e004487d9c8f36de4f1f8516fbeda3a95224_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:0f5d8cae3ba4ea4fcdc5fb9d08f797d576bc225b92af66f193bd4b1324cda4b9_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:2d3588825f8a714fa59b1648d0934d064165e333f322f7f31f01f07b940d42d9_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:68aa571827f5331f1d5a3bd0c60ad441a18877ba11921aff2633940236bafcd4_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:9b80c9c61d4befefa7f6a65ae8c001ce7e343a1e4f251e5ebe025625d9511730_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:9b2c24401a91903f023096d2b641aa977acff423eb6770a8e4c4a81aecfd4e62_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:9d74585acc098c13f3e9dac5ae7f5ef337fa82bd7119d7f1849c5f8a50e84907_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:a6ee95d0ed82bddef084684d11fa770bd646d9be9bc65b3bc386d7c58b33975c_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:f7b8654eb8bf675c8c26f0ad395d790f990308d3ad6683bb61b484c92073bbac_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:2a598e7fd07db27100d9a53a328ac9a0535865883bddd1373f4f1f2705068d2f_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:4f8f0b02d0969753e156226a998d442746c238a2a50ea606a49ca0cf695b8925_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:63c02348faa7d4e26e35c69aef5453613dd607a26116823b931b89fe5311e181_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:ae224866f0085d2c00ab18a28d2aed076e455731903989a49a544abf49950d1f_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:0a90a13f006ef0b271079b728ef6d54081f36ae19b6d0e9ab4dc24ea52a30fad_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:3a53629645832974a883002e53198df7c28e59dd6d1df99bf321b52d0ef84b61_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:879315f438ca43abb607d6c97f8fbd4ca2d38209b142e2d97cc0598740273252_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:c6c4d01f5fcee6cad3fc870cace92f45000624760e6e93654bb5e814afeed7bb_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:50f7647620c78fd6b445379c8762f5e978113fe3552906376a24459263f27459_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:53e641f48ddc05c63da2e6bc24e9e4636a10de2c3599d8f5f78622bdebca07ca_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:57114b7a386c406715e342637558fab57afeef2e193517f99173a441f39401d5_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:dcdcaa90f292f2d7ad3f10acbedfab9f7f22f3432c3156055f34760d9bf9429c_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:3723b1d5c74f37cba219e203fd2026a718d4821595cb505ec6626684695da65b_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:562291f52b6bce98ec8795856b808545c4fe30047b54544c7f6c2ab4678480ff_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:e6dfac9bc3e467e141a425944782f5087ed967ac4d02d8d47442e3d61ba5b882_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:f683186c2cc8be9ec09b8efdec66d6b8b1f991c7f7b9fd398dc7c3f9ab8b3079_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:2471edd63a94473c68cf37ee50de643e40003f2c5bba84063c154e4888a7f0bd_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:7cef49d68df5d8efe52061a18920e07e6c7efa3016c0cea7d1747e67851f254a_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:d912383405599032acffbad22bc154f63a87dd429ba882fd7a94cb82fe650d8e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:f3034211e16de48af540efe4ee460395dba0a4a544fa4f277a12840a25df1730_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:181d1decb2f16fcf6f5938027ed346aca29126687bbe6cdcc601c25087f70d11_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:ab5e4d27e23448d99a37b8c05442bb1254083cdc4ff325e721d97d80ec27346c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:ac172243d158e126594f28317e0cfb37dc1790c9f2121e95fe52506b5e05fc91_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:fd96b6284d270effa0f838d960ea4218b72b54c4718513eb523658f2f4972682_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:c59d9cd479c62730eda5d482fb2f4e9fbc17a90a5a2861b130aafe1f3a27a333_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:e547f672b14b6e8fc2ffd300b150aedbd3f6b6b36ddcad612f7c992a936a7c82_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:ead1263d538974c48790c65e44cd9cab07a62c2893b2eeb250174e7cf58d7f9d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:ed0457a57c7b39b79fb308176f45ffe678938b25fbb8c15de2cedbe54b916f64_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:9847a5752ec77e17861dcdac5546ee5c53679c80c3569609b21d9080ee3b7ef3_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:d3c823e61a0682ddc85e576e86234e580992886de471035630f9c89bbad6ebb7_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:ded425ed0af88a1411a06e5191aee25c4c59f1de85b041eba95c9997686cf09e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:ee63f59942f9df04e95fc4266f0d194cd62a7ca08dd5478283884d0ab6003da7_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:724377cabaa284a5197e7505a7150c89631c2f2bcc629e074c7c0be18abd8e6f_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:cbf797c9e93413540b20ebee9191375ddd8185ef22dc8c9e23cc3a4c015abaf7_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:d7609d62a801cf07ef639abcd4f193b2d68967fadebbfddf2349003d7e9eaa44_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:f61fe90362f793225591eb7e2a86d5cdc6fb35aa087e9b6a6218a42b1c1d945d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:1c4de9460688800b62bad6fb13653ef4b52bf215e4d41674291193e9b8e71b24_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:4f1e59610b2fbedc56f425b3fbd8f16c9ea6ea96025f18a404fe48f6a49bdc1e_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:ab0d28306dd6daa03af79bdc2ea650e59a50a03317987c4cdd0d1ee70f95b597_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:b700a8bb7ea6e4253afb8bcf94e5ad086349980ca0716a87817724d3da3fdce1_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4015f46d2172db26a348635e2e8cbd4bbcdbbaa56a4b12c232676a3d0f5bbee2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4169252c61ec70b91b10c750d5f9ecd53f5c3c906766bba9103afbac3c3f9edf_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4ab72a192553c21de76754f06fe38cf443e686e4b4edc2aa2ceb2b6b9d95bb6c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:579ef0925c6f56ed48f22121767189431bef6c4eaa72b2648a1b91488357a51d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:2b796bf55ecf7a14d1c87d829a2b20d998fc2943686373105b0a50f5053ef836_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:7e960b59f64547f7e9602b7c066a51ab52aba929726aec2bacdf486a9d4d28fd_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:a43e430a2ec0b86fb6ade361677be298b4e27444388a9bca35ddafbf9c77277c_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:d2394b121256985e5ca322aea77bb0bf999ba2d7a6f1627e62bbc125c475dbbd_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:1868e2ea03d063b4cd64601cb0aaf5c9ea7f55e83eba2e2d4dcf6f830efeafc7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:4bfbf0bdc882979bc94d85a4aeff8caa0ec7887aec7412e32ae1442811325d06_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:844e3d69d3c26914e02612466021592a876e6e2dd6cf77084723a70f567ba0e2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:bbe04eb8fd197f15875f498e3c18b9a7a445380efb5f696422d79df99a34a881_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:2c9f9b47c01c5e5e017c583c6a09c5c52f40ef88acf789689265cb31ef328fb8_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:7b5e883efde312c1571c4825b523ff04ab57af6a9f4162a36b80b973f9602c46_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:d896dd89fb924da246fc729041d9debc019d8a4210cfd3de8883834e429cca10_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:ede3e22d4e4de49789622149dec23beaa7e0569a3715ac2262929df543e05bc3_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:273a393b8c62fbc4edb4bf4033c47d8b52bda56fc9cafa289d9513210840815b_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:71f1b590785ce7f4577ecd687dbab9bc3c5931c568a3108eb84279c7aa892046_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:d1e1b4310eb64891c9456be7c34547bf36b0aafdeb471a49f0892d7eaf8f41f4_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:e0a7514406c7ffae080db6d4db3bbf7b77a606ea4632bf09f8301ce1d3739bb5_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:2a4c6c061d154ed9c74707a7a2e2390fde2a150f36197386c3e49c0612d345b2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:6ffcc051c955e198c6d96b59bda0ef26b5124ebbdef5357d36a84534f2c7097c_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:c9258bf58373f9c6859789c8ec272cd7d702c37e063fc2ee53c66d296e7ee3d0_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:d83c6bb4f2a91d2c4de3ffbf4aa8ceecb695f8491ba7586d55275c62cd1931e6_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:67637c5cba3eca1597885823c6e44c13db445d0ef38751eb8364b69dbf07caac_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:68fb5c2a3c8a0d5e6bbcf2c5568969f6b13e72006d4d54bc5c57cd9a032d1bf6_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:9f5fa40c88b0f5d1ae3634632240817a91f4575f8eae9c005b8e35a55cf38003_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:fcbcee9fc7e0bbf5775a33ae9b7e3d7e48a90e2aa1cb85605e05612b6e4d4e30_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:0c165bb93ce933c7f9998a615908bfcca0b4eb38e32e24a1c823e63791b7604b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:42aa392f82bdc45a3b857d1ed44e224ddfd14db1e3dcbb74dcc850ac0540e964_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:9dcd0c0ecf1523bf05bd296edbecd85841b2753dee7a5c9df32437f9a8e31471_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:c5505c462e6b2c04a6e14bc1e22dfc42dc8adea8f6eaf0615cd58b1973b7d62e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:1a93df314c31f10da7b1345fab07b15b846e28865764178e34124f84dc967152_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:34343f81973c3fbdd8630c32d0fad597745ea10f960ea64236408e58e0f10e14_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:7b3635784ebfb6343a73c9fa6de7bea57b3aacce1c49a0f7f250a471f7b897e3_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:f0a7fade2853193429bab16922b2e3bbe426e14632423d6550ff7dfb66d42827_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:94950d339fa382d6911f12fc23dcaf2cdb2854c4cab654f6058f5bf0df1bb371_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:bcfbd2284cbeeba5a835aaf5a5590ddd8156bd881ca24fd0fe1465fade1f84c2_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:bd739ced163053224e5b0ea2f3cd577481c6b6c1162cc0fbc186f1716b4a1fbd_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:d40496f114898985cde3860b9664c34d8c32de85e4d3d846df91a6ba27a2e99c_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:3f7cbe7605595d712e14d9a17717fafc6c6e334f2ad3e821c34947ec78411046_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:96775900ea90e57487da6afe59d058b33cb977a0247a1bbeb1bd07bed2816398_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:caa6b121538e074312314d9888d9b423bd225aefa4f25eb145893b9fc548c0ad_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:e59c90cfe8160b28f9d2aa9e59b1d04d742df44d2195210ebc1946ee3cb78b6f_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:10c95e5c55ccc1a04e8d2ac28bd1afd3b9bb9a7e9e2a5e3e8efb301421539980_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:60a310d4464b4817845703d14e95729321b883fbfc79fbf2dd8d514bb3c675e9_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:70e6c14d72f14d25a90f44043932fbd3f824b30e8ad4b36307100726b24d9c06_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:784129cf69b3bf77a907fe909fd73a2a4d0fbd947fe0037e47aa1d62c6ffcf0b_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:26e58654cdd092cb812207cb4473f5f5988ebd708d95c34152c2e8c124f7297d_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:40e5d9634aa7469df8247758961d486cfac3e7d7f0b59184e11ed5571b46bf40_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:5b59faed336de07965755c893cb9d0ffc52ec90f61cc8c54487f6c0cac53322e_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:b59aea0c9e859025988b0f0c9b6e7748c4acf6d0b4cee35f3fabb7b84feb598b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:2368703206d833e4cb73b7e8750efb9997633a6f9accbf032426bcfcae4c00d9_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:80b543b207e724e880ff932c514fe9c6a3925bfede1c31863531e4e69d050d40_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:82405a9a5715db5442dfa3d3f594888bd7b2f9c778d68357a7d8884f5ea46915_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:8fd2bda7b8d94ededf7973f76a159dd61105776a05d961ac9cfd9bee0a988213_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:4def845360282dad99181b96bcd834b4863eab39e246fda2476234c561c652ec_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:b67aec868b6366cf04f3980b15588e1a0af5c88b2248958bc3884261ad390ca0_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:ceacf3491ebec6f5613011fe8d36b66d00f8b3697832615a4d7024e23125085e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:d9f6a520b818dcccbedb94720b5979ef1cdec2e02491c76e3decb3ee18f2085d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:3e6519c0c789b946eb1b811867c41c4f204440bad5734760c0aca4e3fc602e5a_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:95684cfaf4d5d91bc9fe8cfbf64a6f113e944e3f0c102d27851be5232eca0dbb_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:9cb20990af88287dd8a27de4e4ef12eb244577a1844482d26107359c6efe8efa_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:a69ebb0c7e817d44cfabd86ad13ef4cc94a8bf5b6e8a607d17b197603d64a224_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:03adc6277e2bf409391941c6f4508154abc38a0c043139978754f6d4fd32c5a8_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:7e100af30ed11325cb2cbee02af09306e53df5db5847f2a4b733cd307e3cd623_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:91b474b4808b18c279c9f8eb3be8e6d1e1e47cf2b5f9553acd901c74b20bddbc_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:d56f884a9700a4f193d6f3db1895bd54745ec77e02ead3d43bd6e4fe04a2969e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:1f7ed606f69a74943aedb0a956e5a71019f8a1ab53cd3f8166be0f55a69809b9_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:4841076eb82f1f1748345556ff6c4e02a17f1f63c661e375eaba720291cbaf6a_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:a79ac7dcae109aa526e2a218327dd8c5dba2b924fc27447a07199b3b2f2f67b3_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:dee022821852f2d5ebdbbd9f09c9b97997a905061dadb3f78433291d462d49a7_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:1a746b16f362a83f399255d925b322b3440b3d89ae4d64ab7962db3d82ee91a1_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:417a31bec11c3ffb70f40fa955069d5160dc12e2426b67e1d2e35ae3f7fa06df_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:89a3cb77fdb3dcbddfe96785a9ba3fa2b6132098fce028f859663b31fcf77a34_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:b1ba0b4cd8f515895af7b9f797f6ea5b661f7254ce019ce5115375639dcd06e9_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:0827c96b922ca185b7a7321a4f504e8a5dc01aadafcfd20443060546981339a8_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:b5b732dfc0ce3d740781eda9a72e1542c7a30b28b39d2be6e0ba470af06a9680_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:f74081e5eb03227ccff5717a7d139ceee6c5b610625ff7b99e639a2652bf7663_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:f80976ae4fc332600e1d8e1d70b42c038ea05d76ac2c5b1d7d0cbaddbe89140a_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:4029ece83812237ce8b1d394252e9561012e8cd94af40680a90284fbea1bc32a_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:63a3465a7539a8a286c846a84d63e3feca9a11758e4c0d697889b0bdeb26a25c_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:81c227d7c7599b0d4357ccdc3b567f31b67bbd1198c9e7ddba1864c299bad11b_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:f392bde8ce22aca058d77132cc709440442931679dbe725c52516f1cdc97b38d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:4825fab15300bc911e0b2b5c4ae342004bfcff95fa64af0fdb1085fadd132aa2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:68f879679911c2ca828551b900eca1c2f4e8caec7312fbba502fabc4778d1832_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:b4188ac728c746769ef6586663dd6d7d07db984b083397d2c76fe847ef22ea60_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:f2805fc1e6f37bc8acc3187ea8712d38f32151d584c10d5996c0ad7076cd638b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:1c943edcf23df14f254e4aabb93cbc1665bbc7902076b3f04bd80edd2fe324db_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:84c5d2b24caf68c3a6a6d078bd9f66de9fb88e769f6c09c11a248693d463ac21_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:907d6e24922d6d372bceb21ad830c254c6a9c9d6be0ac4f4edf22c236437a09d_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:923a3ee0e3d5b7341b96826e465e6856855f2801dbaf381d139a632c77bda1c5_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:285d2e2d103b458f0603435aedb4d779d85e48fed2267845b798f4a04a0df4c7_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:44981f5fcbc9086470143fae6e21a5de3baad2258d9f8c81accecb2faad6b2a2_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:5ba248d0bc8fcde70e210319bb962f4043e5e8ab8a5625c8f8f30ec96d47c6b7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:f681cdac28ee9ff6375fb39d7b7d12917a06043db44c16e8f84bdb9e09e7b5e7_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:2057531884d897574fc0648e5d3cf21c4549738ac5f35d8095f400cdb80049cc_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:8be0e50a132a2c974893f36b51f3f40b6d6e1f913ae0f9ee6319ef0d5ec455b7_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:a2edc5d233d1547fa2e1d01f29d8a914930735f7098289892430ba9a17d20ab7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:c81c7aeb3dd05801e279a9fcc8d6c3baf00a2ccc08eab53f8acc8bd4d2d129c4_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:25e17bf203568420587cf5907e84e4167afab84dfce549c91bea99e70290b742_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:277f4e8ac5fc292b9f0f2d123f924c6b5cbc0a2eeba3c87a0e61c5ee2399aaa9_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:76766b77ed53513cd254195b25d205ab6964522816e1e3662800e38a105abdf2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:c7ace45f7cb86055e2ba18e27a660f6aa6cb4eff497204294875d5dd1d63cce3_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:3780b1bc80ab7ebc3cfed06ce69346d589dc07b53cea65ad3ed92cc912284300_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:681b356709778083448892513b4559f693e002bfda897a57e2d065f736a902b5_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:d110b52ce8ea022b3d35e7c4b0ce3b646f30513cf8abb55327132565ea4a6a87_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:f076ab59f3abe061e4553a61f98a144a472297dba5ed924ca887f130e9372da9_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44740"
},
{
"category": "external",
"summary": "RHBZ#2483894",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2483894"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44740",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44740"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44740",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44740"
},
{
"category": "external",
"summary": "https://github.com/go-git/go-billy/releases/tag/v5.9.0",
"url": "https://github.com/go-git/go-billy/releases/tag/v5.9.0"
},
{
"category": "external",
"summary": "https://github.com/go-git/go-billy/releases/tag/v6.0.0-alpha.1",
"url": "https://github.com/go-git/go-billy/releases/tag/v6.0.0-alpha.1"
},
{
"category": "external",
"summary": "https://github.com/go-git/go-billy/security/advisories/GHSA-m3xc-h892-ggx6",
"url": "https://github.com/go-git/go-billy/security/advisories/GHSA-m3xc-h892-ggx6"
}
],
"release_date": "2026-06-01T16:04:50.358000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T07:47:11+00:00",
"details": "Before you apply this update, make sure all previously released errata\nthat are relevant to your system are applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:0eea35a3af36d08db945a70c387cc38eb326f75b4ed322f09d8c91863cfe5d02_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:22c48db227cd6f2ecec746674e31ac7f5a983a418679fc91678a0aa0ebb49496_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:8e8d249c39d562f819d347f12610dda7f5c01215c41101bfd5dca008e04edf6e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:f8adb8dd40a204bacb51cd423803097a514ec8e8e9f52209e02ecf14cad622bb_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:47737"
},
{
"category": "workaround",
"details": "To mitigate the issue, we suggest upgrading to versions 5.9.0+ or 6.0.0-alpha.1+",
"product_ids": [
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:31bd91156f49687d2efffd3be971d9ee0e16abb420b8e8b958caa88b97770020_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:a6315866c67ba350665f5a92f960a5a44e427ca37ae7505e2072af4e02c42f76_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:b3ad6fa1de658f3a40c8b183ab501ebc66b359d8cc01439d4215aa52769df213_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:bfde9ebea1fcd27b6d104d5f67db62e870878f9517ccbec2f649dd2c1af4a073_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:08fed161d59299881ff7a54db859feaf8ed7bdb8238d6cf12628ccb73575665e_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:09436fe2649ca384b1bc1fd8f736fb1d71392733310e66758ed9f289e00471f9_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:3b83670e1c0e9d1f5b76bd7b75d77072bc6208646bc2201bd0bd200dbc59e34a_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:927146f966e4c5c2908d29d8ab45a8f3071dbd5ebd9cf0424460a23f814a72a7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:38a3bc59511133cae56827eba879e7c82c5a974bf1f16b6e8d95e1f79821e669_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:3fa04db82e3ce6169270db0ce29107b69d8e044e0a1ab13a2bf1050b8c26d087_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:6041a918713d4464c73560b68c294a12d33f297a980d2f9d0e0cc8c300a96f24_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:98bd72ba69bdfb3070d87b3edcbd7050579a514b72cfd67c2926541ba52dbaf7_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:938abc970731c2eeda8e2b7b73e96d4dfcbf7587330c7b7e52117a577700e426_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:a0876a25ce85d7d4616212813f012422826f152b8d71065e75cd9c3e23034d8a_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:c77077a0cca835a503a6529c89ab19c4027f949d361afdf8a5a259e1e87b0d55_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:d5bbf3fe886f27cdc27363dcb175e004487d9c8f36de4f1f8516fbeda3a95224_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:0f5d8cae3ba4ea4fcdc5fb9d08f797d576bc225b92af66f193bd4b1324cda4b9_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:2d3588825f8a714fa59b1648d0934d064165e333f322f7f31f01f07b940d42d9_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:68aa571827f5331f1d5a3bd0c60ad441a18877ba11921aff2633940236bafcd4_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:9b80c9c61d4befefa7f6a65ae8c001ce7e343a1e4f251e5ebe025625d9511730_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:9b2c24401a91903f023096d2b641aa977acff423eb6770a8e4c4a81aecfd4e62_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:9d74585acc098c13f3e9dac5ae7f5ef337fa82bd7119d7f1849c5f8a50e84907_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:a6ee95d0ed82bddef084684d11fa770bd646d9be9bc65b3bc386d7c58b33975c_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:f7b8654eb8bf675c8c26f0ad395d790f990308d3ad6683bb61b484c92073bbac_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:2a598e7fd07db27100d9a53a328ac9a0535865883bddd1373f4f1f2705068d2f_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:4f8f0b02d0969753e156226a998d442746c238a2a50ea606a49ca0cf695b8925_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:63c02348faa7d4e26e35c69aef5453613dd607a26116823b931b89fe5311e181_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:ae224866f0085d2c00ab18a28d2aed076e455731903989a49a544abf49950d1f_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:0a90a13f006ef0b271079b728ef6d54081f36ae19b6d0e9ab4dc24ea52a30fad_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:3a53629645832974a883002e53198df7c28e59dd6d1df99bf321b52d0ef84b61_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:879315f438ca43abb607d6c97f8fbd4ca2d38209b142e2d97cc0598740273252_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:c6c4d01f5fcee6cad3fc870cace92f45000624760e6e93654bb5e814afeed7bb_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:50f7647620c78fd6b445379c8762f5e978113fe3552906376a24459263f27459_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:53e641f48ddc05c63da2e6bc24e9e4636a10de2c3599d8f5f78622bdebca07ca_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:57114b7a386c406715e342637558fab57afeef2e193517f99173a441f39401d5_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:dcdcaa90f292f2d7ad3f10acbedfab9f7f22f3432c3156055f34760d9bf9429c_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:3723b1d5c74f37cba219e203fd2026a718d4821595cb505ec6626684695da65b_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:562291f52b6bce98ec8795856b808545c4fe30047b54544c7f6c2ab4678480ff_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:e6dfac9bc3e467e141a425944782f5087ed967ac4d02d8d47442e3d61ba5b882_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:f683186c2cc8be9ec09b8efdec66d6b8b1f991c7f7b9fd398dc7c3f9ab8b3079_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:2471edd63a94473c68cf37ee50de643e40003f2c5bba84063c154e4888a7f0bd_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:7cef49d68df5d8efe52061a18920e07e6c7efa3016c0cea7d1747e67851f254a_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:d912383405599032acffbad22bc154f63a87dd429ba882fd7a94cb82fe650d8e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:f3034211e16de48af540efe4ee460395dba0a4a544fa4f277a12840a25df1730_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:181d1decb2f16fcf6f5938027ed346aca29126687bbe6cdcc601c25087f70d11_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:ab5e4d27e23448d99a37b8c05442bb1254083cdc4ff325e721d97d80ec27346c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:ac172243d158e126594f28317e0cfb37dc1790c9f2121e95fe52506b5e05fc91_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:fd96b6284d270effa0f838d960ea4218b72b54c4718513eb523658f2f4972682_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:c59d9cd479c62730eda5d482fb2f4e9fbc17a90a5a2861b130aafe1f3a27a333_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:e547f672b14b6e8fc2ffd300b150aedbd3f6b6b36ddcad612f7c992a936a7c82_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:ead1263d538974c48790c65e44cd9cab07a62c2893b2eeb250174e7cf58d7f9d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:ed0457a57c7b39b79fb308176f45ffe678938b25fbb8c15de2cedbe54b916f64_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:9847a5752ec77e17861dcdac5546ee5c53679c80c3569609b21d9080ee3b7ef3_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:d3c823e61a0682ddc85e576e86234e580992886de471035630f9c89bbad6ebb7_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:ded425ed0af88a1411a06e5191aee25c4c59f1de85b041eba95c9997686cf09e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:ee63f59942f9df04e95fc4266f0d194cd62a7ca08dd5478283884d0ab6003da7_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:724377cabaa284a5197e7505a7150c89631c2f2bcc629e074c7c0be18abd8e6f_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:cbf797c9e93413540b20ebee9191375ddd8185ef22dc8c9e23cc3a4c015abaf7_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:d7609d62a801cf07ef639abcd4f193b2d68967fadebbfddf2349003d7e9eaa44_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:f61fe90362f793225591eb7e2a86d5cdc6fb35aa087e9b6a6218a42b1c1d945d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:1c4de9460688800b62bad6fb13653ef4b52bf215e4d41674291193e9b8e71b24_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:4f1e59610b2fbedc56f425b3fbd8f16c9ea6ea96025f18a404fe48f6a49bdc1e_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:ab0d28306dd6daa03af79bdc2ea650e59a50a03317987c4cdd0d1ee70f95b597_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:b700a8bb7ea6e4253afb8bcf94e5ad086349980ca0716a87817724d3da3fdce1_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4015f46d2172db26a348635e2e8cbd4bbcdbbaa56a4b12c232676a3d0f5bbee2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4169252c61ec70b91b10c750d5f9ecd53f5c3c906766bba9103afbac3c3f9edf_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4ab72a192553c21de76754f06fe38cf443e686e4b4edc2aa2ceb2b6b9d95bb6c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:579ef0925c6f56ed48f22121767189431bef6c4eaa72b2648a1b91488357a51d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:2b796bf55ecf7a14d1c87d829a2b20d998fc2943686373105b0a50f5053ef836_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:7e960b59f64547f7e9602b7c066a51ab52aba929726aec2bacdf486a9d4d28fd_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:a43e430a2ec0b86fb6ade361677be298b4e27444388a9bca35ddafbf9c77277c_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:d2394b121256985e5ca322aea77bb0bf999ba2d7a6f1627e62bbc125c475dbbd_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:1868e2ea03d063b4cd64601cb0aaf5c9ea7f55e83eba2e2d4dcf6f830efeafc7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:4bfbf0bdc882979bc94d85a4aeff8caa0ec7887aec7412e32ae1442811325d06_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:844e3d69d3c26914e02612466021592a876e6e2dd6cf77084723a70f567ba0e2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:bbe04eb8fd197f15875f498e3c18b9a7a445380efb5f696422d79df99a34a881_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:2c9f9b47c01c5e5e017c583c6a09c5c52f40ef88acf789689265cb31ef328fb8_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:7b5e883efde312c1571c4825b523ff04ab57af6a9f4162a36b80b973f9602c46_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:d896dd89fb924da246fc729041d9debc019d8a4210cfd3de8883834e429cca10_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:ede3e22d4e4de49789622149dec23beaa7e0569a3715ac2262929df543e05bc3_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:273a393b8c62fbc4edb4bf4033c47d8b52bda56fc9cafa289d9513210840815b_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:71f1b590785ce7f4577ecd687dbab9bc3c5931c568a3108eb84279c7aa892046_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:d1e1b4310eb64891c9456be7c34547bf36b0aafdeb471a49f0892d7eaf8f41f4_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:e0a7514406c7ffae080db6d4db3bbf7b77a606ea4632bf09f8301ce1d3739bb5_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:2a4c6c061d154ed9c74707a7a2e2390fde2a150f36197386c3e49c0612d345b2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:6ffcc051c955e198c6d96b59bda0ef26b5124ebbdef5357d36a84534f2c7097c_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:c9258bf58373f9c6859789c8ec272cd7d702c37e063fc2ee53c66d296e7ee3d0_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:d83c6bb4f2a91d2c4de3ffbf4aa8ceecb695f8491ba7586d55275c62cd1931e6_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:67637c5cba3eca1597885823c6e44c13db445d0ef38751eb8364b69dbf07caac_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:68fb5c2a3c8a0d5e6bbcf2c5568969f6b13e72006d4d54bc5c57cd9a032d1bf6_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:9f5fa40c88b0f5d1ae3634632240817a91f4575f8eae9c005b8e35a55cf38003_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:fcbcee9fc7e0bbf5775a33ae9b7e3d7e48a90e2aa1cb85605e05612b6e4d4e30_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:0c165bb93ce933c7f9998a615908bfcca0b4eb38e32e24a1c823e63791b7604b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:42aa392f82bdc45a3b857d1ed44e224ddfd14db1e3dcbb74dcc850ac0540e964_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:9dcd0c0ecf1523bf05bd296edbecd85841b2753dee7a5c9df32437f9a8e31471_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:c5505c462e6b2c04a6e14bc1e22dfc42dc8adea8f6eaf0615cd58b1973b7d62e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:1a93df314c31f10da7b1345fab07b15b846e28865764178e34124f84dc967152_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:34343f81973c3fbdd8630c32d0fad597745ea10f960ea64236408e58e0f10e14_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:7b3635784ebfb6343a73c9fa6de7bea57b3aacce1c49a0f7f250a471f7b897e3_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:f0a7fade2853193429bab16922b2e3bbe426e14632423d6550ff7dfb66d42827_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:94950d339fa382d6911f12fc23dcaf2cdb2854c4cab654f6058f5bf0df1bb371_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:bcfbd2284cbeeba5a835aaf5a5590ddd8156bd881ca24fd0fe1465fade1f84c2_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:bd739ced163053224e5b0ea2f3cd577481c6b6c1162cc0fbc186f1716b4a1fbd_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:d40496f114898985cde3860b9664c34d8c32de85e4d3d846df91a6ba27a2e99c_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:3f7cbe7605595d712e14d9a17717fafc6c6e334f2ad3e821c34947ec78411046_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:96775900ea90e57487da6afe59d058b33cb977a0247a1bbeb1bd07bed2816398_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:caa6b121538e074312314d9888d9b423bd225aefa4f25eb145893b9fc548c0ad_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:e59c90cfe8160b28f9d2aa9e59b1d04d742df44d2195210ebc1946ee3cb78b6f_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:10c95e5c55ccc1a04e8d2ac28bd1afd3b9bb9a7e9e2a5e3e8efb301421539980_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:60a310d4464b4817845703d14e95729321b883fbfc79fbf2dd8d514bb3c675e9_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:70e6c14d72f14d25a90f44043932fbd3f824b30e8ad4b36307100726b24d9c06_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:784129cf69b3bf77a907fe909fd73a2a4d0fbd947fe0037e47aa1d62c6ffcf0b_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:26e58654cdd092cb812207cb4473f5f5988ebd708d95c34152c2e8c124f7297d_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:40e5d9634aa7469df8247758961d486cfac3e7d7f0b59184e11ed5571b46bf40_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:5b59faed336de07965755c893cb9d0ffc52ec90f61cc8c54487f6c0cac53322e_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:b59aea0c9e859025988b0f0c9b6e7748c4acf6d0b4cee35f3fabb7b84feb598b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:2368703206d833e4cb73b7e8750efb9997633a6f9accbf032426bcfcae4c00d9_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:80b543b207e724e880ff932c514fe9c6a3925bfede1c31863531e4e69d050d40_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:82405a9a5715db5442dfa3d3f594888bd7b2f9c778d68357a7d8884f5ea46915_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:8fd2bda7b8d94ededf7973f76a159dd61105776a05d961ac9cfd9bee0a988213_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:4def845360282dad99181b96bcd834b4863eab39e246fda2476234c561c652ec_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:b67aec868b6366cf04f3980b15588e1a0af5c88b2248958bc3884261ad390ca0_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:ceacf3491ebec6f5613011fe8d36b66d00f8b3697832615a4d7024e23125085e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:d9f6a520b818dcccbedb94720b5979ef1cdec2e02491c76e3decb3ee18f2085d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:3e6519c0c789b946eb1b811867c41c4f204440bad5734760c0aca4e3fc602e5a_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:95684cfaf4d5d91bc9fe8cfbf64a6f113e944e3f0c102d27851be5232eca0dbb_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:9cb20990af88287dd8a27de4e4ef12eb244577a1844482d26107359c6efe8efa_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:a69ebb0c7e817d44cfabd86ad13ef4cc94a8bf5b6e8a607d17b197603d64a224_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:0eea35a3af36d08db945a70c387cc38eb326f75b4ed322f09d8c91863cfe5d02_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:22c48db227cd6f2ecec746674e31ac7f5a983a418679fc91678a0aa0ebb49496_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:8e8d249c39d562f819d347f12610dda7f5c01215c41101bfd5dca008e04edf6e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:f8adb8dd40a204bacb51cd423803097a514ec8e8e9f52209e02ecf14cad622bb_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:03adc6277e2bf409391941c6f4508154abc38a0c043139978754f6d4fd32c5a8_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:7e100af30ed11325cb2cbee02af09306e53df5db5847f2a4b733cd307e3cd623_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:91b474b4808b18c279c9f8eb3be8e6d1e1e47cf2b5f9553acd901c74b20bddbc_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:d56f884a9700a4f193d6f3db1895bd54745ec77e02ead3d43bd6e4fe04a2969e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:1f7ed606f69a74943aedb0a956e5a71019f8a1ab53cd3f8166be0f55a69809b9_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:4841076eb82f1f1748345556ff6c4e02a17f1f63c661e375eaba720291cbaf6a_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:a79ac7dcae109aa526e2a218327dd8c5dba2b924fc27447a07199b3b2f2f67b3_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:dee022821852f2d5ebdbbd9f09c9b97997a905061dadb3f78433291d462d49a7_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:1a746b16f362a83f399255d925b322b3440b3d89ae4d64ab7962db3d82ee91a1_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:417a31bec11c3ffb70f40fa955069d5160dc12e2426b67e1d2e35ae3f7fa06df_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:89a3cb77fdb3dcbddfe96785a9ba3fa2b6132098fce028f859663b31fcf77a34_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:b1ba0b4cd8f515895af7b9f797f6ea5b661f7254ce019ce5115375639dcd06e9_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:0827c96b922ca185b7a7321a4f504e8a5dc01aadafcfd20443060546981339a8_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:b5b732dfc0ce3d740781eda9a72e1542c7a30b28b39d2be6e0ba470af06a9680_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:f74081e5eb03227ccff5717a7d139ceee6c5b610625ff7b99e639a2652bf7663_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:f80976ae4fc332600e1d8e1d70b42c038ea05d76ac2c5b1d7d0cbaddbe89140a_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:4029ece83812237ce8b1d394252e9561012e8cd94af40680a90284fbea1bc32a_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:63a3465a7539a8a286c846a84d63e3feca9a11758e4c0d697889b0bdeb26a25c_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:81c227d7c7599b0d4357ccdc3b567f31b67bbd1198c9e7ddba1864c299bad11b_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:f392bde8ce22aca058d77132cc709440442931679dbe725c52516f1cdc97b38d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:4825fab15300bc911e0b2b5c4ae342004bfcff95fa64af0fdb1085fadd132aa2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:68f879679911c2ca828551b900eca1c2f4e8caec7312fbba502fabc4778d1832_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:b4188ac728c746769ef6586663dd6d7d07db984b083397d2c76fe847ef22ea60_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:f2805fc1e6f37bc8acc3187ea8712d38f32151d584c10d5996c0ad7076cd638b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:1c943edcf23df14f254e4aabb93cbc1665bbc7902076b3f04bd80edd2fe324db_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:84c5d2b24caf68c3a6a6d078bd9f66de9fb88e769f6c09c11a248693d463ac21_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:907d6e24922d6d372bceb21ad830c254c6a9c9d6be0ac4f4edf22c236437a09d_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:923a3ee0e3d5b7341b96826e465e6856855f2801dbaf381d139a632c77bda1c5_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:285d2e2d103b458f0603435aedb4d779d85e48fed2267845b798f4a04a0df4c7_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:44981f5fcbc9086470143fae6e21a5de3baad2258d9f8c81accecb2faad6b2a2_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:5ba248d0bc8fcde70e210319bb962f4043e5e8ab8a5625c8f8f30ec96d47c6b7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:f681cdac28ee9ff6375fb39d7b7d12917a06043db44c16e8f84bdb9e09e7b5e7_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:2057531884d897574fc0648e5d3cf21c4549738ac5f35d8095f400cdb80049cc_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:8be0e50a132a2c974893f36b51f3f40b6d6e1f913ae0f9ee6319ef0d5ec455b7_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:a2edc5d233d1547fa2e1d01f29d8a914930735f7098289892430ba9a17d20ab7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:c81c7aeb3dd05801e279a9fcc8d6c3baf00a2ccc08eab53f8acc8bd4d2d129c4_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:25e17bf203568420587cf5907e84e4167afab84dfce549c91bea99e70290b742_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:277f4e8ac5fc292b9f0f2d123f924c6b5cbc0a2eeba3c87a0e61c5ee2399aaa9_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:76766b77ed53513cd254195b25d205ab6964522816e1e3662800e38a105abdf2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:c7ace45f7cb86055e2ba18e27a660f6aa6cb4eff497204294875d5dd1d63cce3_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:3780b1bc80ab7ebc3cfed06ce69346d589dc07b53cea65ad3ed92cc912284300_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:681b356709778083448892513b4559f693e002bfda897a57e2d065f736a902b5_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:d110b52ce8ea022b3d35e7c4b0ce3b646f30513cf8abb55327132565ea4a6a87_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:f076ab59f3abe061e4553a61f98a144a472297dba5ed924ca887f130e9372da9_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:31bd91156f49687d2efffd3be971d9ee0e16abb420b8e8b958caa88b97770020_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:a6315866c67ba350665f5a92f960a5a44e427ca37ae7505e2072af4e02c42f76_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:b3ad6fa1de658f3a40c8b183ab501ebc66b359d8cc01439d4215aa52769df213_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:bfde9ebea1fcd27b6d104d5f67db62e870878f9517ccbec2f649dd2c1af4a073_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:08fed161d59299881ff7a54db859feaf8ed7bdb8238d6cf12628ccb73575665e_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:09436fe2649ca384b1bc1fd8f736fb1d71392733310e66758ed9f289e00471f9_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:3b83670e1c0e9d1f5b76bd7b75d77072bc6208646bc2201bd0bd200dbc59e34a_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:927146f966e4c5c2908d29d8ab45a8f3071dbd5ebd9cf0424460a23f814a72a7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:38a3bc59511133cae56827eba879e7c82c5a974bf1f16b6e8d95e1f79821e669_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:3fa04db82e3ce6169270db0ce29107b69d8e044e0a1ab13a2bf1050b8c26d087_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:6041a918713d4464c73560b68c294a12d33f297a980d2f9d0e0cc8c300a96f24_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:98bd72ba69bdfb3070d87b3edcbd7050579a514b72cfd67c2926541ba52dbaf7_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:938abc970731c2eeda8e2b7b73e96d4dfcbf7587330c7b7e52117a577700e426_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:a0876a25ce85d7d4616212813f012422826f152b8d71065e75cd9c3e23034d8a_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:c77077a0cca835a503a6529c89ab19c4027f949d361afdf8a5a259e1e87b0d55_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:d5bbf3fe886f27cdc27363dcb175e004487d9c8f36de4f1f8516fbeda3a95224_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:0f5d8cae3ba4ea4fcdc5fb9d08f797d576bc225b92af66f193bd4b1324cda4b9_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:2d3588825f8a714fa59b1648d0934d064165e333f322f7f31f01f07b940d42d9_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:68aa571827f5331f1d5a3bd0c60ad441a18877ba11921aff2633940236bafcd4_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:9b80c9c61d4befefa7f6a65ae8c001ce7e343a1e4f251e5ebe025625d9511730_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:9b2c24401a91903f023096d2b641aa977acff423eb6770a8e4c4a81aecfd4e62_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:9d74585acc098c13f3e9dac5ae7f5ef337fa82bd7119d7f1849c5f8a50e84907_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:a6ee95d0ed82bddef084684d11fa770bd646d9be9bc65b3bc386d7c58b33975c_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:f7b8654eb8bf675c8c26f0ad395d790f990308d3ad6683bb61b484c92073bbac_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:2a598e7fd07db27100d9a53a328ac9a0535865883bddd1373f4f1f2705068d2f_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:4f8f0b02d0969753e156226a998d442746c238a2a50ea606a49ca0cf695b8925_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:63c02348faa7d4e26e35c69aef5453613dd607a26116823b931b89fe5311e181_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:ae224866f0085d2c00ab18a28d2aed076e455731903989a49a544abf49950d1f_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:0a90a13f006ef0b271079b728ef6d54081f36ae19b6d0e9ab4dc24ea52a30fad_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:3a53629645832974a883002e53198df7c28e59dd6d1df99bf321b52d0ef84b61_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:879315f438ca43abb607d6c97f8fbd4ca2d38209b142e2d97cc0598740273252_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:c6c4d01f5fcee6cad3fc870cace92f45000624760e6e93654bb5e814afeed7bb_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:50f7647620c78fd6b445379c8762f5e978113fe3552906376a24459263f27459_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:53e641f48ddc05c63da2e6bc24e9e4636a10de2c3599d8f5f78622bdebca07ca_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:57114b7a386c406715e342637558fab57afeef2e193517f99173a441f39401d5_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:dcdcaa90f292f2d7ad3f10acbedfab9f7f22f3432c3156055f34760d9bf9429c_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:3723b1d5c74f37cba219e203fd2026a718d4821595cb505ec6626684695da65b_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:562291f52b6bce98ec8795856b808545c4fe30047b54544c7f6c2ab4678480ff_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:e6dfac9bc3e467e141a425944782f5087ed967ac4d02d8d47442e3d61ba5b882_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:f683186c2cc8be9ec09b8efdec66d6b8b1f991c7f7b9fd398dc7c3f9ab8b3079_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:2471edd63a94473c68cf37ee50de643e40003f2c5bba84063c154e4888a7f0bd_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:7cef49d68df5d8efe52061a18920e07e6c7efa3016c0cea7d1747e67851f254a_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:d912383405599032acffbad22bc154f63a87dd429ba882fd7a94cb82fe650d8e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:f3034211e16de48af540efe4ee460395dba0a4a544fa4f277a12840a25df1730_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:181d1decb2f16fcf6f5938027ed346aca29126687bbe6cdcc601c25087f70d11_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:ab5e4d27e23448d99a37b8c05442bb1254083cdc4ff325e721d97d80ec27346c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:ac172243d158e126594f28317e0cfb37dc1790c9f2121e95fe52506b5e05fc91_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:fd96b6284d270effa0f838d960ea4218b72b54c4718513eb523658f2f4972682_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:c59d9cd479c62730eda5d482fb2f4e9fbc17a90a5a2861b130aafe1f3a27a333_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:e547f672b14b6e8fc2ffd300b150aedbd3f6b6b36ddcad612f7c992a936a7c82_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:ead1263d538974c48790c65e44cd9cab07a62c2893b2eeb250174e7cf58d7f9d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:ed0457a57c7b39b79fb308176f45ffe678938b25fbb8c15de2cedbe54b916f64_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:9847a5752ec77e17861dcdac5546ee5c53679c80c3569609b21d9080ee3b7ef3_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:d3c823e61a0682ddc85e576e86234e580992886de471035630f9c89bbad6ebb7_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:ded425ed0af88a1411a06e5191aee25c4c59f1de85b041eba95c9997686cf09e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:ee63f59942f9df04e95fc4266f0d194cd62a7ca08dd5478283884d0ab6003da7_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:724377cabaa284a5197e7505a7150c89631c2f2bcc629e074c7c0be18abd8e6f_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:cbf797c9e93413540b20ebee9191375ddd8185ef22dc8c9e23cc3a4c015abaf7_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:d7609d62a801cf07ef639abcd4f193b2d68967fadebbfddf2349003d7e9eaa44_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:f61fe90362f793225591eb7e2a86d5cdc6fb35aa087e9b6a6218a42b1c1d945d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:1c4de9460688800b62bad6fb13653ef4b52bf215e4d41674291193e9b8e71b24_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:4f1e59610b2fbedc56f425b3fbd8f16c9ea6ea96025f18a404fe48f6a49bdc1e_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:ab0d28306dd6daa03af79bdc2ea650e59a50a03317987c4cdd0d1ee70f95b597_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:b700a8bb7ea6e4253afb8bcf94e5ad086349980ca0716a87817724d3da3fdce1_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4015f46d2172db26a348635e2e8cbd4bbcdbbaa56a4b12c232676a3d0f5bbee2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4169252c61ec70b91b10c750d5f9ecd53f5c3c906766bba9103afbac3c3f9edf_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4ab72a192553c21de76754f06fe38cf443e686e4b4edc2aa2ceb2b6b9d95bb6c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:579ef0925c6f56ed48f22121767189431bef6c4eaa72b2648a1b91488357a51d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:2b796bf55ecf7a14d1c87d829a2b20d998fc2943686373105b0a50f5053ef836_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:7e960b59f64547f7e9602b7c066a51ab52aba929726aec2bacdf486a9d4d28fd_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:a43e430a2ec0b86fb6ade361677be298b4e27444388a9bca35ddafbf9c77277c_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:d2394b121256985e5ca322aea77bb0bf999ba2d7a6f1627e62bbc125c475dbbd_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:1868e2ea03d063b4cd64601cb0aaf5c9ea7f55e83eba2e2d4dcf6f830efeafc7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:4bfbf0bdc882979bc94d85a4aeff8caa0ec7887aec7412e32ae1442811325d06_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:844e3d69d3c26914e02612466021592a876e6e2dd6cf77084723a70f567ba0e2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:bbe04eb8fd197f15875f498e3c18b9a7a445380efb5f696422d79df99a34a881_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:2c9f9b47c01c5e5e017c583c6a09c5c52f40ef88acf789689265cb31ef328fb8_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:7b5e883efde312c1571c4825b523ff04ab57af6a9f4162a36b80b973f9602c46_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:d896dd89fb924da246fc729041d9debc019d8a4210cfd3de8883834e429cca10_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:ede3e22d4e4de49789622149dec23beaa7e0569a3715ac2262929df543e05bc3_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:273a393b8c62fbc4edb4bf4033c47d8b52bda56fc9cafa289d9513210840815b_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:71f1b590785ce7f4577ecd687dbab9bc3c5931c568a3108eb84279c7aa892046_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:d1e1b4310eb64891c9456be7c34547bf36b0aafdeb471a49f0892d7eaf8f41f4_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:e0a7514406c7ffae080db6d4db3bbf7b77a606ea4632bf09f8301ce1d3739bb5_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:2a4c6c061d154ed9c74707a7a2e2390fde2a150f36197386c3e49c0612d345b2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:6ffcc051c955e198c6d96b59bda0ef26b5124ebbdef5357d36a84534f2c7097c_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:c9258bf58373f9c6859789c8ec272cd7d702c37e063fc2ee53c66d296e7ee3d0_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:d83c6bb4f2a91d2c4de3ffbf4aa8ceecb695f8491ba7586d55275c62cd1931e6_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:67637c5cba3eca1597885823c6e44c13db445d0ef38751eb8364b69dbf07caac_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:68fb5c2a3c8a0d5e6bbcf2c5568969f6b13e72006d4d54bc5c57cd9a032d1bf6_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:9f5fa40c88b0f5d1ae3634632240817a91f4575f8eae9c005b8e35a55cf38003_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:fcbcee9fc7e0bbf5775a33ae9b7e3d7e48a90e2aa1cb85605e05612b6e4d4e30_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:0c165bb93ce933c7f9998a615908bfcca0b4eb38e32e24a1c823e63791b7604b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:42aa392f82bdc45a3b857d1ed44e224ddfd14db1e3dcbb74dcc850ac0540e964_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:9dcd0c0ecf1523bf05bd296edbecd85841b2753dee7a5c9df32437f9a8e31471_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:c5505c462e6b2c04a6e14bc1e22dfc42dc8adea8f6eaf0615cd58b1973b7d62e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:1a93df314c31f10da7b1345fab07b15b846e28865764178e34124f84dc967152_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:34343f81973c3fbdd8630c32d0fad597745ea10f960ea64236408e58e0f10e14_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:7b3635784ebfb6343a73c9fa6de7bea57b3aacce1c49a0f7f250a471f7b897e3_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:f0a7fade2853193429bab16922b2e3bbe426e14632423d6550ff7dfb66d42827_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:94950d339fa382d6911f12fc23dcaf2cdb2854c4cab654f6058f5bf0df1bb371_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:bcfbd2284cbeeba5a835aaf5a5590ddd8156bd881ca24fd0fe1465fade1f84c2_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:bd739ced163053224e5b0ea2f3cd577481c6b6c1162cc0fbc186f1716b4a1fbd_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:d40496f114898985cde3860b9664c34d8c32de85e4d3d846df91a6ba27a2e99c_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:3f7cbe7605595d712e14d9a17717fafc6c6e334f2ad3e821c34947ec78411046_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:96775900ea90e57487da6afe59d058b33cb977a0247a1bbeb1bd07bed2816398_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:caa6b121538e074312314d9888d9b423bd225aefa4f25eb145893b9fc548c0ad_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:e59c90cfe8160b28f9d2aa9e59b1d04d742df44d2195210ebc1946ee3cb78b6f_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:10c95e5c55ccc1a04e8d2ac28bd1afd3b9bb9a7e9e2a5e3e8efb301421539980_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:60a310d4464b4817845703d14e95729321b883fbfc79fbf2dd8d514bb3c675e9_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:70e6c14d72f14d25a90f44043932fbd3f824b30e8ad4b36307100726b24d9c06_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:784129cf69b3bf77a907fe909fd73a2a4d0fbd947fe0037e47aa1d62c6ffcf0b_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:26e58654cdd092cb812207cb4473f5f5988ebd708d95c34152c2e8c124f7297d_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:40e5d9634aa7469df8247758961d486cfac3e7d7f0b59184e11ed5571b46bf40_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:5b59faed336de07965755c893cb9d0ffc52ec90f61cc8c54487f6c0cac53322e_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:b59aea0c9e859025988b0f0c9b6e7748c4acf6d0b4cee35f3fabb7b84feb598b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:2368703206d833e4cb73b7e8750efb9997633a6f9accbf032426bcfcae4c00d9_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:80b543b207e724e880ff932c514fe9c6a3925bfede1c31863531e4e69d050d40_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:82405a9a5715db5442dfa3d3f594888bd7b2f9c778d68357a7d8884f5ea46915_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:8fd2bda7b8d94ededf7973f76a159dd61105776a05d961ac9cfd9bee0a988213_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:4def845360282dad99181b96bcd834b4863eab39e246fda2476234c561c652ec_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:b67aec868b6366cf04f3980b15588e1a0af5c88b2248958bc3884261ad390ca0_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:ceacf3491ebec6f5613011fe8d36b66d00f8b3697832615a4d7024e23125085e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:d9f6a520b818dcccbedb94720b5979ef1cdec2e02491c76e3decb3ee18f2085d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:3e6519c0c789b946eb1b811867c41c4f204440bad5734760c0aca4e3fc602e5a_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:95684cfaf4d5d91bc9fe8cfbf64a6f113e944e3f0c102d27851be5232eca0dbb_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:9cb20990af88287dd8a27de4e4ef12eb244577a1844482d26107359c6efe8efa_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:a69ebb0c7e817d44cfabd86ad13ef4cc94a8bf5b6e8a607d17b197603d64a224_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:0eea35a3af36d08db945a70c387cc38eb326f75b4ed322f09d8c91863cfe5d02_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:22c48db227cd6f2ecec746674e31ac7f5a983a418679fc91678a0aa0ebb49496_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:8e8d249c39d562f819d347f12610dda7f5c01215c41101bfd5dca008e04edf6e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:f8adb8dd40a204bacb51cd423803097a514ec8e8e9f52209e02ecf14cad622bb_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:03adc6277e2bf409391941c6f4508154abc38a0c043139978754f6d4fd32c5a8_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:7e100af30ed11325cb2cbee02af09306e53df5db5847f2a4b733cd307e3cd623_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:91b474b4808b18c279c9f8eb3be8e6d1e1e47cf2b5f9553acd901c74b20bddbc_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:d56f884a9700a4f193d6f3db1895bd54745ec77e02ead3d43bd6e4fe04a2969e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:1f7ed606f69a74943aedb0a956e5a71019f8a1ab53cd3f8166be0f55a69809b9_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:4841076eb82f1f1748345556ff6c4e02a17f1f63c661e375eaba720291cbaf6a_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:a79ac7dcae109aa526e2a218327dd8c5dba2b924fc27447a07199b3b2f2f67b3_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:dee022821852f2d5ebdbbd9f09c9b97997a905061dadb3f78433291d462d49a7_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:1a746b16f362a83f399255d925b322b3440b3d89ae4d64ab7962db3d82ee91a1_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:417a31bec11c3ffb70f40fa955069d5160dc12e2426b67e1d2e35ae3f7fa06df_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:89a3cb77fdb3dcbddfe96785a9ba3fa2b6132098fce028f859663b31fcf77a34_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:b1ba0b4cd8f515895af7b9f797f6ea5b661f7254ce019ce5115375639dcd06e9_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:0827c96b922ca185b7a7321a4f504e8a5dc01aadafcfd20443060546981339a8_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:b5b732dfc0ce3d740781eda9a72e1542c7a30b28b39d2be6e0ba470af06a9680_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:f74081e5eb03227ccff5717a7d139ceee6c5b610625ff7b99e639a2652bf7663_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:f80976ae4fc332600e1d8e1d70b42c038ea05d76ac2c5b1d7d0cbaddbe89140a_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:4029ece83812237ce8b1d394252e9561012e8cd94af40680a90284fbea1bc32a_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:63a3465a7539a8a286c846a84d63e3feca9a11758e4c0d697889b0bdeb26a25c_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:81c227d7c7599b0d4357ccdc3b567f31b67bbd1198c9e7ddba1864c299bad11b_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:f392bde8ce22aca058d77132cc709440442931679dbe725c52516f1cdc97b38d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:4825fab15300bc911e0b2b5c4ae342004bfcff95fa64af0fdb1085fadd132aa2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:68f879679911c2ca828551b900eca1c2f4e8caec7312fbba502fabc4778d1832_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:b4188ac728c746769ef6586663dd6d7d07db984b083397d2c76fe847ef22ea60_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:f2805fc1e6f37bc8acc3187ea8712d38f32151d584c10d5996c0ad7076cd638b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:1c943edcf23df14f254e4aabb93cbc1665bbc7902076b3f04bd80edd2fe324db_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:84c5d2b24caf68c3a6a6d078bd9f66de9fb88e769f6c09c11a248693d463ac21_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:907d6e24922d6d372bceb21ad830c254c6a9c9d6be0ac4f4edf22c236437a09d_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:923a3ee0e3d5b7341b96826e465e6856855f2801dbaf381d139a632c77bda1c5_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:285d2e2d103b458f0603435aedb4d779d85e48fed2267845b798f4a04a0df4c7_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:44981f5fcbc9086470143fae6e21a5de3baad2258d9f8c81accecb2faad6b2a2_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:5ba248d0bc8fcde70e210319bb962f4043e5e8ab8a5625c8f8f30ec96d47c6b7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:f681cdac28ee9ff6375fb39d7b7d12917a06043db44c16e8f84bdb9e09e7b5e7_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:2057531884d897574fc0648e5d3cf21c4549738ac5f35d8095f400cdb80049cc_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:8be0e50a132a2c974893f36b51f3f40b6d6e1f913ae0f9ee6319ef0d5ec455b7_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:a2edc5d233d1547fa2e1d01f29d8a914930735f7098289892430ba9a17d20ab7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:c81c7aeb3dd05801e279a9fcc8d6c3baf00a2ccc08eab53f8acc8bd4d2d129c4_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:25e17bf203568420587cf5907e84e4167afab84dfce549c91bea99e70290b742_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:277f4e8ac5fc292b9f0f2d123f924c6b5cbc0a2eeba3c87a0e61c5ee2399aaa9_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:76766b77ed53513cd254195b25d205ab6964522816e1e3662800e38a105abdf2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:c7ace45f7cb86055e2ba18e27a660f6aa6cb4eff497204294875d5dd1d63cce3_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:3780b1bc80ab7ebc3cfed06ce69346d589dc07b53cea65ad3ed92cc912284300_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:681b356709778083448892513b4559f693e002bfda897a57e2d065f736a902b5_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:d110b52ce8ea022b3d35e7c4b0ce3b646f30513cf8abb55327132565ea4a6a87_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:f076ab59f3abe061e4553a61f98a144a472297dba5ed924ca887f130e9372da9_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/go-git/go-billy: Billy: Denial of Service via crafted input due to insufficient validation"
},
{
"cve": "CVE-2026-44990",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-06-12T21:02:24.911971+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:31bd91156f49687d2efffd3be971d9ee0e16abb420b8e8b958caa88b97770020_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:a6315866c67ba350665f5a92f960a5a44e427ca37ae7505e2072af4e02c42f76_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:b3ad6fa1de658f3a40c8b183ab501ebc66b359d8cc01439d4215aa52769df213_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:bfde9ebea1fcd27b6d104d5f67db62e870878f9517ccbec2f649dd2c1af4a073_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:08fed161d59299881ff7a54db859feaf8ed7bdb8238d6cf12628ccb73575665e_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:09436fe2649ca384b1bc1fd8f736fb1d71392733310e66758ed9f289e00471f9_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:3b83670e1c0e9d1f5b76bd7b75d77072bc6208646bc2201bd0bd200dbc59e34a_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:927146f966e4c5c2908d29d8ab45a8f3071dbd5ebd9cf0424460a23f814a72a7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:38a3bc59511133cae56827eba879e7c82c5a974bf1f16b6e8d95e1f79821e669_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:3fa04db82e3ce6169270db0ce29107b69d8e044e0a1ab13a2bf1050b8c26d087_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:6041a918713d4464c73560b68c294a12d33f297a980d2f9d0e0cc8c300a96f24_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:98bd72ba69bdfb3070d87b3edcbd7050579a514b72cfd67c2926541ba52dbaf7_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:938abc970731c2eeda8e2b7b73e96d4dfcbf7587330c7b7e52117a577700e426_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:a0876a25ce85d7d4616212813f012422826f152b8d71065e75cd9c3e23034d8a_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:c77077a0cca835a503a6529c89ab19c4027f949d361afdf8a5a259e1e87b0d55_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:d5bbf3fe886f27cdc27363dcb175e004487d9c8f36de4f1f8516fbeda3a95224_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:0f5d8cae3ba4ea4fcdc5fb9d08f797d576bc225b92af66f193bd4b1324cda4b9_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:2d3588825f8a714fa59b1648d0934d064165e333f322f7f31f01f07b940d42d9_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:68aa571827f5331f1d5a3bd0c60ad441a18877ba11921aff2633940236bafcd4_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:9b80c9c61d4befefa7f6a65ae8c001ce7e343a1e4f251e5ebe025625d9511730_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:9b2c24401a91903f023096d2b641aa977acff423eb6770a8e4c4a81aecfd4e62_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:9d74585acc098c13f3e9dac5ae7f5ef337fa82bd7119d7f1849c5f8a50e84907_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:a6ee95d0ed82bddef084684d11fa770bd646d9be9bc65b3bc386d7c58b33975c_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:f7b8654eb8bf675c8c26f0ad395d790f990308d3ad6683bb61b484c92073bbac_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:2a598e7fd07db27100d9a53a328ac9a0535865883bddd1373f4f1f2705068d2f_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:4f8f0b02d0969753e156226a998d442746c238a2a50ea606a49ca0cf695b8925_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:63c02348faa7d4e26e35c69aef5453613dd607a26116823b931b89fe5311e181_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:ae224866f0085d2c00ab18a28d2aed076e455731903989a49a544abf49950d1f_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:0a90a13f006ef0b271079b728ef6d54081f36ae19b6d0e9ab4dc24ea52a30fad_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:3a53629645832974a883002e53198df7c28e59dd6d1df99bf321b52d0ef84b61_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:879315f438ca43abb607d6c97f8fbd4ca2d38209b142e2d97cc0598740273252_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:c6c4d01f5fcee6cad3fc870cace92f45000624760e6e93654bb5e814afeed7bb_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:50f7647620c78fd6b445379c8762f5e978113fe3552906376a24459263f27459_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:53e641f48ddc05c63da2e6bc24e9e4636a10de2c3599d8f5f78622bdebca07ca_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:57114b7a386c406715e342637558fab57afeef2e193517f99173a441f39401d5_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:dcdcaa90f292f2d7ad3f10acbedfab9f7f22f3432c3156055f34760d9bf9429c_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:3723b1d5c74f37cba219e203fd2026a718d4821595cb505ec6626684695da65b_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:562291f52b6bce98ec8795856b808545c4fe30047b54544c7f6c2ab4678480ff_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:e6dfac9bc3e467e141a425944782f5087ed967ac4d02d8d47442e3d61ba5b882_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:f683186c2cc8be9ec09b8efdec66d6b8b1f991c7f7b9fd398dc7c3f9ab8b3079_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:2471edd63a94473c68cf37ee50de643e40003f2c5bba84063c154e4888a7f0bd_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:7cef49d68df5d8efe52061a18920e07e6c7efa3016c0cea7d1747e67851f254a_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:d912383405599032acffbad22bc154f63a87dd429ba882fd7a94cb82fe650d8e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:f3034211e16de48af540efe4ee460395dba0a4a544fa4f277a12840a25df1730_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:181d1decb2f16fcf6f5938027ed346aca29126687bbe6cdcc601c25087f70d11_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:ab5e4d27e23448d99a37b8c05442bb1254083cdc4ff325e721d97d80ec27346c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:ac172243d158e126594f28317e0cfb37dc1790c9f2121e95fe52506b5e05fc91_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:fd96b6284d270effa0f838d960ea4218b72b54c4718513eb523658f2f4972682_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:c59d9cd479c62730eda5d482fb2f4e9fbc17a90a5a2861b130aafe1f3a27a333_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:e547f672b14b6e8fc2ffd300b150aedbd3f6b6b36ddcad612f7c992a936a7c82_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:ead1263d538974c48790c65e44cd9cab07a62c2893b2eeb250174e7cf58d7f9d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:ed0457a57c7b39b79fb308176f45ffe678938b25fbb8c15de2cedbe54b916f64_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:9847a5752ec77e17861dcdac5546ee5c53679c80c3569609b21d9080ee3b7ef3_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:d3c823e61a0682ddc85e576e86234e580992886de471035630f9c89bbad6ebb7_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:ded425ed0af88a1411a06e5191aee25c4c59f1de85b041eba95c9997686cf09e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:ee63f59942f9df04e95fc4266f0d194cd62a7ca08dd5478283884d0ab6003da7_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:724377cabaa284a5197e7505a7150c89631c2f2bcc629e074c7c0be18abd8e6f_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:cbf797c9e93413540b20ebee9191375ddd8185ef22dc8c9e23cc3a4c015abaf7_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:d7609d62a801cf07ef639abcd4f193b2d68967fadebbfddf2349003d7e9eaa44_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:f61fe90362f793225591eb7e2a86d5cdc6fb35aa087e9b6a6218a42b1c1d945d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:1c4de9460688800b62bad6fb13653ef4b52bf215e4d41674291193e9b8e71b24_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:4f1e59610b2fbedc56f425b3fbd8f16c9ea6ea96025f18a404fe48f6a49bdc1e_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:ab0d28306dd6daa03af79bdc2ea650e59a50a03317987c4cdd0d1ee70f95b597_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:b700a8bb7ea6e4253afb8bcf94e5ad086349980ca0716a87817724d3da3fdce1_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4015f46d2172db26a348635e2e8cbd4bbcdbbaa56a4b12c232676a3d0f5bbee2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4169252c61ec70b91b10c750d5f9ecd53f5c3c906766bba9103afbac3c3f9edf_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4ab72a192553c21de76754f06fe38cf443e686e4b4edc2aa2ceb2b6b9d95bb6c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:579ef0925c6f56ed48f22121767189431bef6c4eaa72b2648a1b91488357a51d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:1868e2ea03d063b4cd64601cb0aaf5c9ea7f55e83eba2e2d4dcf6f830efeafc7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:4bfbf0bdc882979bc94d85a4aeff8caa0ec7887aec7412e32ae1442811325d06_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:844e3d69d3c26914e02612466021592a876e6e2dd6cf77084723a70f567ba0e2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:bbe04eb8fd197f15875f498e3c18b9a7a445380efb5f696422d79df99a34a881_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:2c9f9b47c01c5e5e017c583c6a09c5c52f40ef88acf789689265cb31ef328fb8_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:7b5e883efde312c1571c4825b523ff04ab57af6a9f4162a36b80b973f9602c46_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:d896dd89fb924da246fc729041d9debc019d8a4210cfd3de8883834e429cca10_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:ede3e22d4e4de49789622149dec23beaa7e0569a3715ac2262929df543e05bc3_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:273a393b8c62fbc4edb4bf4033c47d8b52bda56fc9cafa289d9513210840815b_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:71f1b590785ce7f4577ecd687dbab9bc3c5931c568a3108eb84279c7aa892046_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:d1e1b4310eb64891c9456be7c34547bf36b0aafdeb471a49f0892d7eaf8f41f4_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:e0a7514406c7ffae080db6d4db3bbf7b77a606ea4632bf09f8301ce1d3739bb5_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:2a4c6c061d154ed9c74707a7a2e2390fde2a150f36197386c3e49c0612d345b2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:6ffcc051c955e198c6d96b59bda0ef26b5124ebbdef5357d36a84534f2c7097c_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:c9258bf58373f9c6859789c8ec272cd7d702c37e063fc2ee53c66d296e7ee3d0_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:d83c6bb4f2a91d2c4de3ffbf4aa8ceecb695f8491ba7586d55275c62cd1931e6_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:67637c5cba3eca1597885823c6e44c13db445d0ef38751eb8364b69dbf07caac_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:68fb5c2a3c8a0d5e6bbcf2c5568969f6b13e72006d4d54bc5c57cd9a032d1bf6_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:9f5fa40c88b0f5d1ae3634632240817a91f4575f8eae9c005b8e35a55cf38003_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:fcbcee9fc7e0bbf5775a33ae9b7e3d7e48a90e2aa1cb85605e05612b6e4d4e30_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:0c165bb93ce933c7f9998a615908bfcca0b4eb38e32e24a1c823e63791b7604b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:42aa392f82bdc45a3b857d1ed44e224ddfd14db1e3dcbb74dcc850ac0540e964_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:9dcd0c0ecf1523bf05bd296edbecd85841b2753dee7a5c9df32437f9a8e31471_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:c5505c462e6b2c04a6e14bc1e22dfc42dc8adea8f6eaf0615cd58b1973b7d62e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:1a93df314c31f10da7b1345fab07b15b846e28865764178e34124f84dc967152_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:34343f81973c3fbdd8630c32d0fad597745ea10f960ea64236408e58e0f10e14_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:7b3635784ebfb6343a73c9fa6de7bea57b3aacce1c49a0f7f250a471f7b897e3_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:f0a7fade2853193429bab16922b2e3bbe426e14632423d6550ff7dfb66d42827_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:94950d339fa382d6911f12fc23dcaf2cdb2854c4cab654f6058f5bf0df1bb371_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:bcfbd2284cbeeba5a835aaf5a5590ddd8156bd881ca24fd0fe1465fade1f84c2_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:bd739ced163053224e5b0ea2f3cd577481c6b6c1162cc0fbc186f1716b4a1fbd_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:d40496f114898985cde3860b9664c34d8c32de85e4d3d846df91a6ba27a2e99c_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:3f7cbe7605595d712e14d9a17717fafc6c6e334f2ad3e821c34947ec78411046_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:96775900ea90e57487da6afe59d058b33cb977a0247a1bbeb1bd07bed2816398_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:caa6b121538e074312314d9888d9b423bd225aefa4f25eb145893b9fc548c0ad_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:e59c90cfe8160b28f9d2aa9e59b1d04d742df44d2195210ebc1946ee3cb78b6f_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:10c95e5c55ccc1a04e8d2ac28bd1afd3b9bb9a7e9e2a5e3e8efb301421539980_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:60a310d4464b4817845703d14e95729321b883fbfc79fbf2dd8d514bb3c675e9_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:70e6c14d72f14d25a90f44043932fbd3f824b30e8ad4b36307100726b24d9c06_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:784129cf69b3bf77a907fe909fd73a2a4d0fbd947fe0037e47aa1d62c6ffcf0b_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:26e58654cdd092cb812207cb4473f5f5988ebd708d95c34152c2e8c124f7297d_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:40e5d9634aa7469df8247758961d486cfac3e7d7f0b59184e11ed5571b46bf40_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:5b59faed336de07965755c893cb9d0ffc52ec90f61cc8c54487f6c0cac53322e_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:b59aea0c9e859025988b0f0c9b6e7748c4acf6d0b4cee35f3fabb7b84feb598b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:2368703206d833e4cb73b7e8750efb9997633a6f9accbf032426bcfcae4c00d9_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:80b543b207e724e880ff932c514fe9c6a3925bfede1c31863531e4e69d050d40_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:82405a9a5715db5442dfa3d3f594888bd7b2f9c778d68357a7d8884f5ea46915_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:8fd2bda7b8d94ededf7973f76a159dd61105776a05d961ac9cfd9bee0a988213_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:4def845360282dad99181b96bcd834b4863eab39e246fda2476234c561c652ec_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:b67aec868b6366cf04f3980b15588e1a0af5c88b2248958bc3884261ad390ca0_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:ceacf3491ebec6f5613011fe8d36b66d00f8b3697832615a4d7024e23125085e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:d9f6a520b818dcccbedb94720b5979ef1cdec2e02491c76e3decb3ee18f2085d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:3e6519c0c789b946eb1b811867c41c4f204440bad5734760c0aca4e3fc602e5a_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:95684cfaf4d5d91bc9fe8cfbf64a6f113e944e3f0c102d27851be5232eca0dbb_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:9cb20990af88287dd8a27de4e4ef12eb244577a1844482d26107359c6efe8efa_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:a69ebb0c7e817d44cfabd86ad13ef4cc94a8bf5b6e8a607d17b197603d64a224_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:0eea35a3af36d08db945a70c387cc38eb326f75b4ed322f09d8c91863cfe5d02_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:22c48db227cd6f2ecec746674e31ac7f5a983a418679fc91678a0aa0ebb49496_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:8e8d249c39d562f819d347f12610dda7f5c01215c41101bfd5dca008e04edf6e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:f8adb8dd40a204bacb51cd423803097a514ec8e8e9f52209e02ecf14cad622bb_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:03adc6277e2bf409391941c6f4508154abc38a0c043139978754f6d4fd32c5a8_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:7e100af30ed11325cb2cbee02af09306e53df5db5847f2a4b733cd307e3cd623_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:91b474b4808b18c279c9f8eb3be8e6d1e1e47cf2b5f9553acd901c74b20bddbc_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:d56f884a9700a4f193d6f3db1895bd54745ec77e02ead3d43bd6e4fe04a2969e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:1f7ed606f69a74943aedb0a956e5a71019f8a1ab53cd3f8166be0f55a69809b9_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:4841076eb82f1f1748345556ff6c4e02a17f1f63c661e375eaba720291cbaf6a_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:a79ac7dcae109aa526e2a218327dd8c5dba2b924fc27447a07199b3b2f2f67b3_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:dee022821852f2d5ebdbbd9f09c9b97997a905061dadb3f78433291d462d49a7_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:1a746b16f362a83f399255d925b322b3440b3d89ae4d64ab7962db3d82ee91a1_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:417a31bec11c3ffb70f40fa955069d5160dc12e2426b67e1d2e35ae3f7fa06df_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:89a3cb77fdb3dcbddfe96785a9ba3fa2b6132098fce028f859663b31fcf77a34_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:b1ba0b4cd8f515895af7b9f797f6ea5b661f7254ce019ce5115375639dcd06e9_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:0827c96b922ca185b7a7321a4f504e8a5dc01aadafcfd20443060546981339a8_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:b5b732dfc0ce3d740781eda9a72e1542c7a30b28b39d2be6e0ba470af06a9680_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:f74081e5eb03227ccff5717a7d139ceee6c5b610625ff7b99e639a2652bf7663_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:f80976ae4fc332600e1d8e1d70b42c038ea05d76ac2c5b1d7d0cbaddbe89140a_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:4029ece83812237ce8b1d394252e9561012e8cd94af40680a90284fbea1bc32a_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:63a3465a7539a8a286c846a84d63e3feca9a11758e4c0d697889b0bdeb26a25c_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:81c227d7c7599b0d4357ccdc3b567f31b67bbd1198c9e7ddba1864c299bad11b_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:f392bde8ce22aca058d77132cc709440442931679dbe725c52516f1cdc97b38d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:4825fab15300bc911e0b2b5c4ae342004bfcff95fa64af0fdb1085fadd132aa2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:68f879679911c2ca828551b900eca1c2f4e8caec7312fbba502fabc4778d1832_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:b4188ac728c746769ef6586663dd6d7d07db984b083397d2c76fe847ef22ea60_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:f2805fc1e6f37bc8acc3187ea8712d38f32151d584c10d5996c0ad7076cd638b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:1c943edcf23df14f254e4aabb93cbc1665bbc7902076b3f04bd80edd2fe324db_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:84c5d2b24caf68c3a6a6d078bd9f66de9fb88e769f6c09c11a248693d463ac21_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:907d6e24922d6d372bceb21ad830c254c6a9c9d6be0ac4f4edf22c236437a09d_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:923a3ee0e3d5b7341b96826e465e6856855f2801dbaf381d139a632c77bda1c5_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:285d2e2d103b458f0603435aedb4d779d85e48fed2267845b798f4a04a0df4c7_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:44981f5fcbc9086470143fae6e21a5de3baad2258d9f8c81accecb2faad6b2a2_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:5ba248d0bc8fcde70e210319bb962f4043e5e8ab8a5625c8f8f30ec96d47c6b7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:f681cdac28ee9ff6375fb39d7b7d12917a06043db44c16e8f84bdb9e09e7b5e7_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:2057531884d897574fc0648e5d3cf21c4549738ac5f35d8095f400cdb80049cc_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:8be0e50a132a2c974893f36b51f3f40b6d6e1f913ae0f9ee6319ef0d5ec455b7_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:a2edc5d233d1547fa2e1d01f29d8a914930735f7098289892430ba9a17d20ab7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:c81c7aeb3dd05801e279a9fcc8d6c3baf00a2ccc08eab53f8acc8bd4d2d129c4_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:25e17bf203568420587cf5907e84e4167afab84dfce549c91bea99e70290b742_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:277f4e8ac5fc292b9f0f2d123f924c6b5cbc0a2eeba3c87a0e61c5ee2399aaa9_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:76766b77ed53513cd254195b25d205ab6964522816e1e3662800e38a105abdf2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:c7ace45f7cb86055e2ba18e27a660f6aa6cb4eff497204294875d5dd1d63cce3_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:3780b1bc80ab7ebc3cfed06ce69346d589dc07b53cea65ad3ed92cc912284300_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:681b356709778083448892513b4559f693e002bfda897a57e2d065f736a902b5_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:d110b52ce8ea022b3d35e7c4b0ce3b646f30513cf8abb55327132565ea4a6a87_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:f076ab59f3abe061e4553a61f98a144a472297dba5ed924ca887f130e9372da9_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488565"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `sanitize-html` library. Under its default configuration, an attacker can embed malicious content within a disallowed `xmp` element. This vulnerability allows the attacker to bypass the HTML sanitization process, leading to stored Cross-Site Scripting (XSS). Successful exploitation can result in arbitrary code execution or information disclosure when a user views the affected content.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "sanitize-html: `sanitize-html`: Stored Cross-Site Scripting via HTML sanitizer bypass",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw. The `sanitize-html` library, used in Red Hat products, is susceptible to a stored Cross-Site Scripting (XSS) bypass. Malicious content within a disallowed `xmp` element can be rendered as live HTML or JavaScript due to a sanitizer bypass in the default configuration. This can lead to arbitrary code execution or information disclosure when affected content is viewed.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:2b796bf55ecf7a14d1c87d829a2b20d998fc2943686373105b0a50f5053ef836_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:7e960b59f64547f7e9602b7c066a51ab52aba929726aec2bacdf486a9d4d28fd_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:a43e430a2ec0b86fb6ade361677be298b4e27444388a9bca35ddafbf9c77277c_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:d2394b121256985e5ca322aea77bb0bf999ba2d7a6f1627e62bbc125c475dbbd_amd64"
],
"known_not_affected": [
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:31bd91156f49687d2efffd3be971d9ee0e16abb420b8e8b958caa88b97770020_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:a6315866c67ba350665f5a92f960a5a44e427ca37ae7505e2072af4e02c42f76_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:b3ad6fa1de658f3a40c8b183ab501ebc66b359d8cc01439d4215aa52769df213_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:bfde9ebea1fcd27b6d104d5f67db62e870878f9517ccbec2f649dd2c1af4a073_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:08fed161d59299881ff7a54db859feaf8ed7bdb8238d6cf12628ccb73575665e_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:09436fe2649ca384b1bc1fd8f736fb1d71392733310e66758ed9f289e00471f9_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:3b83670e1c0e9d1f5b76bd7b75d77072bc6208646bc2201bd0bd200dbc59e34a_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:927146f966e4c5c2908d29d8ab45a8f3071dbd5ebd9cf0424460a23f814a72a7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:38a3bc59511133cae56827eba879e7c82c5a974bf1f16b6e8d95e1f79821e669_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:3fa04db82e3ce6169270db0ce29107b69d8e044e0a1ab13a2bf1050b8c26d087_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:6041a918713d4464c73560b68c294a12d33f297a980d2f9d0e0cc8c300a96f24_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:98bd72ba69bdfb3070d87b3edcbd7050579a514b72cfd67c2926541ba52dbaf7_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:938abc970731c2eeda8e2b7b73e96d4dfcbf7587330c7b7e52117a577700e426_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:a0876a25ce85d7d4616212813f012422826f152b8d71065e75cd9c3e23034d8a_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:c77077a0cca835a503a6529c89ab19c4027f949d361afdf8a5a259e1e87b0d55_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:d5bbf3fe886f27cdc27363dcb175e004487d9c8f36de4f1f8516fbeda3a95224_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:0f5d8cae3ba4ea4fcdc5fb9d08f797d576bc225b92af66f193bd4b1324cda4b9_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:2d3588825f8a714fa59b1648d0934d064165e333f322f7f31f01f07b940d42d9_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:68aa571827f5331f1d5a3bd0c60ad441a18877ba11921aff2633940236bafcd4_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:9b80c9c61d4befefa7f6a65ae8c001ce7e343a1e4f251e5ebe025625d9511730_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:9b2c24401a91903f023096d2b641aa977acff423eb6770a8e4c4a81aecfd4e62_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:9d74585acc098c13f3e9dac5ae7f5ef337fa82bd7119d7f1849c5f8a50e84907_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:a6ee95d0ed82bddef084684d11fa770bd646d9be9bc65b3bc386d7c58b33975c_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:f7b8654eb8bf675c8c26f0ad395d790f990308d3ad6683bb61b484c92073bbac_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:2a598e7fd07db27100d9a53a328ac9a0535865883bddd1373f4f1f2705068d2f_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:4f8f0b02d0969753e156226a998d442746c238a2a50ea606a49ca0cf695b8925_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:63c02348faa7d4e26e35c69aef5453613dd607a26116823b931b89fe5311e181_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:ae224866f0085d2c00ab18a28d2aed076e455731903989a49a544abf49950d1f_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:0a90a13f006ef0b271079b728ef6d54081f36ae19b6d0e9ab4dc24ea52a30fad_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:3a53629645832974a883002e53198df7c28e59dd6d1df99bf321b52d0ef84b61_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:879315f438ca43abb607d6c97f8fbd4ca2d38209b142e2d97cc0598740273252_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:c6c4d01f5fcee6cad3fc870cace92f45000624760e6e93654bb5e814afeed7bb_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:50f7647620c78fd6b445379c8762f5e978113fe3552906376a24459263f27459_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:53e641f48ddc05c63da2e6bc24e9e4636a10de2c3599d8f5f78622bdebca07ca_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:57114b7a386c406715e342637558fab57afeef2e193517f99173a441f39401d5_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:dcdcaa90f292f2d7ad3f10acbedfab9f7f22f3432c3156055f34760d9bf9429c_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:3723b1d5c74f37cba219e203fd2026a718d4821595cb505ec6626684695da65b_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:562291f52b6bce98ec8795856b808545c4fe30047b54544c7f6c2ab4678480ff_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:e6dfac9bc3e467e141a425944782f5087ed967ac4d02d8d47442e3d61ba5b882_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:f683186c2cc8be9ec09b8efdec66d6b8b1f991c7f7b9fd398dc7c3f9ab8b3079_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:2471edd63a94473c68cf37ee50de643e40003f2c5bba84063c154e4888a7f0bd_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:7cef49d68df5d8efe52061a18920e07e6c7efa3016c0cea7d1747e67851f254a_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:d912383405599032acffbad22bc154f63a87dd429ba882fd7a94cb82fe650d8e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:f3034211e16de48af540efe4ee460395dba0a4a544fa4f277a12840a25df1730_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:181d1decb2f16fcf6f5938027ed346aca29126687bbe6cdcc601c25087f70d11_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:ab5e4d27e23448d99a37b8c05442bb1254083cdc4ff325e721d97d80ec27346c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:ac172243d158e126594f28317e0cfb37dc1790c9f2121e95fe52506b5e05fc91_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:fd96b6284d270effa0f838d960ea4218b72b54c4718513eb523658f2f4972682_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:c59d9cd479c62730eda5d482fb2f4e9fbc17a90a5a2861b130aafe1f3a27a333_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:e547f672b14b6e8fc2ffd300b150aedbd3f6b6b36ddcad612f7c992a936a7c82_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:ead1263d538974c48790c65e44cd9cab07a62c2893b2eeb250174e7cf58d7f9d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:ed0457a57c7b39b79fb308176f45ffe678938b25fbb8c15de2cedbe54b916f64_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:9847a5752ec77e17861dcdac5546ee5c53679c80c3569609b21d9080ee3b7ef3_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:d3c823e61a0682ddc85e576e86234e580992886de471035630f9c89bbad6ebb7_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:ded425ed0af88a1411a06e5191aee25c4c59f1de85b041eba95c9997686cf09e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:ee63f59942f9df04e95fc4266f0d194cd62a7ca08dd5478283884d0ab6003da7_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:724377cabaa284a5197e7505a7150c89631c2f2bcc629e074c7c0be18abd8e6f_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:cbf797c9e93413540b20ebee9191375ddd8185ef22dc8c9e23cc3a4c015abaf7_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:d7609d62a801cf07ef639abcd4f193b2d68967fadebbfddf2349003d7e9eaa44_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:f61fe90362f793225591eb7e2a86d5cdc6fb35aa087e9b6a6218a42b1c1d945d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:1c4de9460688800b62bad6fb13653ef4b52bf215e4d41674291193e9b8e71b24_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:4f1e59610b2fbedc56f425b3fbd8f16c9ea6ea96025f18a404fe48f6a49bdc1e_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:ab0d28306dd6daa03af79bdc2ea650e59a50a03317987c4cdd0d1ee70f95b597_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:b700a8bb7ea6e4253afb8bcf94e5ad086349980ca0716a87817724d3da3fdce1_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4015f46d2172db26a348635e2e8cbd4bbcdbbaa56a4b12c232676a3d0f5bbee2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4169252c61ec70b91b10c750d5f9ecd53f5c3c906766bba9103afbac3c3f9edf_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4ab72a192553c21de76754f06fe38cf443e686e4b4edc2aa2ceb2b6b9d95bb6c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:579ef0925c6f56ed48f22121767189431bef6c4eaa72b2648a1b91488357a51d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:1868e2ea03d063b4cd64601cb0aaf5c9ea7f55e83eba2e2d4dcf6f830efeafc7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:4bfbf0bdc882979bc94d85a4aeff8caa0ec7887aec7412e32ae1442811325d06_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:844e3d69d3c26914e02612466021592a876e6e2dd6cf77084723a70f567ba0e2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:bbe04eb8fd197f15875f498e3c18b9a7a445380efb5f696422d79df99a34a881_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:2c9f9b47c01c5e5e017c583c6a09c5c52f40ef88acf789689265cb31ef328fb8_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:7b5e883efde312c1571c4825b523ff04ab57af6a9f4162a36b80b973f9602c46_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:d896dd89fb924da246fc729041d9debc019d8a4210cfd3de8883834e429cca10_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:ede3e22d4e4de49789622149dec23beaa7e0569a3715ac2262929df543e05bc3_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:273a393b8c62fbc4edb4bf4033c47d8b52bda56fc9cafa289d9513210840815b_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:71f1b590785ce7f4577ecd687dbab9bc3c5931c568a3108eb84279c7aa892046_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:d1e1b4310eb64891c9456be7c34547bf36b0aafdeb471a49f0892d7eaf8f41f4_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:e0a7514406c7ffae080db6d4db3bbf7b77a606ea4632bf09f8301ce1d3739bb5_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:2a4c6c061d154ed9c74707a7a2e2390fde2a150f36197386c3e49c0612d345b2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:6ffcc051c955e198c6d96b59bda0ef26b5124ebbdef5357d36a84534f2c7097c_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:c9258bf58373f9c6859789c8ec272cd7d702c37e063fc2ee53c66d296e7ee3d0_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:d83c6bb4f2a91d2c4de3ffbf4aa8ceecb695f8491ba7586d55275c62cd1931e6_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:67637c5cba3eca1597885823c6e44c13db445d0ef38751eb8364b69dbf07caac_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:68fb5c2a3c8a0d5e6bbcf2c5568969f6b13e72006d4d54bc5c57cd9a032d1bf6_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:9f5fa40c88b0f5d1ae3634632240817a91f4575f8eae9c005b8e35a55cf38003_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:fcbcee9fc7e0bbf5775a33ae9b7e3d7e48a90e2aa1cb85605e05612b6e4d4e30_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:0c165bb93ce933c7f9998a615908bfcca0b4eb38e32e24a1c823e63791b7604b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:42aa392f82bdc45a3b857d1ed44e224ddfd14db1e3dcbb74dcc850ac0540e964_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:9dcd0c0ecf1523bf05bd296edbecd85841b2753dee7a5c9df32437f9a8e31471_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:c5505c462e6b2c04a6e14bc1e22dfc42dc8adea8f6eaf0615cd58b1973b7d62e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:1a93df314c31f10da7b1345fab07b15b846e28865764178e34124f84dc967152_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:34343f81973c3fbdd8630c32d0fad597745ea10f960ea64236408e58e0f10e14_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:7b3635784ebfb6343a73c9fa6de7bea57b3aacce1c49a0f7f250a471f7b897e3_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:f0a7fade2853193429bab16922b2e3bbe426e14632423d6550ff7dfb66d42827_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:94950d339fa382d6911f12fc23dcaf2cdb2854c4cab654f6058f5bf0df1bb371_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:bcfbd2284cbeeba5a835aaf5a5590ddd8156bd881ca24fd0fe1465fade1f84c2_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:bd739ced163053224e5b0ea2f3cd577481c6b6c1162cc0fbc186f1716b4a1fbd_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:d40496f114898985cde3860b9664c34d8c32de85e4d3d846df91a6ba27a2e99c_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:3f7cbe7605595d712e14d9a17717fafc6c6e334f2ad3e821c34947ec78411046_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:96775900ea90e57487da6afe59d058b33cb977a0247a1bbeb1bd07bed2816398_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:caa6b121538e074312314d9888d9b423bd225aefa4f25eb145893b9fc548c0ad_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:e59c90cfe8160b28f9d2aa9e59b1d04d742df44d2195210ebc1946ee3cb78b6f_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:10c95e5c55ccc1a04e8d2ac28bd1afd3b9bb9a7e9e2a5e3e8efb301421539980_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:60a310d4464b4817845703d14e95729321b883fbfc79fbf2dd8d514bb3c675e9_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:70e6c14d72f14d25a90f44043932fbd3f824b30e8ad4b36307100726b24d9c06_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:784129cf69b3bf77a907fe909fd73a2a4d0fbd947fe0037e47aa1d62c6ffcf0b_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:26e58654cdd092cb812207cb4473f5f5988ebd708d95c34152c2e8c124f7297d_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:40e5d9634aa7469df8247758961d486cfac3e7d7f0b59184e11ed5571b46bf40_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:5b59faed336de07965755c893cb9d0ffc52ec90f61cc8c54487f6c0cac53322e_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:b59aea0c9e859025988b0f0c9b6e7748c4acf6d0b4cee35f3fabb7b84feb598b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:2368703206d833e4cb73b7e8750efb9997633a6f9accbf032426bcfcae4c00d9_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:80b543b207e724e880ff932c514fe9c6a3925bfede1c31863531e4e69d050d40_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:82405a9a5715db5442dfa3d3f594888bd7b2f9c778d68357a7d8884f5ea46915_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:8fd2bda7b8d94ededf7973f76a159dd61105776a05d961ac9cfd9bee0a988213_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:4def845360282dad99181b96bcd834b4863eab39e246fda2476234c561c652ec_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:b67aec868b6366cf04f3980b15588e1a0af5c88b2248958bc3884261ad390ca0_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:ceacf3491ebec6f5613011fe8d36b66d00f8b3697832615a4d7024e23125085e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:d9f6a520b818dcccbedb94720b5979ef1cdec2e02491c76e3decb3ee18f2085d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:3e6519c0c789b946eb1b811867c41c4f204440bad5734760c0aca4e3fc602e5a_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:95684cfaf4d5d91bc9fe8cfbf64a6f113e944e3f0c102d27851be5232eca0dbb_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:9cb20990af88287dd8a27de4e4ef12eb244577a1844482d26107359c6efe8efa_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:a69ebb0c7e817d44cfabd86ad13ef4cc94a8bf5b6e8a607d17b197603d64a224_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:0eea35a3af36d08db945a70c387cc38eb326f75b4ed322f09d8c91863cfe5d02_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:22c48db227cd6f2ecec746674e31ac7f5a983a418679fc91678a0aa0ebb49496_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:8e8d249c39d562f819d347f12610dda7f5c01215c41101bfd5dca008e04edf6e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:f8adb8dd40a204bacb51cd423803097a514ec8e8e9f52209e02ecf14cad622bb_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:03adc6277e2bf409391941c6f4508154abc38a0c043139978754f6d4fd32c5a8_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:7e100af30ed11325cb2cbee02af09306e53df5db5847f2a4b733cd307e3cd623_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:91b474b4808b18c279c9f8eb3be8e6d1e1e47cf2b5f9553acd901c74b20bddbc_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:d56f884a9700a4f193d6f3db1895bd54745ec77e02ead3d43bd6e4fe04a2969e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:1f7ed606f69a74943aedb0a956e5a71019f8a1ab53cd3f8166be0f55a69809b9_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:4841076eb82f1f1748345556ff6c4e02a17f1f63c661e375eaba720291cbaf6a_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:a79ac7dcae109aa526e2a218327dd8c5dba2b924fc27447a07199b3b2f2f67b3_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:dee022821852f2d5ebdbbd9f09c9b97997a905061dadb3f78433291d462d49a7_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:1a746b16f362a83f399255d925b322b3440b3d89ae4d64ab7962db3d82ee91a1_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:417a31bec11c3ffb70f40fa955069d5160dc12e2426b67e1d2e35ae3f7fa06df_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:89a3cb77fdb3dcbddfe96785a9ba3fa2b6132098fce028f859663b31fcf77a34_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:b1ba0b4cd8f515895af7b9f797f6ea5b661f7254ce019ce5115375639dcd06e9_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:0827c96b922ca185b7a7321a4f504e8a5dc01aadafcfd20443060546981339a8_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:b5b732dfc0ce3d740781eda9a72e1542c7a30b28b39d2be6e0ba470af06a9680_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:f74081e5eb03227ccff5717a7d139ceee6c5b610625ff7b99e639a2652bf7663_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:f80976ae4fc332600e1d8e1d70b42c038ea05d76ac2c5b1d7d0cbaddbe89140a_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:4029ece83812237ce8b1d394252e9561012e8cd94af40680a90284fbea1bc32a_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:63a3465a7539a8a286c846a84d63e3feca9a11758e4c0d697889b0bdeb26a25c_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:81c227d7c7599b0d4357ccdc3b567f31b67bbd1198c9e7ddba1864c299bad11b_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:f392bde8ce22aca058d77132cc709440442931679dbe725c52516f1cdc97b38d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:4825fab15300bc911e0b2b5c4ae342004bfcff95fa64af0fdb1085fadd132aa2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:68f879679911c2ca828551b900eca1c2f4e8caec7312fbba502fabc4778d1832_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:b4188ac728c746769ef6586663dd6d7d07db984b083397d2c76fe847ef22ea60_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:f2805fc1e6f37bc8acc3187ea8712d38f32151d584c10d5996c0ad7076cd638b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:1c943edcf23df14f254e4aabb93cbc1665bbc7902076b3f04bd80edd2fe324db_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:84c5d2b24caf68c3a6a6d078bd9f66de9fb88e769f6c09c11a248693d463ac21_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:907d6e24922d6d372bceb21ad830c254c6a9c9d6be0ac4f4edf22c236437a09d_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:923a3ee0e3d5b7341b96826e465e6856855f2801dbaf381d139a632c77bda1c5_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:285d2e2d103b458f0603435aedb4d779d85e48fed2267845b798f4a04a0df4c7_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:44981f5fcbc9086470143fae6e21a5de3baad2258d9f8c81accecb2faad6b2a2_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:5ba248d0bc8fcde70e210319bb962f4043e5e8ab8a5625c8f8f30ec96d47c6b7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:f681cdac28ee9ff6375fb39d7b7d12917a06043db44c16e8f84bdb9e09e7b5e7_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:2057531884d897574fc0648e5d3cf21c4549738ac5f35d8095f400cdb80049cc_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:8be0e50a132a2c974893f36b51f3f40b6d6e1f913ae0f9ee6319ef0d5ec455b7_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:a2edc5d233d1547fa2e1d01f29d8a914930735f7098289892430ba9a17d20ab7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:c81c7aeb3dd05801e279a9fcc8d6c3baf00a2ccc08eab53f8acc8bd4d2d129c4_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:25e17bf203568420587cf5907e84e4167afab84dfce549c91bea99e70290b742_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:277f4e8ac5fc292b9f0f2d123f924c6b5cbc0a2eeba3c87a0e61c5ee2399aaa9_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:76766b77ed53513cd254195b25d205ab6964522816e1e3662800e38a105abdf2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:c7ace45f7cb86055e2ba18e27a660f6aa6cb4eff497204294875d5dd1d63cce3_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:3780b1bc80ab7ebc3cfed06ce69346d589dc07b53cea65ad3ed92cc912284300_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:681b356709778083448892513b4559f693e002bfda897a57e2d065f736a902b5_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:d110b52ce8ea022b3d35e7c4b0ce3b646f30513cf8abb55327132565ea4a6a87_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:f076ab59f3abe061e4553a61f98a144a472297dba5ed924ca887f130e9372da9_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44990"
},
{
"category": "external",
"summary": "RHBZ#2488565",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488565"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44990",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44990"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44990",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44990"
},
{
"category": "external",
"summary": "https://github.com/apostrophecms/apostrophe/security/advisories/GHSA-rpr9-rxv7-x643",
"url": "https://github.com/apostrophecms/apostrophe/security/advisories/GHSA-rpr9-rxv7-x643"
}
],
"release_date": "2026-06-12T20:39:47.065000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T07:47:11+00:00",
"details": "Before you apply this update, make sure all previously released errata\nthat are relevant to your system are applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:2b796bf55ecf7a14d1c87d829a2b20d998fc2943686373105b0a50f5053ef836_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:7e960b59f64547f7e9602b7c066a51ab52aba929726aec2bacdf486a9d4d28fd_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:a43e430a2ec0b86fb6ade361677be298b4e27444388a9bca35ddafbf9c77277c_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:d2394b121256985e5ca322aea77bb0bf999ba2d7a6f1627e62bbc125c475dbbd_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:47737"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:31bd91156f49687d2efffd3be971d9ee0e16abb420b8e8b958caa88b97770020_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:a6315866c67ba350665f5a92f960a5a44e427ca37ae7505e2072af4e02c42f76_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:b3ad6fa1de658f3a40c8b183ab501ebc66b359d8cc01439d4215aa52769df213_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:bfde9ebea1fcd27b6d104d5f67db62e870878f9517ccbec2f649dd2c1af4a073_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:08fed161d59299881ff7a54db859feaf8ed7bdb8238d6cf12628ccb73575665e_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:09436fe2649ca384b1bc1fd8f736fb1d71392733310e66758ed9f289e00471f9_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:3b83670e1c0e9d1f5b76bd7b75d77072bc6208646bc2201bd0bd200dbc59e34a_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:927146f966e4c5c2908d29d8ab45a8f3071dbd5ebd9cf0424460a23f814a72a7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:38a3bc59511133cae56827eba879e7c82c5a974bf1f16b6e8d95e1f79821e669_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:3fa04db82e3ce6169270db0ce29107b69d8e044e0a1ab13a2bf1050b8c26d087_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:6041a918713d4464c73560b68c294a12d33f297a980d2f9d0e0cc8c300a96f24_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:98bd72ba69bdfb3070d87b3edcbd7050579a514b72cfd67c2926541ba52dbaf7_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:938abc970731c2eeda8e2b7b73e96d4dfcbf7587330c7b7e52117a577700e426_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:a0876a25ce85d7d4616212813f012422826f152b8d71065e75cd9c3e23034d8a_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:c77077a0cca835a503a6529c89ab19c4027f949d361afdf8a5a259e1e87b0d55_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:d5bbf3fe886f27cdc27363dcb175e004487d9c8f36de4f1f8516fbeda3a95224_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:0f5d8cae3ba4ea4fcdc5fb9d08f797d576bc225b92af66f193bd4b1324cda4b9_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:2d3588825f8a714fa59b1648d0934d064165e333f322f7f31f01f07b940d42d9_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:68aa571827f5331f1d5a3bd0c60ad441a18877ba11921aff2633940236bafcd4_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:9b80c9c61d4befefa7f6a65ae8c001ce7e343a1e4f251e5ebe025625d9511730_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:9b2c24401a91903f023096d2b641aa977acff423eb6770a8e4c4a81aecfd4e62_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:9d74585acc098c13f3e9dac5ae7f5ef337fa82bd7119d7f1849c5f8a50e84907_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:a6ee95d0ed82bddef084684d11fa770bd646d9be9bc65b3bc386d7c58b33975c_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:f7b8654eb8bf675c8c26f0ad395d790f990308d3ad6683bb61b484c92073bbac_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:2a598e7fd07db27100d9a53a328ac9a0535865883bddd1373f4f1f2705068d2f_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:4f8f0b02d0969753e156226a998d442746c238a2a50ea606a49ca0cf695b8925_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:63c02348faa7d4e26e35c69aef5453613dd607a26116823b931b89fe5311e181_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:ae224866f0085d2c00ab18a28d2aed076e455731903989a49a544abf49950d1f_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:0a90a13f006ef0b271079b728ef6d54081f36ae19b6d0e9ab4dc24ea52a30fad_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:3a53629645832974a883002e53198df7c28e59dd6d1df99bf321b52d0ef84b61_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:879315f438ca43abb607d6c97f8fbd4ca2d38209b142e2d97cc0598740273252_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:c6c4d01f5fcee6cad3fc870cace92f45000624760e6e93654bb5e814afeed7bb_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:50f7647620c78fd6b445379c8762f5e978113fe3552906376a24459263f27459_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:53e641f48ddc05c63da2e6bc24e9e4636a10de2c3599d8f5f78622bdebca07ca_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:57114b7a386c406715e342637558fab57afeef2e193517f99173a441f39401d5_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:dcdcaa90f292f2d7ad3f10acbedfab9f7f22f3432c3156055f34760d9bf9429c_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:3723b1d5c74f37cba219e203fd2026a718d4821595cb505ec6626684695da65b_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:562291f52b6bce98ec8795856b808545c4fe30047b54544c7f6c2ab4678480ff_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:e6dfac9bc3e467e141a425944782f5087ed967ac4d02d8d47442e3d61ba5b882_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:f683186c2cc8be9ec09b8efdec66d6b8b1f991c7f7b9fd398dc7c3f9ab8b3079_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:2471edd63a94473c68cf37ee50de643e40003f2c5bba84063c154e4888a7f0bd_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:7cef49d68df5d8efe52061a18920e07e6c7efa3016c0cea7d1747e67851f254a_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:d912383405599032acffbad22bc154f63a87dd429ba882fd7a94cb82fe650d8e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:f3034211e16de48af540efe4ee460395dba0a4a544fa4f277a12840a25df1730_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:181d1decb2f16fcf6f5938027ed346aca29126687bbe6cdcc601c25087f70d11_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:ab5e4d27e23448d99a37b8c05442bb1254083cdc4ff325e721d97d80ec27346c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:ac172243d158e126594f28317e0cfb37dc1790c9f2121e95fe52506b5e05fc91_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:fd96b6284d270effa0f838d960ea4218b72b54c4718513eb523658f2f4972682_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:c59d9cd479c62730eda5d482fb2f4e9fbc17a90a5a2861b130aafe1f3a27a333_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:e547f672b14b6e8fc2ffd300b150aedbd3f6b6b36ddcad612f7c992a936a7c82_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:ead1263d538974c48790c65e44cd9cab07a62c2893b2eeb250174e7cf58d7f9d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:ed0457a57c7b39b79fb308176f45ffe678938b25fbb8c15de2cedbe54b916f64_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:9847a5752ec77e17861dcdac5546ee5c53679c80c3569609b21d9080ee3b7ef3_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:d3c823e61a0682ddc85e576e86234e580992886de471035630f9c89bbad6ebb7_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:ded425ed0af88a1411a06e5191aee25c4c59f1de85b041eba95c9997686cf09e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:ee63f59942f9df04e95fc4266f0d194cd62a7ca08dd5478283884d0ab6003da7_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:724377cabaa284a5197e7505a7150c89631c2f2bcc629e074c7c0be18abd8e6f_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:cbf797c9e93413540b20ebee9191375ddd8185ef22dc8c9e23cc3a4c015abaf7_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:d7609d62a801cf07ef639abcd4f193b2d68967fadebbfddf2349003d7e9eaa44_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:f61fe90362f793225591eb7e2a86d5cdc6fb35aa087e9b6a6218a42b1c1d945d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:1c4de9460688800b62bad6fb13653ef4b52bf215e4d41674291193e9b8e71b24_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:4f1e59610b2fbedc56f425b3fbd8f16c9ea6ea96025f18a404fe48f6a49bdc1e_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:ab0d28306dd6daa03af79bdc2ea650e59a50a03317987c4cdd0d1ee70f95b597_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:b700a8bb7ea6e4253afb8bcf94e5ad086349980ca0716a87817724d3da3fdce1_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4015f46d2172db26a348635e2e8cbd4bbcdbbaa56a4b12c232676a3d0f5bbee2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4169252c61ec70b91b10c750d5f9ecd53f5c3c906766bba9103afbac3c3f9edf_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4ab72a192553c21de76754f06fe38cf443e686e4b4edc2aa2ceb2b6b9d95bb6c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:579ef0925c6f56ed48f22121767189431bef6c4eaa72b2648a1b91488357a51d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:2b796bf55ecf7a14d1c87d829a2b20d998fc2943686373105b0a50f5053ef836_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:7e960b59f64547f7e9602b7c066a51ab52aba929726aec2bacdf486a9d4d28fd_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:a43e430a2ec0b86fb6ade361677be298b4e27444388a9bca35ddafbf9c77277c_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:d2394b121256985e5ca322aea77bb0bf999ba2d7a6f1627e62bbc125c475dbbd_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:1868e2ea03d063b4cd64601cb0aaf5c9ea7f55e83eba2e2d4dcf6f830efeafc7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:4bfbf0bdc882979bc94d85a4aeff8caa0ec7887aec7412e32ae1442811325d06_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:844e3d69d3c26914e02612466021592a876e6e2dd6cf77084723a70f567ba0e2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:bbe04eb8fd197f15875f498e3c18b9a7a445380efb5f696422d79df99a34a881_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:2c9f9b47c01c5e5e017c583c6a09c5c52f40ef88acf789689265cb31ef328fb8_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:7b5e883efde312c1571c4825b523ff04ab57af6a9f4162a36b80b973f9602c46_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:d896dd89fb924da246fc729041d9debc019d8a4210cfd3de8883834e429cca10_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:ede3e22d4e4de49789622149dec23beaa7e0569a3715ac2262929df543e05bc3_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:273a393b8c62fbc4edb4bf4033c47d8b52bda56fc9cafa289d9513210840815b_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:71f1b590785ce7f4577ecd687dbab9bc3c5931c568a3108eb84279c7aa892046_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:d1e1b4310eb64891c9456be7c34547bf36b0aafdeb471a49f0892d7eaf8f41f4_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:e0a7514406c7ffae080db6d4db3bbf7b77a606ea4632bf09f8301ce1d3739bb5_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:2a4c6c061d154ed9c74707a7a2e2390fde2a150f36197386c3e49c0612d345b2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:6ffcc051c955e198c6d96b59bda0ef26b5124ebbdef5357d36a84534f2c7097c_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:c9258bf58373f9c6859789c8ec272cd7d702c37e063fc2ee53c66d296e7ee3d0_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:d83c6bb4f2a91d2c4de3ffbf4aa8ceecb695f8491ba7586d55275c62cd1931e6_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:67637c5cba3eca1597885823c6e44c13db445d0ef38751eb8364b69dbf07caac_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:68fb5c2a3c8a0d5e6bbcf2c5568969f6b13e72006d4d54bc5c57cd9a032d1bf6_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:9f5fa40c88b0f5d1ae3634632240817a91f4575f8eae9c005b8e35a55cf38003_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:fcbcee9fc7e0bbf5775a33ae9b7e3d7e48a90e2aa1cb85605e05612b6e4d4e30_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:0c165bb93ce933c7f9998a615908bfcca0b4eb38e32e24a1c823e63791b7604b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:42aa392f82bdc45a3b857d1ed44e224ddfd14db1e3dcbb74dcc850ac0540e964_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:9dcd0c0ecf1523bf05bd296edbecd85841b2753dee7a5c9df32437f9a8e31471_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:c5505c462e6b2c04a6e14bc1e22dfc42dc8adea8f6eaf0615cd58b1973b7d62e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:1a93df314c31f10da7b1345fab07b15b846e28865764178e34124f84dc967152_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:34343f81973c3fbdd8630c32d0fad597745ea10f960ea64236408e58e0f10e14_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:7b3635784ebfb6343a73c9fa6de7bea57b3aacce1c49a0f7f250a471f7b897e3_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:f0a7fade2853193429bab16922b2e3bbe426e14632423d6550ff7dfb66d42827_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:94950d339fa382d6911f12fc23dcaf2cdb2854c4cab654f6058f5bf0df1bb371_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:bcfbd2284cbeeba5a835aaf5a5590ddd8156bd881ca24fd0fe1465fade1f84c2_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:bd739ced163053224e5b0ea2f3cd577481c6b6c1162cc0fbc186f1716b4a1fbd_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:d40496f114898985cde3860b9664c34d8c32de85e4d3d846df91a6ba27a2e99c_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:3f7cbe7605595d712e14d9a17717fafc6c6e334f2ad3e821c34947ec78411046_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:96775900ea90e57487da6afe59d058b33cb977a0247a1bbeb1bd07bed2816398_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:caa6b121538e074312314d9888d9b423bd225aefa4f25eb145893b9fc548c0ad_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:e59c90cfe8160b28f9d2aa9e59b1d04d742df44d2195210ebc1946ee3cb78b6f_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:10c95e5c55ccc1a04e8d2ac28bd1afd3b9bb9a7e9e2a5e3e8efb301421539980_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:60a310d4464b4817845703d14e95729321b883fbfc79fbf2dd8d514bb3c675e9_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:70e6c14d72f14d25a90f44043932fbd3f824b30e8ad4b36307100726b24d9c06_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:784129cf69b3bf77a907fe909fd73a2a4d0fbd947fe0037e47aa1d62c6ffcf0b_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:26e58654cdd092cb812207cb4473f5f5988ebd708d95c34152c2e8c124f7297d_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:40e5d9634aa7469df8247758961d486cfac3e7d7f0b59184e11ed5571b46bf40_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:5b59faed336de07965755c893cb9d0ffc52ec90f61cc8c54487f6c0cac53322e_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:b59aea0c9e859025988b0f0c9b6e7748c4acf6d0b4cee35f3fabb7b84feb598b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:2368703206d833e4cb73b7e8750efb9997633a6f9accbf032426bcfcae4c00d9_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:80b543b207e724e880ff932c514fe9c6a3925bfede1c31863531e4e69d050d40_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:82405a9a5715db5442dfa3d3f594888bd7b2f9c778d68357a7d8884f5ea46915_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:8fd2bda7b8d94ededf7973f76a159dd61105776a05d961ac9cfd9bee0a988213_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:4def845360282dad99181b96bcd834b4863eab39e246fda2476234c561c652ec_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:b67aec868b6366cf04f3980b15588e1a0af5c88b2248958bc3884261ad390ca0_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:ceacf3491ebec6f5613011fe8d36b66d00f8b3697832615a4d7024e23125085e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:d9f6a520b818dcccbedb94720b5979ef1cdec2e02491c76e3decb3ee18f2085d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:3e6519c0c789b946eb1b811867c41c4f204440bad5734760c0aca4e3fc602e5a_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:95684cfaf4d5d91bc9fe8cfbf64a6f113e944e3f0c102d27851be5232eca0dbb_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:9cb20990af88287dd8a27de4e4ef12eb244577a1844482d26107359c6efe8efa_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:a69ebb0c7e817d44cfabd86ad13ef4cc94a8bf5b6e8a607d17b197603d64a224_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:0eea35a3af36d08db945a70c387cc38eb326f75b4ed322f09d8c91863cfe5d02_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:22c48db227cd6f2ecec746674e31ac7f5a983a418679fc91678a0aa0ebb49496_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:8e8d249c39d562f819d347f12610dda7f5c01215c41101bfd5dca008e04edf6e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:f8adb8dd40a204bacb51cd423803097a514ec8e8e9f52209e02ecf14cad622bb_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:03adc6277e2bf409391941c6f4508154abc38a0c043139978754f6d4fd32c5a8_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:7e100af30ed11325cb2cbee02af09306e53df5db5847f2a4b733cd307e3cd623_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:91b474b4808b18c279c9f8eb3be8e6d1e1e47cf2b5f9553acd901c74b20bddbc_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:d56f884a9700a4f193d6f3db1895bd54745ec77e02ead3d43bd6e4fe04a2969e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:1f7ed606f69a74943aedb0a956e5a71019f8a1ab53cd3f8166be0f55a69809b9_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:4841076eb82f1f1748345556ff6c4e02a17f1f63c661e375eaba720291cbaf6a_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:a79ac7dcae109aa526e2a218327dd8c5dba2b924fc27447a07199b3b2f2f67b3_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:dee022821852f2d5ebdbbd9f09c9b97997a905061dadb3f78433291d462d49a7_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:1a746b16f362a83f399255d925b322b3440b3d89ae4d64ab7962db3d82ee91a1_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:417a31bec11c3ffb70f40fa955069d5160dc12e2426b67e1d2e35ae3f7fa06df_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:89a3cb77fdb3dcbddfe96785a9ba3fa2b6132098fce028f859663b31fcf77a34_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:b1ba0b4cd8f515895af7b9f797f6ea5b661f7254ce019ce5115375639dcd06e9_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:0827c96b922ca185b7a7321a4f504e8a5dc01aadafcfd20443060546981339a8_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:b5b732dfc0ce3d740781eda9a72e1542c7a30b28b39d2be6e0ba470af06a9680_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:f74081e5eb03227ccff5717a7d139ceee6c5b610625ff7b99e639a2652bf7663_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:f80976ae4fc332600e1d8e1d70b42c038ea05d76ac2c5b1d7d0cbaddbe89140a_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:4029ece83812237ce8b1d394252e9561012e8cd94af40680a90284fbea1bc32a_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:63a3465a7539a8a286c846a84d63e3feca9a11758e4c0d697889b0bdeb26a25c_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:81c227d7c7599b0d4357ccdc3b567f31b67bbd1198c9e7ddba1864c299bad11b_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:f392bde8ce22aca058d77132cc709440442931679dbe725c52516f1cdc97b38d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:4825fab15300bc911e0b2b5c4ae342004bfcff95fa64af0fdb1085fadd132aa2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:68f879679911c2ca828551b900eca1c2f4e8caec7312fbba502fabc4778d1832_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:b4188ac728c746769ef6586663dd6d7d07db984b083397d2c76fe847ef22ea60_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:f2805fc1e6f37bc8acc3187ea8712d38f32151d584c10d5996c0ad7076cd638b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:1c943edcf23df14f254e4aabb93cbc1665bbc7902076b3f04bd80edd2fe324db_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:84c5d2b24caf68c3a6a6d078bd9f66de9fb88e769f6c09c11a248693d463ac21_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:907d6e24922d6d372bceb21ad830c254c6a9c9d6be0ac4f4edf22c236437a09d_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:923a3ee0e3d5b7341b96826e465e6856855f2801dbaf381d139a632c77bda1c5_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:285d2e2d103b458f0603435aedb4d779d85e48fed2267845b798f4a04a0df4c7_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:44981f5fcbc9086470143fae6e21a5de3baad2258d9f8c81accecb2faad6b2a2_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:5ba248d0bc8fcde70e210319bb962f4043e5e8ab8a5625c8f8f30ec96d47c6b7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:f681cdac28ee9ff6375fb39d7b7d12917a06043db44c16e8f84bdb9e09e7b5e7_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:2057531884d897574fc0648e5d3cf21c4549738ac5f35d8095f400cdb80049cc_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:8be0e50a132a2c974893f36b51f3f40b6d6e1f913ae0f9ee6319ef0d5ec455b7_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:a2edc5d233d1547fa2e1d01f29d8a914930735f7098289892430ba9a17d20ab7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:c81c7aeb3dd05801e279a9fcc8d6c3baf00a2ccc08eab53f8acc8bd4d2d129c4_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:25e17bf203568420587cf5907e84e4167afab84dfce549c91bea99e70290b742_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:277f4e8ac5fc292b9f0f2d123f924c6b5cbc0a2eeba3c87a0e61c5ee2399aaa9_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:76766b77ed53513cd254195b25d205ab6964522816e1e3662800e38a105abdf2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:c7ace45f7cb86055e2ba18e27a660f6aa6cb4eff497204294875d5dd1d63cce3_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:3780b1bc80ab7ebc3cfed06ce69346d589dc07b53cea65ad3ed92cc912284300_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:681b356709778083448892513b4559f693e002bfda897a57e2d065f736a902b5_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:d110b52ce8ea022b3d35e7c4b0ce3b646f30513cf8abb55327132565ea4a6a87_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:f076ab59f3abe061e4553a61f98a144a472297dba5ed924ca887f130e9372da9_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:31bd91156f49687d2efffd3be971d9ee0e16abb420b8e8b958caa88b97770020_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:a6315866c67ba350665f5a92f960a5a44e427ca37ae7505e2072af4e02c42f76_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:b3ad6fa1de658f3a40c8b183ab501ebc66b359d8cc01439d4215aa52769df213_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:bfde9ebea1fcd27b6d104d5f67db62e870878f9517ccbec2f649dd2c1af4a073_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:08fed161d59299881ff7a54db859feaf8ed7bdb8238d6cf12628ccb73575665e_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:09436fe2649ca384b1bc1fd8f736fb1d71392733310e66758ed9f289e00471f9_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:3b83670e1c0e9d1f5b76bd7b75d77072bc6208646bc2201bd0bd200dbc59e34a_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:927146f966e4c5c2908d29d8ab45a8f3071dbd5ebd9cf0424460a23f814a72a7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:38a3bc59511133cae56827eba879e7c82c5a974bf1f16b6e8d95e1f79821e669_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:3fa04db82e3ce6169270db0ce29107b69d8e044e0a1ab13a2bf1050b8c26d087_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:6041a918713d4464c73560b68c294a12d33f297a980d2f9d0e0cc8c300a96f24_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:98bd72ba69bdfb3070d87b3edcbd7050579a514b72cfd67c2926541ba52dbaf7_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:938abc970731c2eeda8e2b7b73e96d4dfcbf7587330c7b7e52117a577700e426_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:a0876a25ce85d7d4616212813f012422826f152b8d71065e75cd9c3e23034d8a_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:c77077a0cca835a503a6529c89ab19c4027f949d361afdf8a5a259e1e87b0d55_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:d5bbf3fe886f27cdc27363dcb175e004487d9c8f36de4f1f8516fbeda3a95224_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:0f5d8cae3ba4ea4fcdc5fb9d08f797d576bc225b92af66f193bd4b1324cda4b9_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:2d3588825f8a714fa59b1648d0934d064165e333f322f7f31f01f07b940d42d9_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:68aa571827f5331f1d5a3bd0c60ad441a18877ba11921aff2633940236bafcd4_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:9b80c9c61d4befefa7f6a65ae8c001ce7e343a1e4f251e5ebe025625d9511730_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:9b2c24401a91903f023096d2b641aa977acff423eb6770a8e4c4a81aecfd4e62_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:9d74585acc098c13f3e9dac5ae7f5ef337fa82bd7119d7f1849c5f8a50e84907_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:a6ee95d0ed82bddef084684d11fa770bd646d9be9bc65b3bc386d7c58b33975c_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:f7b8654eb8bf675c8c26f0ad395d790f990308d3ad6683bb61b484c92073bbac_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:2a598e7fd07db27100d9a53a328ac9a0535865883bddd1373f4f1f2705068d2f_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:4f8f0b02d0969753e156226a998d442746c238a2a50ea606a49ca0cf695b8925_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:63c02348faa7d4e26e35c69aef5453613dd607a26116823b931b89fe5311e181_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:ae224866f0085d2c00ab18a28d2aed076e455731903989a49a544abf49950d1f_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:0a90a13f006ef0b271079b728ef6d54081f36ae19b6d0e9ab4dc24ea52a30fad_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:3a53629645832974a883002e53198df7c28e59dd6d1df99bf321b52d0ef84b61_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:879315f438ca43abb607d6c97f8fbd4ca2d38209b142e2d97cc0598740273252_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:c6c4d01f5fcee6cad3fc870cace92f45000624760e6e93654bb5e814afeed7bb_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:50f7647620c78fd6b445379c8762f5e978113fe3552906376a24459263f27459_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:53e641f48ddc05c63da2e6bc24e9e4636a10de2c3599d8f5f78622bdebca07ca_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:57114b7a386c406715e342637558fab57afeef2e193517f99173a441f39401d5_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:dcdcaa90f292f2d7ad3f10acbedfab9f7f22f3432c3156055f34760d9bf9429c_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:3723b1d5c74f37cba219e203fd2026a718d4821595cb505ec6626684695da65b_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:562291f52b6bce98ec8795856b808545c4fe30047b54544c7f6c2ab4678480ff_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:e6dfac9bc3e467e141a425944782f5087ed967ac4d02d8d47442e3d61ba5b882_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:f683186c2cc8be9ec09b8efdec66d6b8b1f991c7f7b9fd398dc7c3f9ab8b3079_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:2471edd63a94473c68cf37ee50de643e40003f2c5bba84063c154e4888a7f0bd_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:7cef49d68df5d8efe52061a18920e07e6c7efa3016c0cea7d1747e67851f254a_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:d912383405599032acffbad22bc154f63a87dd429ba882fd7a94cb82fe650d8e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:f3034211e16de48af540efe4ee460395dba0a4a544fa4f277a12840a25df1730_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:181d1decb2f16fcf6f5938027ed346aca29126687bbe6cdcc601c25087f70d11_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:ab5e4d27e23448d99a37b8c05442bb1254083cdc4ff325e721d97d80ec27346c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:ac172243d158e126594f28317e0cfb37dc1790c9f2121e95fe52506b5e05fc91_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:fd96b6284d270effa0f838d960ea4218b72b54c4718513eb523658f2f4972682_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:c59d9cd479c62730eda5d482fb2f4e9fbc17a90a5a2861b130aafe1f3a27a333_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:e547f672b14b6e8fc2ffd300b150aedbd3f6b6b36ddcad612f7c992a936a7c82_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:ead1263d538974c48790c65e44cd9cab07a62c2893b2eeb250174e7cf58d7f9d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:ed0457a57c7b39b79fb308176f45ffe678938b25fbb8c15de2cedbe54b916f64_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:9847a5752ec77e17861dcdac5546ee5c53679c80c3569609b21d9080ee3b7ef3_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:d3c823e61a0682ddc85e576e86234e580992886de471035630f9c89bbad6ebb7_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:ded425ed0af88a1411a06e5191aee25c4c59f1de85b041eba95c9997686cf09e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:ee63f59942f9df04e95fc4266f0d194cd62a7ca08dd5478283884d0ab6003da7_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:724377cabaa284a5197e7505a7150c89631c2f2bcc629e074c7c0be18abd8e6f_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:cbf797c9e93413540b20ebee9191375ddd8185ef22dc8c9e23cc3a4c015abaf7_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:d7609d62a801cf07ef639abcd4f193b2d68967fadebbfddf2349003d7e9eaa44_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:f61fe90362f793225591eb7e2a86d5cdc6fb35aa087e9b6a6218a42b1c1d945d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:1c4de9460688800b62bad6fb13653ef4b52bf215e4d41674291193e9b8e71b24_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:4f1e59610b2fbedc56f425b3fbd8f16c9ea6ea96025f18a404fe48f6a49bdc1e_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:ab0d28306dd6daa03af79bdc2ea650e59a50a03317987c4cdd0d1ee70f95b597_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:b700a8bb7ea6e4253afb8bcf94e5ad086349980ca0716a87817724d3da3fdce1_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4015f46d2172db26a348635e2e8cbd4bbcdbbaa56a4b12c232676a3d0f5bbee2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4169252c61ec70b91b10c750d5f9ecd53f5c3c906766bba9103afbac3c3f9edf_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4ab72a192553c21de76754f06fe38cf443e686e4b4edc2aa2ceb2b6b9d95bb6c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:579ef0925c6f56ed48f22121767189431bef6c4eaa72b2648a1b91488357a51d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:2b796bf55ecf7a14d1c87d829a2b20d998fc2943686373105b0a50f5053ef836_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:7e960b59f64547f7e9602b7c066a51ab52aba929726aec2bacdf486a9d4d28fd_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:a43e430a2ec0b86fb6ade361677be298b4e27444388a9bca35ddafbf9c77277c_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:d2394b121256985e5ca322aea77bb0bf999ba2d7a6f1627e62bbc125c475dbbd_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:1868e2ea03d063b4cd64601cb0aaf5c9ea7f55e83eba2e2d4dcf6f830efeafc7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:4bfbf0bdc882979bc94d85a4aeff8caa0ec7887aec7412e32ae1442811325d06_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:844e3d69d3c26914e02612466021592a876e6e2dd6cf77084723a70f567ba0e2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:bbe04eb8fd197f15875f498e3c18b9a7a445380efb5f696422d79df99a34a881_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:2c9f9b47c01c5e5e017c583c6a09c5c52f40ef88acf789689265cb31ef328fb8_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:7b5e883efde312c1571c4825b523ff04ab57af6a9f4162a36b80b973f9602c46_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:d896dd89fb924da246fc729041d9debc019d8a4210cfd3de8883834e429cca10_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:ede3e22d4e4de49789622149dec23beaa7e0569a3715ac2262929df543e05bc3_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:273a393b8c62fbc4edb4bf4033c47d8b52bda56fc9cafa289d9513210840815b_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:71f1b590785ce7f4577ecd687dbab9bc3c5931c568a3108eb84279c7aa892046_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:d1e1b4310eb64891c9456be7c34547bf36b0aafdeb471a49f0892d7eaf8f41f4_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:e0a7514406c7ffae080db6d4db3bbf7b77a606ea4632bf09f8301ce1d3739bb5_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:2a4c6c061d154ed9c74707a7a2e2390fde2a150f36197386c3e49c0612d345b2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:6ffcc051c955e198c6d96b59bda0ef26b5124ebbdef5357d36a84534f2c7097c_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:c9258bf58373f9c6859789c8ec272cd7d702c37e063fc2ee53c66d296e7ee3d0_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:d83c6bb4f2a91d2c4de3ffbf4aa8ceecb695f8491ba7586d55275c62cd1931e6_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:67637c5cba3eca1597885823c6e44c13db445d0ef38751eb8364b69dbf07caac_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:68fb5c2a3c8a0d5e6bbcf2c5568969f6b13e72006d4d54bc5c57cd9a032d1bf6_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:9f5fa40c88b0f5d1ae3634632240817a91f4575f8eae9c005b8e35a55cf38003_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:fcbcee9fc7e0bbf5775a33ae9b7e3d7e48a90e2aa1cb85605e05612b6e4d4e30_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:0c165bb93ce933c7f9998a615908bfcca0b4eb38e32e24a1c823e63791b7604b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:42aa392f82bdc45a3b857d1ed44e224ddfd14db1e3dcbb74dcc850ac0540e964_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:9dcd0c0ecf1523bf05bd296edbecd85841b2753dee7a5c9df32437f9a8e31471_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:c5505c462e6b2c04a6e14bc1e22dfc42dc8adea8f6eaf0615cd58b1973b7d62e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:1a93df314c31f10da7b1345fab07b15b846e28865764178e34124f84dc967152_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:34343f81973c3fbdd8630c32d0fad597745ea10f960ea64236408e58e0f10e14_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:7b3635784ebfb6343a73c9fa6de7bea57b3aacce1c49a0f7f250a471f7b897e3_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:f0a7fade2853193429bab16922b2e3bbe426e14632423d6550ff7dfb66d42827_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:94950d339fa382d6911f12fc23dcaf2cdb2854c4cab654f6058f5bf0df1bb371_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:bcfbd2284cbeeba5a835aaf5a5590ddd8156bd881ca24fd0fe1465fade1f84c2_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:bd739ced163053224e5b0ea2f3cd577481c6b6c1162cc0fbc186f1716b4a1fbd_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:d40496f114898985cde3860b9664c34d8c32de85e4d3d846df91a6ba27a2e99c_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:3f7cbe7605595d712e14d9a17717fafc6c6e334f2ad3e821c34947ec78411046_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:96775900ea90e57487da6afe59d058b33cb977a0247a1bbeb1bd07bed2816398_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:caa6b121538e074312314d9888d9b423bd225aefa4f25eb145893b9fc548c0ad_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:e59c90cfe8160b28f9d2aa9e59b1d04d742df44d2195210ebc1946ee3cb78b6f_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:10c95e5c55ccc1a04e8d2ac28bd1afd3b9bb9a7e9e2a5e3e8efb301421539980_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:60a310d4464b4817845703d14e95729321b883fbfc79fbf2dd8d514bb3c675e9_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:70e6c14d72f14d25a90f44043932fbd3f824b30e8ad4b36307100726b24d9c06_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:784129cf69b3bf77a907fe909fd73a2a4d0fbd947fe0037e47aa1d62c6ffcf0b_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:26e58654cdd092cb812207cb4473f5f5988ebd708d95c34152c2e8c124f7297d_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:40e5d9634aa7469df8247758961d486cfac3e7d7f0b59184e11ed5571b46bf40_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:5b59faed336de07965755c893cb9d0ffc52ec90f61cc8c54487f6c0cac53322e_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:b59aea0c9e859025988b0f0c9b6e7748c4acf6d0b4cee35f3fabb7b84feb598b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:2368703206d833e4cb73b7e8750efb9997633a6f9accbf032426bcfcae4c00d9_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:80b543b207e724e880ff932c514fe9c6a3925bfede1c31863531e4e69d050d40_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:82405a9a5715db5442dfa3d3f594888bd7b2f9c778d68357a7d8884f5ea46915_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:8fd2bda7b8d94ededf7973f76a159dd61105776a05d961ac9cfd9bee0a988213_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:4def845360282dad99181b96bcd834b4863eab39e246fda2476234c561c652ec_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:b67aec868b6366cf04f3980b15588e1a0af5c88b2248958bc3884261ad390ca0_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:ceacf3491ebec6f5613011fe8d36b66d00f8b3697832615a4d7024e23125085e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:d9f6a520b818dcccbedb94720b5979ef1cdec2e02491c76e3decb3ee18f2085d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:3e6519c0c789b946eb1b811867c41c4f204440bad5734760c0aca4e3fc602e5a_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:95684cfaf4d5d91bc9fe8cfbf64a6f113e944e3f0c102d27851be5232eca0dbb_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:9cb20990af88287dd8a27de4e4ef12eb244577a1844482d26107359c6efe8efa_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:a69ebb0c7e817d44cfabd86ad13ef4cc94a8bf5b6e8a607d17b197603d64a224_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:0eea35a3af36d08db945a70c387cc38eb326f75b4ed322f09d8c91863cfe5d02_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:22c48db227cd6f2ecec746674e31ac7f5a983a418679fc91678a0aa0ebb49496_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:8e8d249c39d562f819d347f12610dda7f5c01215c41101bfd5dca008e04edf6e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:f8adb8dd40a204bacb51cd423803097a514ec8e8e9f52209e02ecf14cad622bb_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:03adc6277e2bf409391941c6f4508154abc38a0c043139978754f6d4fd32c5a8_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:7e100af30ed11325cb2cbee02af09306e53df5db5847f2a4b733cd307e3cd623_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:91b474b4808b18c279c9f8eb3be8e6d1e1e47cf2b5f9553acd901c74b20bddbc_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:d56f884a9700a4f193d6f3db1895bd54745ec77e02ead3d43bd6e4fe04a2969e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:1f7ed606f69a74943aedb0a956e5a71019f8a1ab53cd3f8166be0f55a69809b9_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:4841076eb82f1f1748345556ff6c4e02a17f1f63c661e375eaba720291cbaf6a_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:a79ac7dcae109aa526e2a218327dd8c5dba2b924fc27447a07199b3b2f2f67b3_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:dee022821852f2d5ebdbbd9f09c9b97997a905061dadb3f78433291d462d49a7_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:1a746b16f362a83f399255d925b322b3440b3d89ae4d64ab7962db3d82ee91a1_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:417a31bec11c3ffb70f40fa955069d5160dc12e2426b67e1d2e35ae3f7fa06df_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:89a3cb77fdb3dcbddfe96785a9ba3fa2b6132098fce028f859663b31fcf77a34_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:b1ba0b4cd8f515895af7b9f797f6ea5b661f7254ce019ce5115375639dcd06e9_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:0827c96b922ca185b7a7321a4f504e8a5dc01aadafcfd20443060546981339a8_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:b5b732dfc0ce3d740781eda9a72e1542c7a30b28b39d2be6e0ba470af06a9680_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:f74081e5eb03227ccff5717a7d139ceee6c5b610625ff7b99e639a2652bf7663_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:f80976ae4fc332600e1d8e1d70b42c038ea05d76ac2c5b1d7d0cbaddbe89140a_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:4029ece83812237ce8b1d394252e9561012e8cd94af40680a90284fbea1bc32a_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:63a3465a7539a8a286c846a84d63e3feca9a11758e4c0d697889b0bdeb26a25c_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:81c227d7c7599b0d4357ccdc3b567f31b67bbd1198c9e7ddba1864c299bad11b_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:f392bde8ce22aca058d77132cc709440442931679dbe725c52516f1cdc97b38d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:4825fab15300bc911e0b2b5c4ae342004bfcff95fa64af0fdb1085fadd132aa2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:68f879679911c2ca828551b900eca1c2f4e8caec7312fbba502fabc4778d1832_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:b4188ac728c746769ef6586663dd6d7d07db984b083397d2c76fe847ef22ea60_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:f2805fc1e6f37bc8acc3187ea8712d38f32151d584c10d5996c0ad7076cd638b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:1c943edcf23df14f254e4aabb93cbc1665bbc7902076b3f04bd80edd2fe324db_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:84c5d2b24caf68c3a6a6d078bd9f66de9fb88e769f6c09c11a248693d463ac21_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:907d6e24922d6d372bceb21ad830c254c6a9c9d6be0ac4f4edf22c236437a09d_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:923a3ee0e3d5b7341b96826e465e6856855f2801dbaf381d139a632c77bda1c5_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:285d2e2d103b458f0603435aedb4d779d85e48fed2267845b798f4a04a0df4c7_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:44981f5fcbc9086470143fae6e21a5de3baad2258d9f8c81accecb2faad6b2a2_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:5ba248d0bc8fcde70e210319bb962f4043e5e8ab8a5625c8f8f30ec96d47c6b7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:f681cdac28ee9ff6375fb39d7b7d12917a06043db44c16e8f84bdb9e09e7b5e7_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:2057531884d897574fc0648e5d3cf21c4549738ac5f35d8095f400cdb80049cc_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:8be0e50a132a2c974893f36b51f3f40b6d6e1f913ae0f9ee6319ef0d5ec455b7_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:a2edc5d233d1547fa2e1d01f29d8a914930735f7098289892430ba9a17d20ab7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:c81c7aeb3dd05801e279a9fcc8d6c3baf00a2ccc08eab53f8acc8bd4d2d129c4_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:25e17bf203568420587cf5907e84e4167afab84dfce549c91bea99e70290b742_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:277f4e8ac5fc292b9f0f2d123f924c6b5cbc0a2eeba3c87a0e61c5ee2399aaa9_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:76766b77ed53513cd254195b25d205ab6964522816e1e3662800e38a105abdf2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:c7ace45f7cb86055e2ba18e27a660f6aa6cb4eff497204294875d5dd1d63cce3_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:3780b1bc80ab7ebc3cfed06ce69346d589dc07b53cea65ad3ed92cc912284300_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:681b356709778083448892513b4559f693e002bfda897a57e2d065f736a902b5_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:d110b52ce8ea022b3d35e7c4b0ce3b646f30513cf8abb55327132565ea4a6a87_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:f076ab59f3abe061e4553a61f98a144a472297dba5ed924ca887f130e9372da9_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "sanitize-html: `sanitize-html`: Stored Cross-Site Scripting via HTML sanitizer bypass"
},
{
"cve": "CVE-2026-45447",
"cwe": {
"id": "CWE-825",
"name": "Expired Pointer Dereference"
},
"discovery_date": "2026-05-27T14:17:46+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:31bd91156f49687d2efffd3be971d9ee0e16abb420b8e8b958caa88b97770020_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:a6315866c67ba350665f5a92f960a5a44e427ca37ae7505e2072af4e02c42f76_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:b3ad6fa1de658f3a40c8b183ab501ebc66b359d8cc01439d4215aa52769df213_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:bfde9ebea1fcd27b6d104d5f67db62e870878f9517ccbec2f649dd2c1af4a073_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:08fed161d59299881ff7a54db859feaf8ed7bdb8238d6cf12628ccb73575665e_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:09436fe2649ca384b1bc1fd8f736fb1d71392733310e66758ed9f289e00471f9_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:3b83670e1c0e9d1f5b76bd7b75d77072bc6208646bc2201bd0bd200dbc59e34a_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:927146f966e4c5c2908d29d8ab45a8f3071dbd5ebd9cf0424460a23f814a72a7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:38a3bc59511133cae56827eba879e7c82c5a974bf1f16b6e8d95e1f79821e669_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:3fa04db82e3ce6169270db0ce29107b69d8e044e0a1ab13a2bf1050b8c26d087_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:6041a918713d4464c73560b68c294a12d33f297a980d2f9d0e0cc8c300a96f24_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:98bd72ba69bdfb3070d87b3edcbd7050579a514b72cfd67c2926541ba52dbaf7_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:938abc970731c2eeda8e2b7b73e96d4dfcbf7587330c7b7e52117a577700e426_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:a0876a25ce85d7d4616212813f012422826f152b8d71065e75cd9c3e23034d8a_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:c77077a0cca835a503a6529c89ab19c4027f949d361afdf8a5a259e1e87b0d55_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:d5bbf3fe886f27cdc27363dcb175e004487d9c8f36de4f1f8516fbeda3a95224_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:0f5d8cae3ba4ea4fcdc5fb9d08f797d576bc225b92af66f193bd4b1324cda4b9_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:2d3588825f8a714fa59b1648d0934d064165e333f322f7f31f01f07b940d42d9_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:68aa571827f5331f1d5a3bd0c60ad441a18877ba11921aff2633940236bafcd4_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:9b80c9c61d4befefa7f6a65ae8c001ce7e343a1e4f251e5ebe025625d9511730_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:9b2c24401a91903f023096d2b641aa977acff423eb6770a8e4c4a81aecfd4e62_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:9d74585acc098c13f3e9dac5ae7f5ef337fa82bd7119d7f1849c5f8a50e84907_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:a6ee95d0ed82bddef084684d11fa770bd646d9be9bc65b3bc386d7c58b33975c_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:f7b8654eb8bf675c8c26f0ad395d790f990308d3ad6683bb61b484c92073bbac_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:2a598e7fd07db27100d9a53a328ac9a0535865883bddd1373f4f1f2705068d2f_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:4f8f0b02d0969753e156226a998d442746c238a2a50ea606a49ca0cf695b8925_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:63c02348faa7d4e26e35c69aef5453613dd607a26116823b931b89fe5311e181_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:ae224866f0085d2c00ab18a28d2aed076e455731903989a49a544abf49950d1f_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:0a90a13f006ef0b271079b728ef6d54081f36ae19b6d0e9ab4dc24ea52a30fad_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:3a53629645832974a883002e53198df7c28e59dd6d1df99bf321b52d0ef84b61_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:879315f438ca43abb607d6c97f8fbd4ca2d38209b142e2d97cc0598740273252_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:c6c4d01f5fcee6cad3fc870cace92f45000624760e6e93654bb5e814afeed7bb_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:50f7647620c78fd6b445379c8762f5e978113fe3552906376a24459263f27459_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:53e641f48ddc05c63da2e6bc24e9e4636a10de2c3599d8f5f78622bdebca07ca_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:57114b7a386c406715e342637558fab57afeef2e193517f99173a441f39401d5_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:dcdcaa90f292f2d7ad3f10acbedfab9f7f22f3432c3156055f34760d9bf9429c_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:3723b1d5c74f37cba219e203fd2026a718d4821595cb505ec6626684695da65b_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:562291f52b6bce98ec8795856b808545c4fe30047b54544c7f6c2ab4678480ff_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:e6dfac9bc3e467e141a425944782f5087ed967ac4d02d8d47442e3d61ba5b882_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:f683186c2cc8be9ec09b8efdec66d6b8b1f991c7f7b9fd398dc7c3f9ab8b3079_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:2471edd63a94473c68cf37ee50de643e40003f2c5bba84063c154e4888a7f0bd_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:7cef49d68df5d8efe52061a18920e07e6c7efa3016c0cea7d1747e67851f254a_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:d912383405599032acffbad22bc154f63a87dd429ba882fd7a94cb82fe650d8e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:f3034211e16de48af540efe4ee460395dba0a4a544fa4f277a12840a25df1730_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:181d1decb2f16fcf6f5938027ed346aca29126687bbe6cdcc601c25087f70d11_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:ab5e4d27e23448d99a37b8c05442bb1254083cdc4ff325e721d97d80ec27346c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:ac172243d158e126594f28317e0cfb37dc1790c9f2121e95fe52506b5e05fc91_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:fd96b6284d270effa0f838d960ea4218b72b54c4718513eb523658f2f4972682_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:c59d9cd479c62730eda5d482fb2f4e9fbc17a90a5a2861b130aafe1f3a27a333_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:e547f672b14b6e8fc2ffd300b150aedbd3f6b6b36ddcad612f7c992a936a7c82_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:ead1263d538974c48790c65e44cd9cab07a62c2893b2eeb250174e7cf58d7f9d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:ed0457a57c7b39b79fb308176f45ffe678938b25fbb8c15de2cedbe54b916f64_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:9847a5752ec77e17861dcdac5546ee5c53679c80c3569609b21d9080ee3b7ef3_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:d3c823e61a0682ddc85e576e86234e580992886de471035630f9c89bbad6ebb7_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:ded425ed0af88a1411a06e5191aee25c4c59f1de85b041eba95c9997686cf09e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:ee63f59942f9df04e95fc4266f0d194cd62a7ca08dd5478283884d0ab6003da7_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:724377cabaa284a5197e7505a7150c89631c2f2bcc629e074c7c0be18abd8e6f_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:cbf797c9e93413540b20ebee9191375ddd8185ef22dc8c9e23cc3a4c015abaf7_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:d7609d62a801cf07ef639abcd4f193b2d68967fadebbfddf2349003d7e9eaa44_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:f61fe90362f793225591eb7e2a86d5cdc6fb35aa087e9b6a6218a42b1c1d945d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:1c4de9460688800b62bad6fb13653ef4b52bf215e4d41674291193e9b8e71b24_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:4f1e59610b2fbedc56f425b3fbd8f16c9ea6ea96025f18a404fe48f6a49bdc1e_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:ab0d28306dd6daa03af79bdc2ea650e59a50a03317987c4cdd0d1ee70f95b597_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:b700a8bb7ea6e4253afb8bcf94e5ad086349980ca0716a87817724d3da3fdce1_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4015f46d2172db26a348635e2e8cbd4bbcdbbaa56a4b12c232676a3d0f5bbee2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4169252c61ec70b91b10c750d5f9ecd53f5c3c906766bba9103afbac3c3f9edf_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4ab72a192553c21de76754f06fe38cf443e686e4b4edc2aa2ceb2b6b9d95bb6c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:579ef0925c6f56ed48f22121767189431bef6c4eaa72b2648a1b91488357a51d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:1868e2ea03d063b4cd64601cb0aaf5c9ea7f55e83eba2e2d4dcf6f830efeafc7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:4bfbf0bdc882979bc94d85a4aeff8caa0ec7887aec7412e32ae1442811325d06_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:844e3d69d3c26914e02612466021592a876e6e2dd6cf77084723a70f567ba0e2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:bbe04eb8fd197f15875f498e3c18b9a7a445380efb5f696422d79df99a34a881_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:2c9f9b47c01c5e5e017c583c6a09c5c52f40ef88acf789689265cb31ef328fb8_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:7b5e883efde312c1571c4825b523ff04ab57af6a9f4162a36b80b973f9602c46_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:d896dd89fb924da246fc729041d9debc019d8a4210cfd3de8883834e429cca10_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:ede3e22d4e4de49789622149dec23beaa7e0569a3715ac2262929df543e05bc3_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:273a393b8c62fbc4edb4bf4033c47d8b52bda56fc9cafa289d9513210840815b_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:71f1b590785ce7f4577ecd687dbab9bc3c5931c568a3108eb84279c7aa892046_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:d1e1b4310eb64891c9456be7c34547bf36b0aafdeb471a49f0892d7eaf8f41f4_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:e0a7514406c7ffae080db6d4db3bbf7b77a606ea4632bf09f8301ce1d3739bb5_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:2a4c6c061d154ed9c74707a7a2e2390fde2a150f36197386c3e49c0612d345b2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:6ffcc051c955e198c6d96b59bda0ef26b5124ebbdef5357d36a84534f2c7097c_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:c9258bf58373f9c6859789c8ec272cd7d702c37e063fc2ee53c66d296e7ee3d0_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:d83c6bb4f2a91d2c4de3ffbf4aa8ceecb695f8491ba7586d55275c62cd1931e6_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:67637c5cba3eca1597885823c6e44c13db445d0ef38751eb8364b69dbf07caac_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:68fb5c2a3c8a0d5e6bbcf2c5568969f6b13e72006d4d54bc5c57cd9a032d1bf6_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:9f5fa40c88b0f5d1ae3634632240817a91f4575f8eae9c005b8e35a55cf38003_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:fcbcee9fc7e0bbf5775a33ae9b7e3d7e48a90e2aa1cb85605e05612b6e4d4e30_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:0c165bb93ce933c7f9998a615908bfcca0b4eb38e32e24a1c823e63791b7604b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:42aa392f82bdc45a3b857d1ed44e224ddfd14db1e3dcbb74dcc850ac0540e964_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:9dcd0c0ecf1523bf05bd296edbecd85841b2753dee7a5c9df32437f9a8e31471_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:c5505c462e6b2c04a6e14bc1e22dfc42dc8adea8f6eaf0615cd58b1973b7d62e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:1a93df314c31f10da7b1345fab07b15b846e28865764178e34124f84dc967152_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:34343f81973c3fbdd8630c32d0fad597745ea10f960ea64236408e58e0f10e14_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:7b3635784ebfb6343a73c9fa6de7bea57b3aacce1c49a0f7f250a471f7b897e3_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:f0a7fade2853193429bab16922b2e3bbe426e14632423d6550ff7dfb66d42827_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:94950d339fa382d6911f12fc23dcaf2cdb2854c4cab654f6058f5bf0df1bb371_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:bcfbd2284cbeeba5a835aaf5a5590ddd8156bd881ca24fd0fe1465fade1f84c2_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:bd739ced163053224e5b0ea2f3cd577481c6b6c1162cc0fbc186f1716b4a1fbd_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:d40496f114898985cde3860b9664c34d8c32de85e4d3d846df91a6ba27a2e99c_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:3f7cbe7605595d712e14d9a17717fafc6c6e334f2ad3e821c34947ec78411046_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:96775900ea90e57487da6afe59d058b33cb977a0247a1bbeb1bd07bed2816398_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:caa6b121538e074312314d9888d9b423bd225aefa4f25eb145893b9fc548c0ad_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:e59c90cfe8160b28f9d2aa9e59b1d04d742df44d2195210ebc1946ee3cb78b6f_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:10c95e5c55ccc1a04e8d2ac28bd1afd3b9bb9a7e9e2a5e3e8efb301421539980_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:60a310d4464b4817845703d14e95729321b883fbfc79fbf2dd8d514bb3c675e9_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:70e6c14d72f14d25a90f44043932fbd3f824b30e8ad4b36307100726b24d9c06_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:784129cf69b3bf77a907fe909fd73a2a4d0fbd947fe0037e47aa1d62c6ffcf0b_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:26e58654cdd092cb812207cb4473f5f5988ebd708d95c34152c2e8c124f7297d_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:40e5d9634aa7469df8247758961d486cfac3e7d7f0b59184e11ed5571b46bf40_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:5b59faed336de07965755c893cb9d0ffc52ec90f61cc8c54487f6c0cac53322e_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:b59aea0c9e859025988b0f0c9b6e7748c4acf6d0b4cee35f3fabb7b84feb598b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:2368703206d833e4cb73b7e8750efb9997633a6f9accbf032426bcfcae4c00d9_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:80b543b207e724e880ff932c514fe9c6a3925bfede1c31863531e4e69d050d40_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:82405a9a5715db5442dfa3d3f594888bd7b2f9c778d68357a7d8884f5ea46915_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:8fd2bda7b8d94ededf7973f76a159dd61105776a05d961ac9cfd9bee0a988213_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:4def845360282dad99181b96bcd834b4863eab39e246fda2476234c561c652ec_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:b67aec868b6366cf04f3980b15588e1a0af5c88b2248958bc3884261ad390ca0_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:ceacf3491ebec6f5613011fe8d36b66d00f8b3697832615a4d7024e23125085e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:d9f6a520b818dcccbedb94720b5979ef1cdec2e02491c76e3decb3ee18f2085d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:3e6519c0c789b946eb1b811867c41c4f204440bad5734760c0aca4e3fc602e5a_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:95684cfaf4d5d91bc9fe8cfbf64a6f113e944e3f0c102d27851be5232eca0dbb_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:9cb20990af88287dd8a27de4e4ef12eb244577a1844482d26107359c6efe8efa_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:a69ebb0c7e817d44cfabd86ad13ef4cc94a8bf5b6e8a607d17b197603d64a224_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:0eea35a3af36d08db945a70c387cc38eb326f75b4ed322f09d8c91863cfe5d02_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:22c48db227cd6f2ecec746674e31ac7f5a983a418679fc91678a0aa0ebb49496_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:8e8d249c39d562f819d347f12610dda7f5c01215c41101bfd5dca008e04edf6e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:f8adb8dd40a204bacb51cd423803097a514ec8e8e9f52209e02ecf14cad622bb_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:03adc6277e2bf409391941c6f4508154abc38a0c043139978754f6d4fd32c5a8_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:7e100af30ed11325cb2cbee02af09306e53df5db5847f2a4b733cd307e3cd623_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:91b474b4808b18c279c9f8eb3be8e6d1e1e47cf2b5f9553acd901c74b20bddbc_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:d56f884a9700a4f193d6f3db1895bd54745ec77e02ead3d43bd6e4fe04a2969e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:1f7ed606f69a74943aedb0a956e5a71019f8a1ab53cd3f8166be0f55a69809b9_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:4841076eb82f1f1748345556ff6c4e02a17f1f63c661e375eaba720291cbaf6a_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:a79ac7dcae109aa526e2a218327dd8c5dba2b924fc27447a07199b3b2f2f67b3_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:dee022821852f2d5ebdbbd9f09c9b97997a905061dadb3f78433291d462d49a7_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:1a746b16f362a83f399255d925b322b3440b3d89ae4d64ab7962db3d82ee91a1_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:417a31bec11c3ffb70f40fa955069d5160dc12e2426b67e1d2e35ae3f7fa06df_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:89a3cb77fdb3dcbddfe96785a9ba3fa2b6132098fce028f859663b31fcf77a34_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:b1ba0b4cd8f515895af7b9f797f6ea5b661f7254ce019ce5115375639dcd06e9_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:0827c96b922ca185b7a7321a4f504e8a5dc01aadafcfd20443060546981339a8_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:b5b732dfc0ce3d740781eda9a72e1542c7a30b28b39d2be6e0ba470af06a9680_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:f74081e5eb03227ccff5717a7d139ceee6c5b610625ff7b99e639a2652bf7663_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:f80976ae4fc332600e1d8e1d70b42c038ea05d76ac2c5b1d7d0cbaddbe89140a_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:4029ece83812237ce8b1d394252e9561012e8cd94af40680a90284fbea1bc32a_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:63a3465a7539a8a286c846a84d63e3feca9a11758e4c0d697889b0bdeb26a25c_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:81c227d7c7599b0d4357ccdc3b567f31b67bbd1198c9e7ddba1864c299bad11b_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:f392bde8ce22aca058d77132cc709440442931679dbe725c52516f1cdc97b38d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:4825fab15300bc911e0b2b5c4ae342004bfcff95fa64af0fdb1085fadd132aa2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:68f879679911c2ca828551b900eca1c2f4e8caec7312fbba502fabc4778d1832_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:b4188ac728c746769ef6586663dd6d7d07db984b083397d2c76fe847ef22ea60_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:f2805fc1e6f37bc8acc3187ea8712d38f32151d584c10d5996c0ad7076cd638b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:1c943edcf23df14f254e4aabb93cbc1665bbc7902076b3f04bd80edd2fe324db_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:84c5d2b24caf68c3a6a6d078bd9f66de9fb88e769f6c09c11a248693d463ac21_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:907d6e24922d6d372bceb21ad830c254c6a9c9d6be0ac4f4edf22c236437a09d_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:923a3ee0e3d5b7341b96826e465e6856855f2801dbaf381d139a632c77bda1c5_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:285d2e2d103b458f0603435aedb4d779d85e48fed2267845b798f4a04a0df4c7_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:44981f5fcbc9086470143fae6e21a5de3baad2258d9f8c81accecb2faad6b2a2_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:5ba248d0bc8fcde70e210319bb962f4043e5e8ab8a5625c8f8f30ec96d47c6b7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:f681cdac28ee9ff6375fb39d7b7d12917a06043db44c16e8f84bdb9e09e7b5e7_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:2057531884d897574fc0648e5d3cf21c4549738ac5f35d8095f400cdb80049cc_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:8be0e50a132a2c974893f36b51f3f40b6d6e1f913ae0f9ee6319ef0d5ec455b7_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:a2edc5d233d1547fa2e1d01f29d8a914930735f7098289892430ba9a17d20ab7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:c81c7aeb3dd05801e279a9fcc8d6c3baf00a2ccc08eab53f8acc8bd4d2d129c4_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:25e17bf203568420587cf5907e84e4167afab84dfce549c91bea99e70290b742_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:277f4e8ac5fc292b9f0f2d123f924c6b5cbc0a2eeba3c87a0e61c5ee2399aaa9_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:76766b77ed53513cd254195b25d205ab6964522816e1e3662800e38a105abdf2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:c7ace45f7cb86055e2ba18e27a660f6aa6cb4eff497204294875d5dd1d63cce3_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:3780b1bc80ab7ebc3cfed06ce69346d589dc07b53cea65ad3ed92cc912284300_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:681b356709778083448892513b4559f693e002bfda897a57e2d065f736a902b5_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:d110b52ce8ea022b3d35e7c4b0ce3b646f30513cf8abb55327132565ea4a6a87_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:f076ab59f3abe061e4553a61f98a144a472297dba5ed924ca887f130e9372da9_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2481898"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in OpenSSL. When processing a specially crafted PKCS#7 or S/MIME (Secure/Multipurpose Internet Mail Extensions) signed message, a heap use-after-free vulnerability in the PKCS7_verify() function can be triggered. This occurs if the SignedData digestAlgorithms field is present as an empty ASN.1 SET, leading to incorrect memory deallocation. A remote attacker could exploit this to cause application crashes, memory corruption, or potentially achieve remote code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssl: Heap Use-After-Free in OpenSSL PKCS7_verify()",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This High severity heap use-after-free flaw in OpenSSL\u0027s PKCS7_verify() function can be triggered by processing a specially crafted PKCS#7 or S/MIME signed message. This could lead to application crashes, memory corruption, or potentially remote code execution, impacting services that handle such messages. The vulnerability specifically affects applications utilizing OpenSSL PKCS#7 APIs, while those using CMS APIs are not impacted.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:2b796bf55ecf7a14d1c87d829a2b20d998fc2943686373105b0a50f5053ef836_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:7e960b59f64547f7e9602b7c066a51ab52aba929726aec2bacdf486a9d4d28fd_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:a43e430a2ec0b86fb6ade361677be298b4e27444388a9bca35ddafbf9c77277c_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:d2394b121256985e5ca322aea77bb0bf999ba2d7a6f1627e62bbc125c475dbbd_amd64"
],
"known_not_affected": [
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:31bd91156f49687d2efffd3be971d9ee0e16abb420b8e8b958caa88b97770020_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:a6315866c67ba350665f5a92f960a5a44e427ca37ae7505e2072af4e02c42f76_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:b3ad6fa1de658f3a40c8b183ab501ebc66b359d8cc01439d4215aa52769df213_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:bfde9ebea1fcd27b6d104d5f67db62e870878f9517ccbec2f649dd2c1af4a073_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:08fed161d59299881ff7a54db859feaf8ed7bdb8238d6cf12628ccb73575665e_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:09436fe2649ca384b1bc1fd8f736fb1d71392733310e66758ed9f289e00471f9_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:3b83670e1c0e9d1f5b76bd7b75d77072bc6208646bc2201bd0bd200dbc59e34a_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:927146f966e4c5c2908d29d8ab45a8f3071dbd5ebd9cf0424460a23f814a72a7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:38a3bc59511133cae56827eba879e7c82c5a974bf1f16b6e8d95e1f79821e669_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:3fa04db82e3ce6169270db0ce29107b69d8e044e0a1ab13a2bf1050b8c26d087_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:6041a918713d4464c73560b68c294a12d33f297a980d2f9d0e0cc8c300a96f24_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:98bd72ba69bdfb3070d87b3edcbd7050579a514b72cfd67c2926541ba52dbaf7_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:938abc970731c2eeda8e2b7b73e96d4dfcbf7587330c7b7e52117a577700e426_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:a0876a25ce85d7d4616212813f012422826f152b8d71065e75cd9c3e23034d8a_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:c77077a0cca835a503a6529c89ab19c4027f949d361afdf8a5a259e1e87b0d55_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:d5bbf3fe886f27cdc27363dcb175e004487d9c8f36de4f1f8516fbeda3a95224_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:0f5d8cae3ba4ea4fcdc5fb9d08f797d576bc225b92af66f193bd4b1324cda4b9_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:2d3588825f8a714fa59b1648d0934d064165e333f322f7f31f01f07b940d42d9_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:68aa571827f5331f1d5a3bd0c60ad441a18877ba11921aff2633940236bafcd4_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:9b80c9c61d4befefa7f6a65ae8c001ce7e343a1e4f251e5ebe025625d9511730_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:9b2c24401a91903f023096d2b641aa977acff423eb6770a8e4c4a81aecfd4e62_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:9d74585acc098c13f3e9dac5ae7f5ef337fa82bd7119d7f1849c5f8a50e84907_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:a6ee95d0ed82bddef084684d11fa770bd646d9be9bc65b3bc386d7c58b33975c_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:f7b8654eb8bf675c8c26f0ad395d790f990308d3ad6683bb61b484c92073bbac_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:2a598e7fd07db27100d9a53a328ac9a0535865883bddd1373f4f1f2705068d2f_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:4f8f0b02d0969753e156226a998d442746c238a2a50ea606a49ca0cf695b8925_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:63c02348faa7d4e26e35c69aef5453613dd607a26116823b931b89fe5311e181_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:ae224866f0085d2c00ab18a28d2aed076e455731903989a49a544abf49950d1f_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:0a90a13f006ef0b271079b728ef6d54081f36ae19b6d0e9ab4dc24ea52a30fad_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:3a53629645832974a883002e53198df7c28e59dd6d1df99bf321b52d0ef84b61_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:879315f438ca43abb607d6c97f8fbd4ca2d38209b142e2d97cc0598740273252_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:c6c4d01f5fcee6cad3fc870cace92f45000624760e6e93654bb5e814afeed7bb_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:50f7647620c78fd6b445379c8762f5e978113fe3552906376a24459263f27459_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:53e641f48ddc05c63da2e6bc24e9e4636a10de2c3599d8f5f78622bdebca07ca_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:57114b7a386c406715e342637558fab57afeef2e193517f99173a441f39401d5_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:dcdcaa90f292f2d7ad3f10acbedfab9f7f22f3432c3156055f34760d9bf9429c_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:3723b1d5c74f37cba219e203fd2026a718d4821595cb505ec6626684695da65b_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:562291f52b6bce98ec8795856b808545c4fe30047b54544c7f6c2ab4678480ff_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:e6dfac9bc3e467e141a425944782f5087ed967ac4d02d8d47442e3d61ba5b882_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:f683186c2cc8be9ec09b8efdec66d6b8b1f991c7f7b9fd398dc7c3f9ab8b3079_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:2471edd63a94473c68cf37ee50de643e40003f2c5bba84063c154e4888a7f0bd_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:7cef49d68df5d8efe52061a18920e07e6c7efa3016c0cea7d1747e67851f254a_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:d912383405599032acffbad22bc154f63a87dd429ba882fd7a94cb82fe650d8e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:f3034211e16de48af540efe4ee460395dba0a4a544fa4f277a12840a25df1730_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:181d1decb2f16fcf6f5938027ed346aca29126687bbe6cdcc601c25087f70d11_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:ab5e4d27e23448d99a37b8c05442bb1254083cdc4ff325e721d97d80ec27346c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:ac172243d158e126594f28317e0cfb37dc1790c9f2121e95fe52506b5e05fc91_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:fd96b6284d270effa0f838d960ea4218b72b54c4718513eb523658f2f4972682_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:c59d9cd479c62730eda5d482fb2f4e9fbc17a90a5a2861b130aafe1f3a27a333_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:e547f672b14b6e8fc2ffd300b150aedbd3f6b6b36ddcad612f7c992a936a7c82_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:ead1263d538974c48790c65e44cd9cab07a62c2893b2eeb250174e7cf58d7f9d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:ed0457a57c7b39b79fb308176f45ffe678938b25fbb8c15de2cedbe54b916f64_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:9847a5752ec77e17861dcdac5546ee5c53679c80c3569609b21d9080ee3b7ef3_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:d3c823e61a0682ddc85e576e86234e580992886de471035630f9c89bbad6ebb7_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:ded425ed0af88a1411a06e5191aee25c4c59f1de85b041eba95c9997686cf09e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:ee63f59942f9df04e95fc4266f0d194cd62a7ca08dd5478283884d0ab6003da7_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:724377cabaa284a5197e7505a7150c89631c2f2bcc629e074c7c0be18abd8e6f_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:cbf797c9e93413540b20ebee9191375ddd8185ef22dc8c9e23cc3a4c015abaf7_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:d7609d62a801cf07ef639abcd4f193b2d68967fadebbfddf2349003d7e9eaa44_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:f61fe90362f793225591eb7e2a86d5cdc6fb35aa087e9b6a6218a42b1c1d945d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:1c4de9460688800b62bad6fb13653ef4b52bf215e4d41674291193e9b8e71b24_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:4f1e59610b2fbedc56f425b3fbd8f16c9ea6ea96025f18a404fe48f6a49bdc1e_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:ab0d28306dd6daa03af79bdc2ea650e59a50a03317987c4cdd0d1ee70f95b597_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:b700a8bb7ea6e4253afb8bcf94e5ad086349980ca0716a87817724d3da3fdce1_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4015f46d2172db26a348635e2e8cbd4bbcdbbaa56a4b12c232676a3d0f5bbee2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4169252c61ec70b91b10c750d5f9ecd53f5c3c906766bba9103afbac3c3f9edf_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4ab72a192553c21de76754f06fe38cf443e686e4b4edc2aa2ceb2b6b9d95bb6c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:579ef0925c6f56ed48f22121767189431bef6c4eaa72b2648a1b91488357a51d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:1868e2ea03d063b4cd64601cb0aaf5c9ea7f55e83eba2e2d4dcf6f830efeafc7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:4bfbf0bdc882979bc94d85a4aeff8caa0ec7887aec7412e32ae1442811325d06_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:844e3d69d3c26914e02612466021592a876e6e2dd6cf77084723a70f567ba0e2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:bbe04eb8fd197f15875f498e3c18b9a7a445380efb5f696422d79df99a34a881_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:2c9f9b47c01c5e5e017c583c6a09c5c52f40ef88acf789689265cb31ef328fb8_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:7b5e883efde312c1571c4825b523ff04ab57af6a9f4162a36b80b973f9602c46_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:d896dd89fb924da246fc729041d9debc019d8a4210cfd3de8883834e429cca10_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:ede3e22d4e4de49789622149dec23beaa7e0569a3715ac2262929df543e05bc3_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:273a393b8c62fbc4edb4bf4033c47d8b52bda56fc9cafa289d9513210840815b_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:71f1b590785ce7f4577ecd687dbab9bc3c5931c568a3108eb84279c7aa892046_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:d1e1b4310eb64891c9456be7c34547bf36b0aafdeb471a49f0892d7eaf8f41f4_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:e0a7514406c7ffae080db6d4db3bbf7b77a606ea4632bf09f8301ce1d3739bb5_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:2a4c6c061d154ed9c74707a7a2e2390fde2a150f36197386c3e49c0612d345b2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:6ffcc051c955e198c6d96b59bda0ef26b5124ebbdef5357d36a84534f2c7097c_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:c9258bf58373f9c6859789c8ec272cd7d702c37e063fc2ee53c66d296e7ee3d0_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:d83c6bb4f2a91d2c4de3ffbf4aa8ceecb695f8491ba7586d55275c62cd1931e6_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:67637c5cba3eca1597885823c6e44c13db445d0ef38751eb8364b69dbf07caac_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:68fb5c2a3c8a0d5e6bbcf2c5568969f6b13e72006d4d54bc5c57cd9a032d1bf6_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:9f5fa40c88b0f5d1ae3634632240817a91f4575f8eae9c005b8e35a55cf38003_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:fcbcee9fc7e0bbf5775a33ae9b7e3d7e48a90e2aa1cb85605e05612b6e4d4e30_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:0c165bb93ce933c7f9998a615908bfcca0b4eb38e32e24a1c823e63791b7604b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:42aa392f82bdc45a3b857d1ed44e224ddfd14db1e3dcbb74dcc850ac0540e964_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:9dcd0c0ecf1523bf05bd296edbecd85841b2753dee7a5c9df32437f9a8e31471_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:c5505c462e6b2c04a6e14bc1e22dfc42dc8adea8f6eaf0615cd58b1973b7d62e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:1a93df314c31f10da7b1345fab07b15b846e28865764178e34124f84dc967152_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:34343f81973c3fbdd8630c32d0fad597745ea10f960ea64236408e58e0f10e14_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:7b3635784ebfb6343a73c9fa6de7bea57b3aacce1c49a0f7f250a471f7b897e3_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:f0a7fade2853193429bab16922b2e3bbe426e14632423d6550ff7dfb66d42827_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:94950d339fa382d6911f12fc23dcaf2cdb2854c4cab654f6058f5bf0df1bb371_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:bcfbd2284cbeeba5a835aaf5a5590ddd8156bd881ca24fd0fe1465fade1f84c2_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:bd739ced163053224e5b0ea2f3cd577481c6b6c1162cc0fbc186f1716b4a1fbd_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:d40496f114898985cde3860b9664c34d8c32de85e4d3d846df91a6ba27a2e99c_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:3f7cbe7605595d712e14d9a17717fafc6c6e334f2ad3e821c34947ec78411046_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:96775900ea90e57487da6afe59d058b33cb977a0247a1bbeb1bd07bed2816398_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:caa6b121538e074312314d9888d9b423bd225aefa4f25eb145893b9fc548c0ad_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:e59c90cfe8160b28f9d2aa9e59b1d04d742df44d2195210ebc1946ee3cb78b6f_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:10c95e5c55ccc1a04e8d2ac28bd1afd3b9bb9a7e9e2a5e3e8efb301421539980_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:60a310d4464b4817845703d14e95729321b883fbfc79fbf2dd8d514bb3c675e9_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:70e6c14d72f14d25a90f44043932fbd3f824b30e8ad4b36307100726b24d9c06_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:784129cf69b3bf77a907fe909fd73a2a4d0fbd947fe0037e47aa1d62c6ffcf0b_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:26e58654cdd092cb812207cb4473f5f5988ebd708d95c34152c2e8c124f7297d_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:40e5d9634aa7469df8247758961d486cfac3e7d7f0b59184e11ed5571b46bf40_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:5b59faed336de07965755c893cb9d0ffc52ec90f61cc8c54487f6c0cac53322e_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:b59aea0c9e859025988b0f0c9b6e7748c4acf6d0b4cee35f3fabb7b84feb598b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:2368703206d833e4cb73b7e8750efb9997633a6f9accbf032426bcfcae4c00d9_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:80b543b207e724e880ff932c514fe9c6a3925bfede1c31863531e4e69d050d40_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:82405a9a5715db5442dfa3d3f594888bd7b2f9c778d68357a7d8884f5ea46915_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:8fd2bda7b8d94ededf7973f76a159dd61105776a05d961ac9cfd9bee0a988213_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:4def845360282dad99181b96bcd834b4863eab39e246fda2476234c561c652ec_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:b67aec868b6366cf04f3980b15588e1a0af5c88b2248958bc3884261ad390ca0_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:ceacf3491ebec6f5613011fe8d36b66d00f8b3697832615a4d7024e23125085e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:d9f6a520b818dcccbedb94720b5979ef1cdec2e02491c76e3decb3ee18f2085d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:3e6519c0c789b946eb1b811867c41c4f204440bad5734760c0aca4e3fc602e5a_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:95684cfaf4d5d91bc9fe8cfbf64a6f113e944e3f0c102d27851be5232eca0dbb_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:9cb20990af88287dd8a27de4e4ef12eb244577a1844482d26107359c6efe8efa_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:a69ebb0c7e817d44cfabd86ad13ef4cc94a8bf5b6e8a607d17b197603d64a224_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:0eea35a3af36d08db945a70c387cc38eb326f75b4ed322f09d8c91863cfe5d02_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:22c48db227cd6f2ecec746674e31ac7f5a983a418679fc91678a0aa0ebb49496_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:8e8d249c39d562f819d347f12610dda7f5c01215c41101bfd5dca008e04edf6e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:f8adb8dd40a204bacb51cd423803097a514ec8e8e9f52209e02ecf14cad622bb_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:03adc6277e2bf409391941c6f4508154abc38a0c043139978754f6d4fd32c5a8_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:7e100af30ed11325cb2cbee02af09306e53df5db5847f2a4b733cd307e3cd623_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:91b474b4808b18c279c9f8eb3be8e6d1e1e47cf2b5f9553acd901c74b20bddbc_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:d56f884a9700a4f193d6f3db1895bd54745ec77e02ead3d43bd6e4fe04a2969e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:1f7ed606f69a74943aedb0a956e5a71019f8a1ab53cd3f8166be0f55a69809b9_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:4841076eb82f1f1748345556ff6c4e02a17f1f63c661e375eaba720291cbaf6a_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:a79ac7dcae109aa526e2a218327dd8c5dba2b924fc27447a07199b3b2f2f67b3_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:dee022821852f2d5ebdbbd9f09c9b97997a905061dadb3f78433291d462d49a7_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:1a746b16f362a83f399255d925b322b3440b3d89ae4d64ab7962db3d82ee91a1_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:417a31bec11c3ffb70f40fa955069d5160dc12e2426b67e1d2e35ae3f7fa06df_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:89a3cb77fdb3dcbddfe96785a9ba3fa2b6132098fce028f859663b31fcf77a34_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:b1ba0b4cd8f515895af7b9f797f6ea5b661f7254ce019ce5115375639dcd06e9_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:0827c96b922ca185b7a7321a4f504e8a5dc01aadafcfd20443060546981339a8_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:b5b732dfc0ce3d740781eda9a72e1542c7a30b28b39d2be6e0ba470af06a9680_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:f74081e5eb03227ccff5717a7d139ceee6c5b610625ff7b99e639a2652bf7663_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:f80976ae4fc332600e1d8e1d70b42c038ea05d76ac2c5b1d7d0cbaddbe89140a_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:4029ece83812237ce8b1d394252e9561012e8cd94af40680a90284fbea1bc32a_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:63a3465a7539a8a286c846a84d63e3feca9a11758e4c0d697889b0bdeb26a25c_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:81c227d7c7599b0d4357ccdc3b567f31b67bbd1198c9e7ddba1864c299bad11b_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:f392bde8ce22aca058d77132cc709440442931679dbe725c52516f1cdc97b38d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:4825fab15300bc911e0b2b5c4ae342004bfcff95fa64af0fdb1085fadd132aa2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:68f879679911c2ca828551b900eca1c2f4e8caec7312fbba502fabc4778d1832_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:b4188ac728c746769ef6586663dd6d7d07db984b083397d2c76fe847ef22ea60_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:f2805fc1e6f37bc8acc3187ea8712d38f32151d584c10d5996c0ad7076cd638b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:1c943edcf23df14f254e4aabb93cbc1665bbc7902076b3f04bd80edd2fe324db_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:84c5d2b24caf68c3a6a6d078bd9f66de9fb88e769f6c09c11a248693d463ac21_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:907d6e24922d6d372bceb21ad830c254c6a9c9d6be0ac4f4edf22c236437a09d_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:923a3ee0e3d5b7341b96826e465e6856855f2801dbaf381d139a632c77bda1c5_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:285d2e2d103b458f0603435aedb4d779d85e48fed2267845b798f4a04a0df4c7_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:44981f5fcbc9086470143fae6e21a5de3baad2258d9f8c81accecb2faad6b2a2_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:5ba248d0bc8fcde70e210319bb962f4043e5e8ab8a5625c8f8f30ec96d47c6b7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:f681cdac28ee9ff6375fb39d7b7d12917a06043db44c16e8f84bdb9e09e7b5e7_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:2057531884d897574fc0648e5d3cf21c4549738ac5f35d8095f400cdb80049cc_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:8be0e50a132a2c974893f36b51f3f40b6d6e1f913ae0f9ee6319ef0d5ec455b7_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:a2edc5d233d1547fa2e1d01f29d8a914930735f7098289892430ba9a17d20ab7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:c81c7aeb3dd05801e279a9fcc8d6c3baf00a2ccc08eab53f8acc8bd4d2d129c4_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:25e17bf203568420587cf5907e84e4167afab84dfce549c91bea99e70290b742_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:277f4e8ac5fc292b9f0f2d123f924c6b5cbc0a2eeba3c87a0e61c5ee2399aaa9_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:76766b77ed53513cd254195b25d205ab6964522816e1e3662800e38a105abdf2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:c7ace45f7cb86055e2ba18e27a660f6aa6cb4eff497204294875d5dd1d63cce3_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:3780b1bc80ab7ebc3cfed06ce69346d589dc07b53cea65ad3ed92cc912284300_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:681b356709778083448892513b4559f693e002bfda897a57e2d065f736a902b5_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:d110b52ce8ea022b3d35e7c4b0ce3b646f30513cf8abb55327132565ea4a6a87_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:f076ab59f3abe061e4553a61f98a144a472297dba5ed924ca887f130e9372da9_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-45447"
},
{
"category": "external",
"summary": "RHBZ#2481898",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481898"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-45447",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-45447"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-45447",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45447"
}
],
"release_date": "2026-06-09T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T07:47:11+00:00",
"details": "Before you apply this update, make sure all previously released errata\nthat are relevant to your system are applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:2b796bf55ecf7a14d1c87d829a2b20d998fc2943686373105b0a50f5053ef836_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:7e960b59f64547f7e9602b7c066a51ab52aba929726aec2bacdf486a9d4d28fd_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:a43e430a2ec0b86fb6ade361677be298b4e27444388a9bca35ddafbf9c77277c_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:d2394b121256985e5ca322aea77bb0bf999ba2d7a6f1627e62bbc125c475dbbd_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:47737"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:31bd91156f49687d2efffd3be971d9ee0e16abb420b8e8b958caa88b97770020_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:a6315866c67ba350665f5a92f960a5a44e427ca37ae7505e2072af4e02c42f76_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:b3ad6fa1de658f3a40c8b183ab501ebc66b359d8cc01439d4215aa52769df213_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:bfde9ebea1fcd27b6d104d5f67db62e870878f9517ccbec2f649dd2c1af4a073_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:08fed161d59299881ff7a54db859feaf8ed7bdb8238d6cf12628ccb73575665e_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:09436fe2649ca384b1bc1fd8f736fb1d71392733310e66758ed9f289e00471f9_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:3b83670e1c0e9d1f5b76bd7b75d77072bc6208646bc2201bd0bd200dbc59e34a_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:927146f966e4c5c2908d29d8ab45a8f3071dbd5ebd9cf0424460a23f814a72a7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:38a3bc59511133cae56827eba879e7c82c5a974bf1f16b6e8d95e1f79821e669_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:3fa04db82e3ce6169270db0ce29107b69d8e044e0a1ab13a2bf1050b8c26d087_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:6041a918713d4464c73560b68c294a12d33f297a980d2f9d0e0cc8c300a96f24_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:98bd72ba69bdfb3070d87b3edcbd7050579a514b72cfd67c2926541ba52dbaf7_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:938abc970731c2eeda8e2b7b73e96d4dfcbf7587330c7b7e52117a577700e426_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:a0876a25ce85d7d4616212813f012422826f152b8d71065e75cd9c3e23034d8a_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:c77077a0cca835a503a6529c89ab19c4027f949d361afdf8a5a259e1e87b0d55_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:d5bbf3fe886f27cdc27363dcb175e004487d9c8f36de4f1f8516fbeda3a95224_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:0f5d8cae3ba4ea4fcdc5fb9d08f797d576bc225b92af66f193bd4b1324cda4b9_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:2d3588825f8a714fa59b1648d0934d064165e333f322f7f31f01f07b940d42d9_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:68aa571827f5331f1d5a3bd0c60ad441a18877ba11921aff2633940236bafcd4_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:9b80c9c61d4befefa7f6a65ae8c001ce7e343a1e4f251e5ebe025625d9511730_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:9b2c24401a91903f023096d2b641aa977acff423eb6770a8e4c4a81aecfd4e62_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:9d74585acc098c13f3e9dac5ae7f5ef337fa82bd7119d7f1849c5f8a50e84907_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:a6ee95d0ed82bddef084684d11fa770bd646d9be9bc65b3bc386d7c58b33975c_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:f7b8654eb8bf675c8c26f0ad395d790f990308d3ad6683bb61b484c92073bbac_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:2a598e7fd07db27100d9a53a328ac9a0535865883bddd1373f4f1f2705068d2f_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:4f8f0b02d0969753e156226a998d442746c238a2a50ea606a49ca0cf695b8925_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:63c02348faa7d4e26e35c69aef5453613dd607a26116823b931b89fe5311e181_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:ae224866f0085d2c00ab18a28d2aed076e455731903989a49a544abf49950d1f_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:0a90a13f006ef0b271079b728ef6d54081f36ae19b6d0e9ab4dc24ea52a30fad_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:3a53629645832974a883002e53198df7c28e59dd6d1df99bf321b52d0ef84b61_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:879315f438ca43abb607d6c97f8fbd4ca2d38209b142e2d97cc0598740273252_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:c6c4d01f5fcee6cad3fc870cace92f45000624760e6e93654bb5e814afeed7bb_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:50f7647620c78fd6b445379c8762f5e978113fe3552906376a24459263f27459_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:53e641f48ddc05c63da2e6bc24e9e4636a10de2c3599d8f5f78622bdebca07ca_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:57114b7a386c406715e342637558fab57afeef2e193517f99173a441f39401d5_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:dcdcaa90f292f2d7ad3f10acbedfab9f7f22f3432c3156055f34760d9bf9429c_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:3723b1d5c74f37cba219e203fd2026a718d4821595cb505ec6626684695da65b_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:562291f52b6bce98ec8795856b808545c4fe30047b54544c7f6c2ab4678480ff_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:e6dfac9bc3e467e141a425944782f5087ed967ac4d02d8d47442e3d61ba5b882_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:f683186c2cc8be9ec09b8efdec66d6b8b1f991c7f7b9fd398dc7c3f9ab8b3079_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:2471edd63a94473c68cf37ee50de643e40003f2c5bba84063c154e4888a7f0bd_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:7cef49d68df5d8efe52061a18920e07e6c7efa3016c0cea7d1747e67851f254a_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:d912383405599032acffbad22bc154f63a87dd429ba882fd7a94cb82fe650d8e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:f3034211e16de48af540efe4ee460395dba0a4a544fa4f277a12840a25df1730_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:181d1decb2f16fcf6f5938027ed346aca29126687bbe6cdcc601c25087f70d11_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:ab5e4d27e23448d99a37b8c05442bb1254083cdc4ff325e721d97d80ec27346c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:ac172243d158e126594f28317e0cfb37dc1790c9f2121e95fe52506b5e05fc91_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:fd96b6284d270effa0f838d960ea4218b72b54c4718513eb523658f2f4972682_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:c59d9cd479c62730eda5d482fb2f4e9fbc17a90a5a2861b130aafe1f3a27a333_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:e547f672b14b6e8fc2ffd300b150aedbd3f6b6b36ddcad612f7c992a936a7c82_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:ead1263d538974c48790c65e44cd9cab07a62c2893b2eeb250174e7cf58d7f9d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:ed0457a57c7b39b79fb308176f45ffe678938b25fbb8c15de2cedbe54b916f64_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:9847a5752ec77e17861dcdac5546ee5c53679c80c3569609b21d9080ee3b7ef3_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:d3c823e61a0682ddc85e576e86234e580992886de471035630f9c89bbad6ebb7_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:ded425ed0af88a1411a06e5191aee25c4c59f1de85b041eba95c9997686cf09e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:ee63f59942f9df04e95fc4266f0d194cd62a7ca08dd5478283884d0ab6003da7_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:724377cabaa284a5197e7505a7150c89631c2f2bcc629e074c7c0be18abd8e6f_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:cbf797c9e93413540b20ebee9191375ddd8185ef22dc8c9e23cc3a4c015abaf7_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:d7609d62a801cf07ef639abcd4f193b2d68967fadebbfddf2349003d7e9eaa44_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:f61fe90362f793225591eb7e2a86d5cdc6fb35aa087e9b6a6218a42b1c1d945d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:1c4de9460688800b62bad6fb13653ef4b52bf215e4d41674291193e9b8e71b24_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:4f1e59610b2fbedc56f425b3fbd8f16c9ea6ea96025f18a404fe48f6a49bdc1e_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:ab0d28306dd6daa03af79bdc2ea650e59a50a03317987c4cdd0d1ee70f95b597_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:b700a8bb7ea6e4253afb8bcf94e5ad086349980ca0716a87817724d3da3fdce1_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4015f46d2172db26a348635e2e8cbd4bbcdbbaa56a4b12c232676a3d0f5bbee2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4169252c61ec70b91b10c750d5f9ecd53f5c3c906766bba9103afbac3c3f9edf_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4ab72a192553c21de76754f06fe38cf443e686e4b4edc2aa2ceb2b6b9d95bb6c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:579ef0925c6f56ed48f22121767189431bef6c4eaa72b2648a1b91488357a51d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:2b796bf55ecf7a14d1c87d829a2b20d998fc2943686373105b0a50f5053ef836_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:7e960b59f64547f7e9602b7c066a51ab52aba929726aec2bacdf486a9d4d28fd_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:a43e430a2ec0b86fb6ade361677be298b4e27444388a9bca35ddafbf9c77277c_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:d2394b121256985e5ca322aea77bb0bf999ba2d7a6f1627e62bbc125c475dbbd_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:1868e2ea03d063b4cd64601cb0aaf5c9ea7f55e83eba2e2d4dcf6f830efeafc7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:4bfbf0bdc882979bc94d85a4aeff8caa0ec7887aec7412e32ae1442811325d06_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:844e3d69d3c26914e02612466021592a876e6e2dd6cf77084723a70f567ba0e2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:bbe04eb8fd197f15875f498e3c18b9a7a445380efb5f696422d79df99a34a881_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:2c9f9b47c01c5e5e017c583c6a09c5c52f40ef88acf789689265cb31ef328fb8_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:7b5e883efde312c1571c4825b523ff04ab57af6a9f4162a36b80b973f9602c46_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:d896dd89fb924da246fc729041d9debc019d8a4210cfd3de8883834e429cca10_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:ede3e22d4e4de49789622149dec23beaa7e0569a3715ac2262929df543e05bc3_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:273a393b8c62fbc4edb4bf4033c47d8b52bda56fc9cafa289d9513210840815b_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:71f1b590785ce7f4577ecd687dbab9bc3c5931c568a3108eb84279c7aa892046_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:d1e1b4310eb64891c9456be7c34547bf36b0aafdeb471a49f0892d7eaf8f41f4_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:e0a7514406c7ffae080db6d4db3bbf7b77a606ea4632bf09f8301ce1d3739bb5_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:2a4c6c061d154ed9c74707a7a2e2390fde2a150f36197386c3e49c0612d345b2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:6ffcc051c955e198c6d96b59bda0ef26b5124ebbdef5357d36a84534f2c7097c_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:c9258bf58373f9c6859789c8ec272cd7d702c37e063fc2ee53c66d296e7ee3d0_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:d83c6bb4f2a91d2c4de3ffbf4aa8ceecb695f8491ba7586d55275c62cd1931e6_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:67637c5cba3eca1597885823c6e44c13db445d0ef38751eb8364b69dbf07caac_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:68fb5c2a3c8a0d5e6bbcf2c5568969f6b13e72006d4d54bc5c57cd9a032d1bf6_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:9f5fa40c88b0f5d1ae3634632240817a91f4575f8eae9c005b8e35a55cf38003_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:fcbcee9fc7e0bbf5775a33ae9b7e3d7e48a90e2aa1cb85605e05612b6e4d4e30_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:0c165bb93ce933c7f9998a615908bfcca0b4eb38e32e24a1c823e63791b7604b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:42aa392f82bdc45a3b857d1ed44e224ddfd14db1e3dcbb74dcc850ac0540e964_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:9dcd0c0ecf1523bf05bd296edbecd85841b2753dee7a5c9df32437f9a8e31471_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:c5505c462e6b2c04a6e14bc1e22dfc42dc8adea8f6eaf0615cd58b1973b7d62e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:1a93df314c31f10da7b1345fab07b15b846e28865764178e34124f84dc967152_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:34343f81973c3fbdd8630c32d0fad597745ea10f960ea64236408e58e0f10e14_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:7b3635784ebfb6343a73c9fa6de7bea57b3aacce1c49a0f7f250a471f7b897e3_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:f0a7fade2853193429bab16922b2e3bbe426e14632423d6550ff7dfb66d42827_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:94950d339fa382d6911f12fc23dcaf2cdb2854c4cab654f6058f5bf0df1bb371_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:bcfbd2284cbeeba5a835aaf5a5590ddd8156bd881ca24fd0fe1465fade1f84c2_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:bd739ced163053224e5b0ea2f3cd577481c6b6c1162cc0fbc186f1716b4a1fbd_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:d40496f114898985cde3860b9664c34d8c32de85e4d3d846df91a6ba27a2e99c_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:3f7cbe7605595d712e14d9a17717fafc6c6e334f2ad3e821c34947ec78411046_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:96775900ea90e57487da6afe59d058b33cb977a0247a1bbeb1bd07bed2816398_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:caa6b121538e074312314d9888d9b423bd225aefa4f25eb145893b9fc548c0ad_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:e59c90cfe8160b28f9d2aa9e59b1d04d742df44d2195210ebc1946ee3cb78b6f_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:10c95e5c55ccc1a04e8d2ac28bd1afd3b9bb9a7e9e2a5e3e8efb301421539980_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:60a310d4464b4817845703d14e95729321b883fbfc79fbf2dd8d514bb3c675e9_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:70e6c14d72f14d25a90f44043932fbd3f824b30e8ad4b36307100726b24d9c06_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:784129cf69b3bf77a907fe909fd73a2a4d0fbd947fe0037e47aa1d62c6ffcf0b_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:26e58654cdd092cb812207cb4473f5f5988ebd708d95c34152c2e8c124f7297d_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:40e5d9634aa7469df8247758961d486cfac3e7d7f0b59184e11ed5571b46bf40_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:5b59faed336de07965755c893cb9d0ffc52ec90f61cc8c54487f6c0cac53322e_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:b59aea0c9e859025988b0f0c9b6e7748c4acf6d0b4cee35f3fabb7b84feb598b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:2368703206d833e4cb73b7e8750efb9997633a6f9accbf032426bcfcae4c00d9_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:80b543b207e724e880ff932c514fe9c6a3925bfede1c31863531e4e69d050d40_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:82405a9a5715db5442dfa3d3f594888bd7b2f9c778d68357a7d8884f5ea46915_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:8fd2bda7b8d94ededf7973f76a159dd61105776a05d961ac9cfd9bee0a988213_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:4def845360282dad99181b96bcd834b4863eab39e246fda2476234c561c652ec_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:b67aec868b6366cf04f3980b15588e1a0af5c88b2248958bc3884261ad390ca0_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:ceacf3491ebec6f5613011fe8d36b66d00f8b3697832615a4d7024e23125085e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:d9f6a520b818dcccbedb94720b5979ef1cdec2e02491c76e3decb3ee18f2085d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:3e6519c0c789b946eb1b811867c41c4f204440bad5734760c0aca4e3fc602e5a_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:95684cfaf4d5d91bc9fe8cfbf64a6f113e944e3f0c102d27851be5232eca0dbb_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:9cb20990af88287dd8a27de4e4ef12eb244577a1844482d26107359c6efe8efa_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:a69ebb0c7e817d44cfabd86ad13ef4cc94a8bf5b6e8a607d17b197603d64a224_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:0eea35a3af36d08db945a70c387cc38eb326f75b4ed322f09d8c91863cfe5d02_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:22c48db227cd6f2ecec746674e31ac7f5a983a418679fc91678a0aa0ebb49496_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:8e8d249c39d562f819d347f12610dda7f5c01215c41101bfd5dca008e04edf6e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:f8adb8dd40a204bacb51cd423803097a514ec8e8e9f52209e02ecf14cad622bb_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:03adc6277e2bf409391941c6f4508154abc38a0c043139978754f6d4fd32c5a8_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:7e100af30ed11325cb2cbee02af09306e53df5db5847f2a4b733cd307e3cd623_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:91b474b4808b18c279c9f8eb3be8e6d1e1e47cf2b5f9553acd901c74b20bddbc_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:d56f884a9700a4f193d6f3db1895bd54745ec77e02ead3d43bd6e4fe04a2969e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:1f7ed606f69a74943aedb0a956e5a71019f8a1ab53cd3f8166be0f55a69809b9_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:4841076eb82f1f1748345556ff6c4e02a17f1f63c661e375eaba720291cbaf6a_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:a79ac7dcae109aa526e2a218327dd8c5dba2b924fc27447a07199b3b2f2f67b3_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:dee022821852f2d5ebdbbd9f09c9b97997a905061dadb3f78433291d462d49a7_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:1a746b16f362a83f399255d925b322b3440b3d89ae4d64ab7962db3d82ee91a1_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:417a31bec11c3ffb70f40fa955069d5160dc12e2426b67e1d2e35ae3f7fa06df_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:89a3cb77fdb3dcbddfe96785a9ba3fa2b6132098fce028f859663b31fcf77a34_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:b1ba0b4cd8f515895af7b9f797f6ea5b661f7254ce019ce5115375639dcd06e9_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:0827c96b922ca185b7a7321a4f504e8a5dc01aadafcfd20443060546981339a8_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:b5b732dfc0ce3d740781eda9a72e1542c7a30b28b39d2be6e0ba470af06a9680_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:f74081e5eb03227ccff5717a7d139ceee6c5b610625ff7b99e639a2652bf7663_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:f80976ae4fc332600e1d8e1d70b42c038ea05d76ac2c5b1d7d0cbaddbe89140a_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:4029ece83812237ce8b1d394252e9561012e8cd94af40680a90284fbea1bc32a_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:63a3465a7539a8a286c846a84d63e3feca9a11758e4c0d697889b0bdeb26a25c_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:81c227d7c7599b0d4357ccdc3b567f31b67bbd1198c9e7ddba1864c299bad11b_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:f392bde8ce22aca058d77132cc709440442931679dbe725c52516f1cdc97b38d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:4825fab15300bc911e0b2b5c4ae342004bfcff95fa64af0fdb1085fadd132aa2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:68f879679911c2ca828551b900eca1c2f4e8caec7312fbba502fabc4778d1832_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:b4188ac728c746769ef6586663dd6d7d07db984b083397d2c76fe847ef22ea60_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:f2805fc1e6f37bc8acc3187ea8712d38f32151d584c10d5996c0ad7076cd638b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:1c943edcf23df14f254e4aabb93cbc1665bbc7902076b3f04bd80edd2fe324db_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:84c5d2b24caf68c3a6a6d078bd9f66de9fb88e769f6c09c11a248693d463ac21_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:907d6e24922d6d372bceb21ad830c254c6a9c9d6be0ac4f4edf22c236437a09d_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:923a3ee0e3d5b7341b96826e465e6856855f2801dbaf381d139a632c77bda1c5_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:285d2e2d103b458f0603435aedb4d779d85e48fed2267845b798f4a04a0df4c7_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:44981f5fcbc9086470143fae6e21a5de3baad2258d9f8c81accecb2faad6b2a2_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:5ba248d0bc8fcde70e210319bb962f4043e5e8ab8a5625c8f8f30ec96d47c6b7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:f681cdac28ee9ff6375fb39d7b7d12917a06043db44c16e8f84bdb9e09e7b5e7_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:2057531884d897574fc0648e5d3cf21c4549738ac5f35d8095f400cdb80049cc_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:8be0e50a132a2c974893f36b51f3f40b6d6e1f913ae0f9ee6319ef0d5ec455b7_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:a2edc5d233d1547fa2e1d01f29d8a914930735f7098289892430ba9a17d20ab7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:c81c7aeb3dd05801e279a9fcc8d6c3baf00a2ccc08eab53f8acc8bd4d2d129c4_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:25e17bf203568420587cf5907e84e4167afab84dfce549c91bea99e70290b742_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:277f4e8ac5fc292b9f0f2d123f924c6b5cbc0a2eeba3c87a0e61c5ee2399aaa9_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:76766b77ed53513cd254195b25d205ab6964522816e1e3662800e38a105abdf2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:c7ace45f7cb86055e2ba18e27a660f6aa6cb4eff497204294875d5dd1d63cce3_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:3780b1bc80ab7ebc3cfed06ce69346d589dc07b53cea65ad3ed92cc912284300_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:681b356709778083448892513b4559f693e002bfda897a57e2d065f736a902b5_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:d110b52ce8ea022b3d35e7c4b0ce3b646f30513cf8abb55327132565ea4a6a87_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:f076ab59f3abe061e4553a61f98a144a472297dba5ed924ca887f130e9372da9_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:31bd91156f49687d2efffd3be971d9ee0e16abb420b8e8b958caa88b97770020_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:a6315866c67ba350665f5a92f960a5a44e427ca37ae7505e2072af4e02c42f76_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:b3ad6fa1de658f3a40c8b183ab501ebc66b359d8cc01439d4215aa52769df213_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:bfde9ebea1fcd27b6d104d5f67db62e870878f9517ccbec2f649dd2c1af4a073_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:08fed161d59299881ff7a54db859feaf8ed7bdb8238d6cf12628ccb73575665e_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:09436fe2649ca384b1bc1fd8f736fb1d71392733310e66758ed9f289e00471f9_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:3b83670e1c0e9d1f5b76bd7b75d77072bc6208646bc2201bd0bd200dbc59e34a_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:927146f966e4c5c2908d29d8ab45a8f3071dbd5ebd9cf0424460a23f814a72a7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:38a3bc59511133cae56827eba879e7c82c5a974bf1f16b6e8d95e1f79821e669_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:3fa04db82e3ce6169270db0ce29107b69d8e044e0a1ab13a2bf1050b8c26d087_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:6041a918713d4464c73560b68c294a12d33f297a980d2f9d0e0cc8c300a96f24_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:98bd72ba69bdfb3070d87b3edcbd7050579a514b72cfd67c2926541ba52dbaf7_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:938abc970731c2eeda8e2b7b73e96d4dfcbf7587330c7b7e52117a577700e426_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:a0876a25ce85d7d4616212813f012422826f152b8d71065e75cd9c3e23034d8a_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:c77077a0cca835a503a6529c89ab19c4027f949d361afdf8a5a259e1e87b0d55_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:d5bbf3fe886f27cdc27363dcb175e004487d9c8f36de4f1f8516fbeda3a95224_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:0f5d8cae3ba4ea4fcdc5fb9d08f797d576bc225b92af66f193bd4b1324cda4b9_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:2d3588825f8a714fa59b1648d0934d064165e333f322f7f31f01f07b940d42d9_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:68aa571827f5331f1d5a3bd0c60ad441a18877ba11921aff2633940236bafcd4_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:9b80c9c61d4befefa7f6a65ae8c001ce7e343a1e4f251e5ebe025625d9511730_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:9b2c24401a91903f023096d2b641aa977acff423eb6770a8e4c4a81aecfd4e62_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:9d74585acc098c13f3e9dac5ae7f5ef337fa82bd7119d7f1849c5f8a50e84907_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:a6ee95d0ed82bddef084684d11fa770bd646d9be9bc65b3bc386d7c58b33975c_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:f7b8654eb8bf675c8c26f0ad395d790f990308d3ad6683bb61b484c92073bbac_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:2a598e7fd07db27100d9a53a328ac9a0535865883bddd1373f4f1f2705068d2f_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:4f8f0b02d0969753e156226a998d442746c238a2a50ea606a49ca0cf695b8925_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:63c02348faa7d4e26e35c69aef5453613dd607a26116823b931b89fe5311e181_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:ae224866f0085d2c00ab18a28d2aed076e455731903989a49a544abf49950d1f_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:0a90a13f006ef0b271079b728ef6d54081f36ae19b6d0e9ab4dc24ea52a30fad_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:3a53629645832974a883002e53198df7c28e59dd6d1df99bf321b52d0ef84b61_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:879315f438ca43abb607d6c97f8fbd4ca2d38209b142e2d97cc0598740273252_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:c6c4d01f5fcee6cad3fc870cace92f45000624760e6e93654bb5e814afeed7bb_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:50f7647620c78fd6b445379c8762f5e978113fe3552906376a24459263f27459_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:53e641f48ddc05c63da2e6bc24e9e4636a10de2c3599d8f5f78622bdebca07ca_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:57114b7a386c406715e342637558fab57afeef2e193517f99173a441f39401d5_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:dcdcaa90f292f2d7ad3f10acbedfab9f7f22f3432c3156055f34760d9bf9429c_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:3723b1d5c74f37cba219e203fd2026a718d4821595cb505ec6626684695da65b_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:562291f52b6bce98ec8795856b808545c4fe30047b54544c7f6c2ab4678480ff_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:e6dfac9bc3e467e141a425944782f5087ed967ac4d02d8d47442e3d61ba5b882_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:f683186c2cc8be9ec09b8efdec66d6b8b1f991c7f7b9fd398dc7c3f9ab8b3079_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:2471edd63a94473c68cf37ee50de643e40003f2c5bba84063c154e4888a7f0bd_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:7cef49d68df5d8efe52061a18920e07e6c7efa3016c0cea7d1747e67851f254a_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:d912383405599032acffbad22bc154f63a87dd429ba882fd7a94cb82fe650d8e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:f3034211e16de48af540efe4ee460395dba0a4a544fa4f277a12840a25df1730_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:181d1decb2f16fcf6f5938027ed346aca29126687bbe6cdcc601c25087f70d11_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:ab5e4d27e23448d99a37b8c05442bb1254083cdc4ff325e721d97d80ec27346c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:ac172243d158e126594f28317e0cfb37dc1790c9f2121e95fe52506b5e05fc91_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:fd96b6284d270effa0f838d960ea4218b72b54c4718513eb523658f2f4972682_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:c59d9cd479c62730eda5d482fb2f4e9fbc17a90a5a2861b130aafe1f3a27a333_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:e547f672b14b6e8fc2ffd300b150aedbd3f6b6b36ddcad612f7c992a936a7c82_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:ead1263d538974c48790c65e44cd9cab07a62c2893b2eeb250174e7cf58d7f9d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:ed0457a57c7b39b79fb308176f45ffe678938b25fbb8c15de2cedbe54b916f64_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:9847a5752ec77e17861dcdac5546ee5c53679c80c3569609b21d9080ee3b7ef3_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:d3c823e61a0682ddc85e576e86234e580992886de471035630f9c89bbad6ebb7_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:ded425ed0af88a1411a06e5191aee25c4c59f1de85b041eba95c9997686cf09e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:ee63f59942f9df04e95fc4266f0d194cd62a7ca08dd5478283884d0ab6003da7_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:724377cabaa284a5197e7505a7150c89631c2f2bcc629e074c7c0be18abd8e6f_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:cbf797c9e93413540b20ebee9191375ddd8185ef22dc8c9e23cc3a4c015abaf7_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:d7609d62a801cf07ef639abcd4f193b2d68967fadebbfddf2349003d7e9eaa44_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:f61fe90362f793225591eb7e2a86d5cdc6fb35aa087e9b6a6218a42b1c1d945d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:1c4de9460688800b62bad6fb13653ef4b52bf215e4d41674291193e9b8e71b24_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:4f1e59610b2fbedc56f425b3fbd8f16c9ea6ea96025f18a404fe48f6a49bdc1e_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:ab0d28306dd6daa03af79bdc2ea650e59a50a03317987c4cdd0d1ee70f95b597_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:b700a8bb7ea6e4253afb8bcf94e5ad086349980ca0716a87817724d3da3fdce1_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4015f46d2172db26a348635e2e8cbd4bbcdbbaa56a4b12c232676a3d0f5bbee2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4169252c61ec70b91b10c750d5f9ecd53f5c3c906766bba9103afbac3c3f9edf_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4ab72a192553c21de76754f06fe38cf443e686e4b4edc2aa2ceb2b6b9d95bb6c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:579ef0925c6f56ed48f22121767189431bef6c4eaa72b2648a1b91488357a51d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:2b796bf55ecf7a14d1c87d829a2b20d998fc2943686373105b0a50f5053ef836_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:7e960b59f64547f7e9602b7c066a51ab52aba929726aec2bacdf486a9d4d28fd_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:a43e430a2ec0b86fb6ade361677be298b4e27444388a9bca35ddafbf9c77277c_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:d2394b121256985e5ca322aea77bb0bf999ba2d7a6f1627e62bbc125c475dbbd_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:1868e2ea03d063b4cd64601cb0aaf5c9ea7f55e83eba2e2d4dcf6f830efeafc7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:4bfbf0bdc882979bc94d85a4aeff8caa0ec7887aec7412e32ae1442811325d06_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:844e3d69d3c26914e02612466021592a876e6e2dd6cf77084723a70f567ba0e2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:bbe04eb8fd197f15875f498e3c18b9a7a445380efb5f696422d79df99a34a881_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:2c9f9b47c01c5e5e017c583c6a09c5c52f40ef88acf789689265cb31ef328fb8_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:7b5e883efde312c1571c4825b523ff04ab57af6a9f4162a36b80b973f9602c46_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:d896dd89fb924da246fc729041d9debc019d8a4210cfd3de8883834e429cca10_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:ede3e22d4e4de49789622149dec23beaa7e0569a3715ac2262929df543e05bc3_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:273a393b8c62fbc4edb4bf4033c47d8b52bda56fc9cafa289d9513210840815b_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:71f1b590785ce7f4577ecd687dbab9bc3c5931c568a3108eb84279c7aa892046_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:d1e1b4310eb64891c9456be7c34547bf36b0aafdeb471a49f0892d7eaf8f41f4_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:e0a7514406c7ffae080db6d4db3bbf7b77a606ea4632bf09f8301ce1d3739bb5_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:2a4c6c061d154ed9c74707a7a2e2390fde2a150f36197386c3e49c0612d345b2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:6ffcc051c955e198c6d96b59bda0ef26b5124ebbdef5357d36a84534f2c7097c_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:c9258bf58373f9c6859789c8ec272cd7d702c37e063fc2ee53c66d296e7ee3d0_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:d83c6bb4f2a91d2c4de3ffbf4aa8ceecb695f8491ba7586d55275c62cd1931e6_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:67637c5cba3eca1597885823c6e44c13db445d0ef38751eb8364b69dbf07caac_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:68fb5c2a3c8a0d5e6bbcf2c5568969f6b13e72006d4d54bc5c57cd9a032d1bf6_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:9f5fa40c88b0f5d1ae3634632240817a91f4575f8eae9c005b8e35a55cf38003_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:fcbcee9fc7e0bbf5775a33ae9b7e3d7e48a90e2aa1cb85605e05612b6e4d4e30_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:0c165bb93ce933c7f9998a615908bfcca0b4eb38e32e24a1c823e63791b7604b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:42aa392f82bdc45a3b857d1ed44e224ddfd14db1e3dcbb74dcc850ac0540e964_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:9dcd0c0ecf1523bf05bd296edbecd85841b2753dee7a5c9df32437f9a8e31471_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:c5505c462e6b2c04a6e14bc1e22dfc42dc8adea8f6eaf0615cd58b1973b7d62e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:1a93df314c31f10da7b1345fab07b15b846e28865764178e34124f84dc967152_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:34343f81973c3fbdd8630c32d0fad597745ea10f960ea64236408e58e0f10e14_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:7b3635784ebfb6343a73c9fa6de7bea57b3aacce1c49a0f7f250a471f7b897e3_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:f0a7fade2853193429bab16922b2e3bbe426e14632423d6550ff7dfb66d42827_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:94950d339fa382d6911f12fc23dcaf2cdb2854c4cab654f6058f5bf0df1bb371_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:bcfbd2284cbeeba5a835aaf5a5590ddd8156bd881ca24fd0fe1465fade1f84c2_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:bd739ced163053224e5b0ea2f3cd577481c6b6c1162cc0fbc186f1716b4a1fbd_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:d40496f114898985cde3860b9664c34d8c32de85e4d3d846df91a6ba27a2e99c_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:3f7cbe7605595d712e14d9a17717fafc6c6e334f2ad3e821c34947ec78411046_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:96775900ea90e57487da6afe59d058b33cb977a0247a1bbeb1bd07bed2816398_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:caa6b121538e074312314d9888d9b423bd225aefa4f25eb145893b9fc548c0ad_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:e59c90cfe8160b28f9d2aa9e59b1d04d742df44d2195210ebc1946ee3cb78b6f_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:10c95e5c55ccc1a04e8d2ac28bd1afd3b9bb9a7e9e2a5e3e8efb301421539980_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:60a310d4464b4817845703d14e95729321b883fbfc79fbf2dd8d514bb3c675e9_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:70e6c14d72f14d25a90f44043932fbd3f824b30e8ad4b36307100726b24d9c06_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:784129cf69b3bf77a907fe909fd73a2a4d0fbd947fe0037e47aa1d62c6ffcf0b_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:26e58654cdd092cb812207cb4473f5f5988ebd708d95c34152c2e8c124f7297d_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:40e5d9634aa7469df8247758961d486cfac3e7d7f0b59184e11ed5571b46bf40_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:5b59faed336de07965755c893cb9d0ffc52ec90f61cc8c54487f6c0cac53322e_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:b59aea0c9e859025988b0f0c9b6e7748c4acf6d0b4cee35f3fabb7b84feb598b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:2368703206d833e4cb73b7e8750efb9997633a6f9accbf032426bcfcae4c00d9_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:80b543b207e724e880ff932c514fe9c6a3925bfede1c31863531e4e69d050d40_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:82405a9a5715db5442dfa3d3f594888bd7b2f9c778d68357a7d8884f5ea46915_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:8fd2bda7b8d94ededf7973f76a159dd61105776a05d961ac9cfd9bee0a988213_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:4def845360282dad99181b96bcd834b4863eab39e246fda2476234c561c652ec_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:b67aec868b6366cf04f3980b15588e1a0af5c88b2248958bc3884261ad390ca0_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:ceacf3491ebec6f5613011fe8d36b66d00f8b3697832615a4d7024e23125085e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:d9f6a520b818dcccbedb94720b5979ef1cdec2e02491c76e3decb3ee18f2085d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:3e6519c0c789b946eb1b811867c41c4f204440bad5734760c0aca4e3fc602e5a_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:95684cfaf4d5d91bc9fe8cfbf64a6f113e944e3f0c102d27851be5232eca0dbb_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:9cb20990af88287dd8a27de4e4ef12eb244577a1844482d26107359c6efe8efa_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:a69ebb0c7e817d44cfabd86ad13ef4cc94a8bf5b6e8a607d17b197603d64a224_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:0eea35a3af36d08db945a70c387cc38eb326f75b4ed322f09d8c91863cfe5d02_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:22c48db227cd6f2ecec746674e31ac7f5a983a418679fc91678a0aa0ebb49496_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:8e8d249c39d562f819d347f12610dda7f5c01215c41101bfd5dca008e04edf6e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:f8adb8dd40a204bacb51cd423803097a514ec8e8e9f52209e02ecf14cad622bb_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:03adc6277e2bf409391941c6f4508154abc38a0c043139978754f6d4fd32c5a8_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:7e100af30ed11325cb2cbee02af09306e53df5db5847f2a4b733cd307e3cd623_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:91b474b4808b18c279c9f8eb3be8e6d1e1e47cf2b5f9553acd901c74b20bddbc_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:d56f884a9700a4f193d6f3db1895bd54745ec77e02ead3d43bd6e4fe04a2969e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:1f7ed606f69a74943aedb0a956e5a71019f8a1ab53cd3f8166be0f55a69809b9_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:4841076eb82f1f1748345556ff6c4e02a17f1f63c661e375eaba720291cbaf6a_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:a79ac7dcae109aa526e2a218327dd8c5dba2b924fc27447a07199b3b2f2f67b3_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:dee022821852f2d5ebdbbd9f09c9b97997a905061dadb3f78433291d462d49a7_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:1a746b16f362a83f399255d925b322b3440b3d89ae4d64ab7962db3d82ee91a1_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:417a31bec11c3ffb70f40fa955069d5160dc12e2426b67e1d2e35ae3f7fa06df_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:89a3cb77fdb3dcbddfe96785a9ba3fa2b6132098fce028f859663b31fcf77a34_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:b1ba0b4cd8f515895af7b9f797f6ea5b661f7254ce019ce5115375639dcd06e9_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:0827c96b922ca185b7a7321a4f504e8a5dc01aadafcfd20443060546981339a8_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:b5b732dfc0ce3d740781eda9a72e1542c7a30b28b39d2be6e0ba470af06a9680_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:f74081e5eb03227ccff5717a7d139ceee6c5b610625ff7b99e639a2652bf7663_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:f80976ae4fc332600e1d8e1d70b42c038ea05d76ac2c5b1d7d0cbaddbe89140a_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:4029ece83812237ce8b1d394252e9561012e8cd94af40680a90284fbea1bc32a_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:63a3465a7539a8a286c846a84d63e3feca9a11758e4c0d697889b0bdeb26a25c_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:81c227d7c7599b0d4357ccdc3b567f31b67bbd1198c9e7ddba1864c299bad11b_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:f392bde8ce22aca058d77132cc709440442931679dbe725c52516f1cdc97b38d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:4825fab15300bc911e0b2b5c4ae342004bfcff95fa64af0fdb1085fadd132aa2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:68f879679911c2ca828551b900eca1c2f4e8caec7312fbba502fabc4778d1832_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:b4188ac728c746769ef6586663dd6d7d07db984b083397d2c76fe847ef22ea60_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:f2805fc1e6f37bc8acc3187ea8712d38f32151d584c10d5996c0ad7076cd638b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:1c943edcf23df14f254e4aabb93cbc1665bbc7902076b3f04bd80edd2fe324db_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:84c5d2b24caf68c3a6a6d078bd9f66de9fb88e769f6c09c11a248693d463ac21_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:907d6e24922d6d372bceb21ad830c254c6a9c9d6be0ac4f4edf22c236437a09d_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:923a3ee0e3d5b7341b96826e465e6856855f2801dbaf381d139a632c77bda1c5_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:285d2e2d103b458f0603435aedb4d779d85e48fed2267845b798f4a04a0df4c7_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:44981f5fcbc9086470143fae6e21a5de3baad2258d9f8c81accecb2faad6b2a2_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:5ba248d0bc8fcde70e210319bb962f4043e5e8ab8a5625c8f8f30ec96d47c6b7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:f681cdac28ee9ff6375fb39d7b7d12917a06043db44c16e8f84bdb9e09e7b5e7_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:2057531884d897574fc0648e5d3cf21c4549738ac5f35d8095f400cdb80049cc_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:8be0e50a132a2c974893f36b51f3f40b6d6e1f913ae0f9ee6319ef0d5ec455b7_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:a2edc5d233d1547fa2e1d01f29d8a914930735f7098289892430ba9a17d20ab7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:c81c7aeb3dd05801e279a9fcc8d6c3baf00a2ccc08eab53f8acc8bd4d2d129c4_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:25e17bf203568420587cf5907e84e4167afab84dfce549c91bea99e70290b742_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:277f4e8ac5fc292b9f0f2d123f924c6b5cbc0a2eeba3c87a0e61c5ee2399aaa9_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:76766b77ed53513cd254195b25d205ab6964522816e1e3662800e38a105abdf2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:c7ace45f7cb86055e2ba18e27a660f6aa6cb4eff497204294875d5dd1d63cce3_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:3780b1bc80ab7ebc3cfed06ce69346d589dc07b53cea65ad3ed92cc912284300_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:681b356709778083448892513b4559f693e002bfda897a57e2d065f736a902b5_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:d110b52ce8ea022b3d35e7c4b0ce3b646f30513cf8abb55327132565ea4a6a87_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:f076ab59f3abe061e4553a61f98a144a472297dba5ed924ca887f130e9372da9_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "openssl: Heap Use-After-Free in OpenSSL PKCS7_verify()"
},
{
"cve": "CVE-2026-46595",
"cwe": {
"id": "CWE-303",
"name": "Incorrect Implementation of Authentication Algorithm"
},
"discovery_date": "2026-05-22T04:01:52.215134+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:31bd91156f49687d2efffd3be971d9ee0e16abb420b8e8b958caa88b97770020_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:a6315866c67ba350665f5a92f960a5a44e427ca37ae7505e2072af4e02c42f76_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:b3ad6fa1de658f3a40c8b183ab501ebc66b359d8cc01439d4215aa52769df213_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:bfde9ebea1fcd27b6d104d5f67db62e870878f9517ccbec2f649dd2c1af4a073_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:08fed161d59299881ff7a54db859feaf8ed7bdb8238d6cf12628ccb73575665e_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:09436fe2649ca384b1bc1fd8f736fb1d71392733310e66758ed9f289e00471f9_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:3b83670e1c0e9d1f5b76bd7b75d77072bc6208646bc2201bd0bd200dbc59e34a_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:927146f966e4c5c2908d29d8ab45a8f3071dbd5ebd9cf0424460a23f814a72a7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:38a3bc59511133cae56827eba879e7c82c5a974bf1f16b6e8d95e1f79821e669_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:3fa04db82e3ce6169270db0ce29107b69d8e044e0a1ab13a2bf1050b8c26d087_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:6041a918713d4464c73560b68c294a12d33f297a980d2f9d0e0cc8c300a96f24_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:98bd72ba69bdfb3070d87b3edcbd7050579a514b72cfd67c2926541ba52dbaf7_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:938abc970731c2eeda8e2b7b73e96d4dfcbf7587330c7b7e52117a577700e426_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:a0876a25ce85d7d4616212813f012422826f152b8d71065e75cd9c3e23034d8a_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:c77077a0cca835a503a6529c89ab19c4027f949d361afdf8a5a259e1e87b0d55_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:d5bbf3fe886f27cdc27363dcb175e004487d9c8f36de4f1f8516fbeda3a95224_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:0f5d8cae3ba4ea4fcdc5fb9d08f797d576bc225b92af66f193bd4b1324cda4b9_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:2d3588825f8a714fa59b1648d0934d064165e333f322f7f31f01f07b940d42d9_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:68aa571827f5331f1d5a3bd0c60ad441a18877ba11921aff2633940236bafcd4_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:9b80c9c61d4befefa7f6a65ae8c001ce7e343a1e4f251e5ebe025625d9511730_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:9b2c24401a91903f023096d2b641aa977acff423eb6770a8e4c4a81aecfd4e62_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:9d74585acc098c13f3e9dac5ae7f5ef337fa82bd7119d7f1849c5f8a50e84907_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:a6ee95d0ed82bddef084684d11fa770bd646d9be9bc65b3bc386d7c58b33975c_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:f7b8654eb8bf675c8c26f0ad395d790f990308d3ad6683bb61b484c92073bbac_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:2a598e7fd07db27100d9a53a328ac9a0535865883bddd1373f4f1f2705068d2f_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:4f8f0b02d0969753e156226a998d442746c238a2a50ea606a49ca0cf695b8925_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:63c02348faa7d4e26e35c69aef5453613dd607a26116823b931b89fe5311e181_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:ae224866f0085d2c00ab18a28d2aed076e455731903989a49a544abf49950d1f_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:0a90a13f006ef0b271079b728ef6d54081f36ae19b6d0e9ab4dc24ea52a30fad_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:3a53629645832974a883002e53198df7c28e59dd6d1df99bf321b52d0ef84b61_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:879315f438ca43abb607d6c97f8fbd4ca2d38209b142e2d97cc0598740273252_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:c6c4d01f5fcee6cad3fc870cace92f45000624760e6e93654bb5e814afeed7bb_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:50f7647620c78fd6b445379c8762f5e978113fe3552906376a24459263f27459_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:53e641f48ddc05c63da2e6bc24e9e4636a10de2c3599d8f5f78622bdebca07ca_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:57114b7a386c406715e342637558fab57afeef2e193517f99173a441f39401d5_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:dcdcaa90f292f2d7ad3f10acbedfab9f7f22f3432c3156055f34760d9bf9429c_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:3723b1d5c74f37cba219e203fd2026a718d4821595cb505ec6626684695da65b_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:562291f52b6bce98ec8795856b808545c4fe30047b54544c7f6c2ab4678480ff_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:e6dfac9bc3e467e141a425944782f5087ed967ac4d02d8d47442e3d61ba5b882_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:f683186c2cc8be9ec09b8efdec66d6b8b1f991c7f7b9fd398dc7c3f9ab8b3079_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:2471edd63a94473c68cf37ee50de643e40003f2c5bba84063c154e4888a7f0bd_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:7cef49d68df5d8efe52061a18920e07e6c7efa3016c0cea7d1747e67851f254a_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:d912383405599032acffbad22bc154f63a87dd429ba882fd7a94cb82fe650d8e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:f3034211e16de48af540efe4ee460395dba0a4a544fa4f277a12840a25df1730_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:181d1decb2f16fcf6f5938027ed346aca29126687bbe6cdcc601c25087f70d11_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:ab5e4d27e23448d99a37b8c05442bb1254083cdc4ff325e721d97d80ec27346c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:ac172243d158e126594f28317e0cfb37dc1790c9f2121e95fe52506b5e05fc91_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:fd96b6284d270effa0f838d960ea4218b72b54c4718513eb523658f2f4972682_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:c59d9cd479c62730eda5d482fb2f4e9fbc17a90a5a2861b130aafe1f3a27a333_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:e547f672b14b6e8fc2ffd300b150aedbd3f6b6b36ddcad612f7c992a936a7c82_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:ead1263d538974c48790c65e44cd9cab07a62c2893b2eeb250174e7cf58d7f9d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:ed0457a57c7b39b79fb308176f45ffe678938b25fbb8c15de2cedbe54b916f64_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:9847a5752ec77e17861dcdac5546ee5c53679c80c3569609b21d9080ee3b7ef3_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:d3c823e61a0682ddc85e576e86234e580992886de471035630f9c89bbad6ebb7_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:ded425ed0af88a1411a06e5191aee25c4c59f1de85b041eba95c9997686cf09e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:ee63f59942f9df04e95fc4266f0d194cd62a7ca08dd5478283884d0ab6003da7_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:724377cabaa284a5197e7505a7150c89631c2f2bcc629e074c7c0be18abd8e6f_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:cbf797c9e93413540b20ebee9191375ddd8185ef22dc8c9e23cc3a4c015abaf7_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:d7609d62a801cf07ef639abcd4f193b2d68967fadebbfddf2349003d7e9eaa44_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:f61fe90362f793225591eb7e2a86d5cdc6fb35aa087e9b6a6218a42b1c1d945d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:1c4de9460688800b62bad6fb13653ef4b52bf215e4d41674291193e9b8e71b24_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:4f1e59610b2fbedc56f425b3fbd8f16c9ea6ea96025f18a404fe48f6a49bdc1e_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:ab0d28306dd6daa03af79bdc2ea650e59a50a03317987c4cdd0d1ee70f95b597_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:b700a8bb7ea6e4253afb8bcf94e5ad086349980ca0716a87817724d3da3fdce1_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4015f46d2172db26a348635e2e8cbd4bbcdbbaa56a4b12c232676a3d0f5bbee2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4169252c61ec70b91b10c750d5f9ecd53f5c3c906766bba9103afbac3c3f9edf_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4ab72a192553c21de76754f06fe38cf443e686e4b4edc2aa2ceb2b6b9d95bb6c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:579ef0925c6f56ed48f22121767189431bef6c4eaa72b2648a1b91488357a51d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:2b796bf55ecf7a14d1c87d829a2b20d998fc2943686373105b0a50f5053ef836_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:7e960b59f64547f7e9602b7c066a51ab52aba929726aec2bacdf486a9d4d28fd_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:a43e430a2ec0b86fb6ade361677be298b4e27444388a9bca35ddafbf9c77277c_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:d2394b121256985e5ca322aea77bb0bf999ba2d7a6f1627e62bbc125c475dbbd_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:1868e2ea03d063b4cd64601cb0aaf5c9ea7f55e83eba2e2d4dcf6f830efeafc7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:4bfbf0bdc882979bc94d85a4aeff8caa0ec7887aec7412e32ae1442811325d06_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:844e3d69d3c26914e02612466021592a876e6e2dd6cf77084723a70f567ba0e2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:bbe04eb8fd197f15875f498e3c18b9a7a445380efb5f696422d79df99a34a881_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:2c9f9b47c01c5e5e017c583c6a09c5c52f40ef88acf789689265cb31ef328fb8_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:7b5e883efde312c1571c4825b523ff04ab57af6a9f4162a36b80b973f9602c46_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:d896dd89fb924da246fc729041d9debc019d8a4210cfd3de8883834e429cca10_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:ede3e22d4e4de49789622149dec23beaa7e0569a3715ac2262929df543e05bc3_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:273a393b8c62fbc4edb4bf4033c47d8b52bda56fc9cafa289d9513210840815b_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:71f1b590785ce7f4577ecd687dbab9bc3c5931c568a3108eb84279c7aa892046_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:d1e1b4310eb64891c9456be7c34547bf36b0aafdeb471a49f0892d7eaf8f41f4_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:e0a7514406c7ffae080db6d4db3bbf7b77a606ea4632bf09f8301ce1d3739bb5_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:2a4c6c061d154ed9c74707a7a2e2390fde2a150f36197386c3e49c0612d345b2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:6ffcc051c955e198c6d96b59bda0ef26b5124ebbdef5357d36a84534f2c7097c_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:c9258bf58373f9c6859789c8ec272cd7d702c37e063fc2ee53c66d296e7ee3d0_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:d83c6bb4f2a91d2c4de3ffbf4aa8ceecb695f8491ba7586d55275c62cd1931e6_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:67637c5cba3eca1597885823c6e44c13db445d0ef38751eb8364b69dbf07caac_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:68fb5c2a3c8a0d5e6bbcf2c5568969f6b13e72006d4d54bc5c57cd9a032d1bf6_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:9f5fa40c88b0f5d1ae3634632240817a91f4575f8eae9c005b8e35a55cf38003_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:fcbcee9fc7e0bbf5775a33ae9b7e3d7e48a90e2aa1cb85605e05612b6e4d4e30_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:0c165bb93ce933c7f9998a615908bfcca0b4eb38e32e24a1c823e63791b7604b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:42aa392f82bdc45a3b857d1ed44e224ddfd14db1e3dcbb74dcc850ac0540e964_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:9dcd0c0ecf1523bf05bd296edbecd85841b2753dee7a5c9df32437f9a8e31471_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:c5505c462e6b2c04a6e14bc1e22dfc42dc8adea8f6eaf0615cd58b1973b7d62e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:1a93df314c31f10da7b1345fab07b15b846e28865764178e34124f84dc967152_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:34343f81973c3fbdd8630c32d0fad597745ea10f960ea64236408e58e0f10e14_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:7b3635784ebfb6343a73c9fa6de7bea57b3aacce1c49a0f7f250a471f7b897e3_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:f0a7fade2853193429bab16922b2e3bbe426e14632423d6550ff7dfb66d42827_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:94950d339fa382d6911f12fc23dcaf2cdb2854c4cab654f6058f5bf0df1bb371_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:bcfbd2284cbeeba5a835aaf5a5590ddd8156bd881ca24fd0fe1465fade1f84c2_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:bd739ced163053224e5b0ea2f3cd577481c6b6c1162cc0fbc186f1716b4a1fbd_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:d40496f114898985cde3860b9664c34d8c32de85e4d3d846df91a6ba27a2e99c_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:3f7cbe7605595d712e14d9a17717fafc6c6e334f2ad3e821c34947ec78411046_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:96775900ea90e57487da6afe59d058b33cb977a0247a1bbeb1bd07bed2816398_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:caa6b121538e074312314d9888d9b423bd225aefa4f25eb145893b9fc548c0ad_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:e59c90cfe8160b28f9d2aa9e59b1d04d742df44d2195210ebc1946ee3cb78b6f_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:10c95e5c55ccc1a04e8d2ac28bd1afd3b9bb9a7e9e2a5e3e8efb301421539980_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:60a310d4464b4817845703d14e95729321b883fbfc79fbf2dd8d514bb3c675e9_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:70e6c14d72f14d25a90f44043932fbd3f824b30e8ad4b36307100726b24d9c06_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:784129cf69b3bf77a907fe909fd73a2a4d0fbd947fe0037e47aa1d62c6ffcf0b_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:2368703206d833e4cb73b7e8750efb9997633a6f9accbf032426bcfcae4c00d9_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:80b543b207e724e880ff932c514fe9c6a3925bfede1c31863531e4e69d050d40_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:82405a9a5715db5442dfa3d3f594888bd7b2f9c778d68357a7d8884f5ea46915_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:8fd2bda7b8d94ededf7973f76a159dd61105776a05d961ac9cfd9bee0a988213_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:4def845360282dad99181b96bcd834b4863eab39e246fda2476234c561c652ec_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:b67aec868b6366cf04f3980b15588e1a0af5c88b2248958bc3884261ad390ca0_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:ceacf3491ebec6f5613011fe8d36b66d00f8b3697832615a4d7024e23125085e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:d9f6a520b818dcccbedb94720b5979ef1cdec2e02491c76e3decb3ee18f2085d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:3e6519c0c789b946eb1b811867c41c4f204440bad5734760c0aca4e3fc602e5a_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:95684cfaf4d5d91bc9fe8cfbf64a6f113e944e3f0c102d27851be5232eca0dbb_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:9cb20990af88287dd8a27de4e4ef12eb244577a1844482d26107359c6efe8efa_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:a69ebb0c7e817d44cfabd86ad13ef4cc94a8bf5b6e8a607d17b197603d64a224_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:0eea35a3af36d08db945a70c387cc38eb326f75b4ed322f09d8c91863cfe5d02_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:22c48db227cd6f2ecec746674e31ac7f5a983a418679fc91678a0aa0ebb49496_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:8e8d249c39d562f819d347f12610dda7f5c01215c41101bfd5dca008e04edf6e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:f8adb8dd40a204bacb51cd423803097a514ec8e8e9f52209e02ecf14cad622bb_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:1f7ed606f69a74943aedb0a956e5a71019f8a1ab53cd3f8166be0f55a69809b9_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:4841076eb82f1f1748345556ff6c4e02a17f1f63c661e375eaba720291cbaf6a_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:a79ac7dcae109aa526e2a218327dd8c5dba2b924fc27447a07199b3b2f2f67b3_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:dee022821852f2d5ebdbbd9f09c9b97997a905061dadb3f78433291d462d49a7_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:1a746b16f362a83f399255d925b322b3440b3d89ae4d64ab7962db3d82ee91a1_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:417a31bec11c3ffb70f40fa955069d5160dc12e2426b67e1d2e35ae3f7fa06df_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:89a3cb77fdb3dcbddfe96785a9ba3fa2b6132098fce028f859663b31fcf77a34_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:b1ba0b4cd8f515895af7b9f797f6ea5b661f7254ce019ce5115375639dcd06e9_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:0827c96b922ca185b7a7321a4f504e8a5dc01aadafcfd20443060546981339a8_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:b5b732dfc0ce3d740781eda9a72e1542c7a30b28b39d2be6e0ba470af06a9680_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:f74081e5eb03227ccff5717a7d139ceee6c5b610625ff7b99e639a2652bf7663_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:f80976ae4fc332600e1d8e1d70b42c038ea05d76ac2c5b1d7d0cbaddbe89140a_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:4029ece83812237ce8b1d394252e9561012e8cd94af40680a90284fbea1bc32a_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:63a3465a7539a8a286c846a84d63e3feca9a11758e4c0d697889b0bdeb26a25c_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:81c227d7c7599b0d4357ccdc3b567f31b67bbd1198c9e7ddba1864c299bad11b_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:f392bde8ce22aca058d77132cc709440442931679dbe725c52516f1cdc97b38d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:4825fab15300bc911e0b2b5c4ae342004bfcff95fa64af0fdb1085fadd132aa2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:68f879679911c2ca828551b900eca1c2f4e8caec7312fbba502fabc4778d1832_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:b4188ac728c746769ef6586663dd6d7d07db984b083397d2c76fe847ef22ea60_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:f2805fc1e6f37bc8acc3187ea8712d38f32151d584c10d5996c0ad7076cd638b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:1c943edcf23df14f254e4aabb93cbc1665bbc7902076b3f04bd80edd2fe324db_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:84c5d2b24caf68c3a6a6d078bd9f66de9fb88e769f6c09c11a248693d463ac21_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:907d6e24922d6d372bceb21ad830c254c6a9c9d6be0ac4f4edf22c236437a09d_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:923a3ee0e3d5b7341b96826e465e6856855f2801dbaf381d139a632c77bda1c5_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:285d2e2d103b458f0603435aedb4d779d85e48fed2267845b798f4a04a0df4c7_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:44981f5fcbc9086470143fae6e21a5de3baad2258d9f8c81accecb2faad6b2a2_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:5ba248d0bc8fcde70e210319bb962f4043e5e8ab8a5625c8f8f30ec96d47c6b7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:f681cdac28ee9ff6375fb39d7b7d12917a06043db44c16e8f84bdb9e09e7b5e7_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:2057531884d897574fc0648e5d3cf21c4549738ac5f35d8095f400cdb80049cc_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:8be0e50a132a2c974893f36b51f3f40b6d6e1f913ae0f9ee6319ef0d5ec455b7_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:a2edc5d233d1547fa2e1d01f29d8a914930735f7098289892430ba9a17d20ab7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:c81c7aeb3dd05801e279a9fcc8d6c3baf00a2ccc08eab53f8acc8bd4d2d129c4_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:25e17bf203568420587cf5907e84e4167afab84dfce549c91bea99e70290b742_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:277f4e8ac5fc292b9f0f2d123f924c6b5cbc0a2eeba3c87a0e61c5ee2399aaa9_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:76766b77ed53513cd254195b25d205ab6964522816e1e3662800e38a105abdf2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:c7ace45f7cb86055e2ba18e27a660f6aa6cb4eff497204294875d5dd1d63cce3_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:3780b1bc80ab7ebc3cfed06ce69346d589dc07b53cea65ad3ed92cc912284300_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:681b356709778083448892513b4559f693e002bfda897a57e2d065f736a902b5_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:d110b52ce8ea022b3d35e7c4b0ce3b646f30513cf8abb55327132565ea4a6a87_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:f076ab59f3abe061e4553a61f98a144a472297dba5ed924ca887f130e9372da9_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480689"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. Source-address validation can be skipped when an SSH server configuration uses an authentication callback type other than public key, allowing authorization bypass in misconfigured servers. This is a follow-on to incomplete coverage from the CVE-2024-45337 fix.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/crypto/ssh is vulnerable to authorization bypass when SSH server configurations rely on source-address validation alongside non-public-key authentication callbacks. An attacker with low privileges who can authenticate through such a callback path may bypass intended source-address restrictions and gain unauthorized SSH access. Red Hat impact sits in services built with affected x/crypto/ssh, including RHEL golang streams, hummingbird Go toolchains, RHACM/MCE agents, and OpenShift or Ceph components that embed Go SSH servers with mixed callback types.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:26e58654cdd092cb812207cb4473f5f5988ebd708d95c34152c2e8c124f7297d_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:40e5d9634aa7469df8247758961d486cfac3e7d7f0b59184e11ed5571b46bf40_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:5b59faed336de07965755c893cb9d0ffc52ec90f61cc8c54487f6c0cac53322e_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:b59aea0c9e859025988b0f0c9b6e7748c4acf6d0b4cee35f3fabb7b84feb598b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:03adc6277e2bf409391941c6f4508154abc38a0c043139978754f6d4fd32c5a8_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:7e100af30ed11325cb2cbee02af09306e53df5db5847f2a4b733cd307e3cd623_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:91b474b4808b18c279c9f8eb3be8e6d1e1e47cf2b5f9553acd901c74b20bddbc_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:d56f884a9700a4f193d6f3db1895bd54745ec77e02ead3d43bd6e4fe04a2969e_s390x"
],
"known_not_affected": [
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:31bd91156f49687d2efffd3be971d9ee0e16abb420b8e8b958caa88b97770020_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:a6315866c67ba350665f5a92f960a5a44e427ca37ae7505e2072af4e02c42f76_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:b3ad6fa1de658f3a40c8b183ab501ebc66b359d8cc01439d4215aa52769df213_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:bfde9ebea1fcd27b6d104d5f67db62e870878f9517ccbec2f649dd2c1af4a073_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:08fed161d59299881ff7a54db859feaf8ed7bdb8238d6cf12628ccb73575665e_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:09436fe2649ca384b1bc1fd8f736fb1d71392733310e66758ed9f289e00471f9_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:3b83670e1c0e9d1f5b76bd7b75d77072bc6208646bc2201bd0bd200dbc59e34a_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:927146f966e4c5c2908d29d8ab45a8f3071dbd5ebd9cf0424460a23f814a72a7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:38a3bc59511133cae56827eba879e7c82c5a974bf1f16b6e8d95e1f79821e669_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:3fa04db82e3ce6169270db0ce29107b69d8e044e0a1ab13a2bf1050b8c26d087_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:6041a918713d4464c73560b68c294a12d33f297a980d2f9d0e0cc8c300a96f24_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:98bd72ba69bdfb3070d87b3edcbd7050579a514b72cfd67c2926541ba52dbaf7_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:938abc970731c2eeda8e2b7b73e96d4dfcbf7587330c7b7e52117a577700e426_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:a0876a25ce85d7d4616212813f012422826f152b8d71065e75cd9c3e23034d8a_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:c77077a0cca835a503a6529c89ab19c4027f949d361afdf8a5a259e1e87b0d55_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:d5bbf3fe886f27cdc27363dcb175e004487d9c8f36de4f1f8516fbeda3a95224_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:0f5d8cae3ba4ea4fcdc5fb9d08f797d576bc225b92af66f193bd4b1324cda4b9_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:2d3588825f8a714fa59b1648d0934d064165e333f322f7f31f01f07b940d42d9_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:68aa571827f5331f1d5a3bd0c60ad441a18877ba11921aff2633940236bafcd4_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:9b80c9c61d4befefa7f6a65ae8c001ce7e343a1e4f251e5ebe025625d9511730_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:9b2c24401a91903f023096d2b641aa977acff423eb6770a8e4c4a81aecfd4e62_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:9d74585acc098c13f3e9dac5ae7f5ef337fa82bd7119d7f1849c5f8a50e84907_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:a6ee95d0ed82bddef084684d11fa770bd646d9be9bc65b3bc386d7c58b33975c_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:f7b8654eb8bf675c8c26f0ad395d790f990308d3ad6683bb61b484c92073bbac_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:2a598e7fd07db27100d9a53a328ac9a0535865883bddd1373f4f1f2705068d2f_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:4f8f0b02d0969753e156226a998d442746c238a2a50ea606a49ca0cf695b8925_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:63c02348faa7d4e26e35c69aef5453613dd607a26116823b931b89fe5311e181_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:ae224866f0085d2c00ab18a28d2aed076e455731903989a49a544abf49950d1f_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:0a90a13f006ef0b271079b728ef6d54081f36ae19b6d0e9ab4dc24ea52a30fad_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:3a53629645832974a883002e53198df7c28e59dd6d1df99bf321b52d0ef84b61_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:879315f438ca43abb607d6c97f8fbd4ca2d38209b142e2d97cc0598740273252_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:c6c4d01f5fcee6cad3fc870cace92f45000624760e6e93654bb5e814afeed7bb_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:50f7647620c78fd6b445379c8762f5e978113fe3552906376a24459263f27459_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:53e641f48ddc05c63da2e6bc24e9e4636a10de2c3599d8f5f78622bdebca07ca_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:57114b7a386c406715e342637558fab57afeef2e193517f99173a441f39401d5_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:dcdcaa90f292f2d7ad3f10acbedfab9f7f22f3432c3156055f34760d9bf9429c_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:3723b1d5c74f37cba219e203fd2026a718d4821595cb505ec6626684695da65b_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:562291f52b6bce98ec8795856b808545c4fe30047b54544c7f6c2ab4678480ff_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:e6dfac9bc3e467e141a425944782f5087ed967ac4d02d8d47442e3d61ba5b882_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:f683186c2cc8be9ec09b8efdec66d6b8b1f991c7f7b9fd398dc7c3f9ab8b3079_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:2471edd63a94473c68cf37ee50de643e40003f2c5bba84063c154e4888a7f0bd_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:7cef49d68df5d8efe52061a18920e07e6c7efa3016c0cea7d1747e67851f254a_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:d912383405599032acffbad22bc154f63a87dd429ba882fd7a94cb82fe650d8e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:f3034211e16de48af540efe4ee460395dba0a4a544fa4f277a12840a25df1730_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:181d1decb2f16fcf6f5938027ed346aca29126687bbe6cdcc601c25087f70d11_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:ab5e4d27e23448d99a37b8c05442bb1254083cdc4ff325e721d97d80ec27346c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:ac172243d158e126594f28317e0cfb37dc1790c9f2121e95fe52506b5e05fc91_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:fd96b6284d270effa0f838d960ea4218b72b54c4718513eb523658f2f4972682_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:c59d9cd479c62730eda5d482fb2f4e9fbc17a90a5a2861b130aafe1f3a27a333_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:e547f672b14b6e8fc2ffd300b150aedbd3f6b6b36ddcad612f7c992a936a7c82_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:ead1263d538974c48790c65e44cd9cab07a62c2893b2eeb250174e7cf58d7f9d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:ed0457a57c7b39b79fb308176f45ffe678938b25fbb8c15de2cedbe54b916f64_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:9847a5752ec77e17861dcdac5546ee5c53679c80c3569609b21d9080ee3b7ef3_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:d3c823e61a0682ddc85e576e86234e580992886de471035630f9c89bbad6ebb7_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:ded425ed0af88a1411a06e5191aee25c4c59f1de85b041eba95c9997686cf09e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:ee63f59942f9df04e95fc4266f0d194cd62a7ca08dd5478283884d0ab6003da7_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:724377cabaa284a5197e7505a7150c89631c2f2bcc629e074c7c0be18abd8e6f_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:cbf797c9e93413540b20ebee9191375ddd8185ef22dc8c9e23cc3a4c015abaf7_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:d7609d62a801cf07ef639abcd4f193b2d68967fadebbfddf2349003d7e9eaa44_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:f61fe90362f793225591eb7e2a86d5cdc6fb35aa087e9b6a6218a42b1c1d945d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:1c4de9460688800b62bad6fb13653ef4b52bf215e4d41674291193e9b8e71b24_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:4f1e59610b2fbedc56f425b3fbd8f16c9ea6ea96025f18a404fe48f6a49bdc1e_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:ab0d28306dd6daa03af79bdc2ea650e59a50a03317987c4cdd0d1ee70f95b597_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:b700a8bb7ea6e4253afb8bcf94e5ad086349980ca0716a87817724d3da3fdce1_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4015f46d2172db26a348635e2e8cbd4bbcdbbaa56a4b12c232676a3d0f5bbee2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4169252c61ec70b91b10c750d5f9ecd53f5c3c906766bba9103afbac3c3f9edf_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4ab72a192553c21de76754f06fe38cf443e686e4b4edc2aa2ceb2b6b9d95bb6c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:579ef0925c6f56ed48f22121767189431bef6c4eaa72b2648a1b91488357a51d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:2b796bf55ecf7a14d1c87d829a2b20d998fc2943686373105b0a50f5053ef836_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:7e960b59f64547f7e9602b7c066a51ab52aba929726aec2bacdf486a9d4d28fd_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:a43e430a2ec0b86fb6ade361677be298b4e27444388a9bca35ddafbf9c77277c_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:d2394b121256985e5ca322aea77bb0bf999ba2d7a6f1627e62bbc125c475dbbd_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:1868e2ea03d063b4cd64601cb0aaf5c9ea7f55e83eba2e2d4dcf6f830efeafc7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:4bfbf0bdc882979bc94d85a4aeff8caa0ec7887aec7412e32ae1442811325d06_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:844e3d69d3c26914e02612466021592a876e6e2dd6cf77084723a70f567ba0e2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:bbe04eb8fd197f15875f498e3c18b9a7a445380efb5f696422d79df99a34a881_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:2c9f9b47c01c5e5e017c583c6a09c5c52f40ef88acf789689265cb31ef328fb8_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:7b5e883efde312c1571c4825b523ff04ab57af6a9f4162a36b80b973f9602c46_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:d896dd89fb924da246fc729041d9debc019d8a4210cfd3de8883834e429cca10_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:ede3e22d4e4de49789622149dec23beaa7e0569a3715ac2262929df543e05bc3_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:273a393b8c62fbc4edb4bf4033c47d8b52bda56fc9cafa289d9513210840815b_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:71f1b590785ce7f4577ecd687dbab9bc3c5931c568a3108eb84279c7aa892046_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:d1e1b4310eb64891c9456be7c34547bf36b0aafdeb471a49f0892d7eaf8f41f4_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:e0a7514406c7ffae080db6d4db3bbf7b77a606ea4632bf09f8301ce1d3739bb5_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:2a4c6c061d154ed9c74707a7a2e2390fde2a150f36197386c3e49c0612d345b2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:6ffcc051c955e198c6d96b59bda0ef26b5124ebbdef5357d36a84534f2c7097c_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:c9258bf58373f9c6859789c8ec272cd7d702c37e063fc2ee53c66d296e7ee3d0_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:d83c6bb4f2a91d2c4de3ffbf4aa8ceecb695f8491ba7586d55275c62cd1931e6_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:67637c5cba3eca1597885823c6e44c13db445d0ef38751eb8364b69dbf07caac_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:68fb5c2a3c8a0d5e6bbcf2c5568969f6b13e72006d4d54bc5c57cd9a032d1bf6_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:9f5fa40c88b0f5d1ae3634632240817a91f4575f8eae9c005b8e35a55cf38003_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:fcbcee9fc7e0bbf5775a33ae9b7e3d7e48a90e2aa1cb85605e05612b6e4d4e30_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:0c165bb93ce933c7f9998a615908bfcca0b4eb38e32e24a1c823e63791b7604b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:42aa392f82bdc45a3b857d1ed44e224ddfd14db1e3dcbb74dcc850ac0540e964_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:9dcd0c0ecf1523bf05bd296edbecd85841b2753dee7a5c9df32437f9a8e31471_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:c5505c462e6b2c04a6e14bc1e22dfc42dc8adea8f6eaf0615cd58b1973b7d62e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:1a93df314c31f10da7b1345fab07b15b846e28865764178e34124f84dc967152_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:34343f81973c3fbdd8630c32d0fad597745ea10f960ea64236408e58e0f10e14_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:7b3635784ebfb6343a73c9fa6de7bea57b3aacce1c49a0f7f250a471f7b897e3_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:f0a7fade2853193429bab16922b2e3bbe426e14632423d6550ff7dfb66d42827_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:94950d339fa382d6911f12fc23dcaf2cdb2854c4cab654f6058f5bf0df1bb371_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:bcfbd2284cbeeba5a835aaf5a5590ddd8156bd881ca24fd0fe1465fade1f84c2_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:bd739ced163053224e5b0ea2f3cd577481c6b6c1162cc0fbc186f1716b4a1fbd_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:d40496f114898985cde3860b9664c34d8c32de85e4d3d846df91a6ba27a2e99c_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:3f7cbe7605595d712e14d9a17717fafc6c6e334f2ad3e821c34947ec78411046_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:96775900ea90e57487da6afe59d058b33cb977a0247a1bbeb1bd07bed2816398_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:caa6b121538e074312314d9888d9b423bd225aefa4f25eb145893b9fc548c0ad_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:e59c90cfe8160b28f9d2aa9e59b1d04d742df44d2195210ebc1946ee3cb78b6f_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:10c95e5c55ccc1a04e8d2ac28bd1afd3b9bb9a7e9e2a5e3e8efb301421539980_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:60a310d4464b4817845703d14e95729321b883fbfc79fbf2dd8d514bb3c675e9_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:70e6c14d72f14d25a90f44043932fbd3f824b30e8ad4b36307100726b24d9c06_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:784129cf69b3bf77a907fe909fd73a2a4d0fbd947fe0037e47aa1d62c6ffcf0b_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:2368703206d833e4cb73b7e8750efb9997633a6f9accbf032426bcfcae4c00d9_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:80b543b207e724e880ff932c514fe9c6a3925bfede1c31863531e4e69d050d40_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:82405a9a5715db5442dfa3d3f594888bd7b2f9c778d68357a7d8884f5ea46915_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:8fd2bda7b8d94ededf7973f76a159dd61105776a05d961ac9cfd9bee0a988213_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:4def845360282dad99181b96bcd834b4863eab39e246fda2476234c561c652ec_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:b67aec868b6366cf04f3980b15588e1a0af5c88b2248958bc3884261ad390ca0_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:ceacf3491ebec6f5613011fe8d36b66d00f8b3697832615a4d7024e23125085e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:d9f6a520b818dcccbedb94720b5979ef1cdec2e02491c76e3decb3ee18f2085d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:3e6519c0c789b946eb1b811867c41c4f204440bad5734760c0aca4e3fc602e5a_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:95684cfaf4d5d91bc9fe8cfbf64a6f113e944e3f0c102d27851be5232eca0dbb_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:9cb20990af88287dd8a27de4e4ef12eb244577a1844482d26107359c6efe8efa_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:a69ebb0c7e817d44cfabd86ad13ef4cc94a8bf5b6e8a607d17b197603d64a224_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:0eea35a3af36d08db945a70c387cc38eb326f75b4ed322f09d8c91863cfe5d02_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:22c48db227cd6f2ecec746674e31ac7f5a983a418679fc91678a0aa0ebb49496_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:8e8d249c39d562f819d347f12610dda7f5c01215c41101bfd5dca008e04edf6e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:f8adb8dd40a204bacb51cd423803097a514ec8e8e9f52209e02ecf14cad622bb_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:1f7ed606f69a74943aedb0a956e5a71019f8a1ab53cd3f8166be0f55a69809b9_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:4841076eb82f1f1748345556ff6c4e02a17f1f63c661e375eaba720291cbaf6a_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:a79ac7dcae109aa526e2a218327dd8c5dba2b924fc27447a07199b3b2f2f67b3_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:dee022821852f2d5ebdbbd9f09c9b97997a905061dadb3f78433291d462d49a7_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:1a746b16f362a83f399255d925b322b3440b3d89ae4d64ab7962db3d82ee91a1_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:417a31bec11c3ffb70f40fa955069d5160dc12e2426b67e1d2e35ae3f7fa06df_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:89a3cb77fdb3dcbddfe96785a9ba3fa2b6132098fce028f859663b31fcf77a34_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:b1ba0b4cd8f515895af7b9f797f6ea5b661f7254ce019ce5115375639dcd06e9_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:0827c96b922ca185b7a7321a4f504e8a5dc01aadafcfd20443060546981339a8_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:b5b732dfc0ce3d740781eda9a72e1542c7a30b28b39d2be6e0ba470af06a9680_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:f74081e5eb03227ccff5717a7d139ceee6c5b610625ff7b99e639a2652bf7663_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:f80976ae4fc332600e1d8e1d70b42c038ea05d76ac2c5b1d7d0cbaddbe89140a_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:4029ece83812237ce8b1d394252e9561012e8cd94af40680a90284fbea1bc32a_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:63a3465a7539a8a286c846a84d63e3feca9a11758e4c0d697889b0bdeb26a25c_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:81c227d7c7599b0d4357ccdc3b567f31b67bbd1198c9e7ddba1864c299bad11b_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:f392bde8ce22aca058d77132cc709440442931679dbe725c52516f1cdc97b38d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:4825fab15300bc911e0b2b5c4ae342004bfcff95fa64af0fdb1085fadd132aa2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:68f879679911c2ca828551b900eca1c2f4e8caec7312fbba502fabc4778d1832_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:b4188ac728c746769ef6586663dd6d7d07db984b083397d2c76fe847ef22ea60_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:f2805fc1e6f37bc8acc3187ea8712d38f32151d584c10d5996c0ad7076cd638b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:1c943edcf23df14f254e4aabb93cbc1665bbc7902076b3f04bd80edd2fe324db_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:84c5d2b24caf68c3a6a6d078bd9f66de9fb88e769f6c09c11a248693d463ac21_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:907d6e24922d6d372bceb21ad830c254c6a9c9d6be0ac4f4edf22c236437a09d_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:923a3ee0e3d5b7341b96826e465e6856855f2801dbaf381d139a632c77bda1c5_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:285d2e2d103b458f0603435aedb4d779d85e48fed2267845b798f4a04a0df4c7_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:44981f5fcbc9086470143fae6e21a5de3baad2258d9f8c81accecb2faad6b2a2_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:5ba248d0bc8fcde70e210319bb962f4043e5e8ab8a5625c8f8f30ec96d47c6b7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:f681cdac28ee9ff6375fb39d7b7d12917a06043db44c16e8f84bdb9e09e7b5e7_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:2057531884d897574fc0648e5d3cf21c4549738ac5f35d8095f400cdb80049cc_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:8be0e50a132a2c974893f36b51f3f40b6d6e1f913ae0f9ee6319ef0d5ec455b7_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:a2edc5d233d1547fa2e1d01f29d8a914930735f7098289892430ba9a17d20ab7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:c81c7aeb3dd05801e279a9fcc8d6c3baf00a2ccc08eab53f8acc8bd4d2d129c4_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:25e17bf203568420587cf5907e84e4167afab84dfce549c91bea99e70290b742_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:277f4e8ac5fc292b9f0f2d123f924c6b5cbc0a2eeba3c87a0e61c5ee2399aaa9_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:76766b77ed53513cd254195b25d205ab6964522816e1e3662800e38a105abdf2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:c7ace45f7cb86055e2ba18e27a660f6aa6cb4eff497204294875d5dd1d63cce3_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:3780b1bc80ab7ebc3cfed06ce69346d589dc07b53cea65ad3ed92cc912284300_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:681b356709778083448892513b4559f693e002bfda897a57e2d065f736a902b5_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:d110b52ce8ea022b3d35e7c4b0ce3b646f30513cf8abb55327132565ea4a6a87_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:f076ab59f3abe061e4553a61f98a144a472297dba5ed924ca887f130e9372da9_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-46595"
},
{
"category": "external",
"summary": "RHBZ#2480689",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480689"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-46595",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46595"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46595",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46595"
},
{
"category": "external",
"summary": "https://go.dev/cl/781642",
"url": "https://go.dev/cl/781642"
},
{
"category": "external",
"summary": "https://go.dev/issue/79570",
"url": "https://go.dev/issue/79570"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5023",
"url": "https://pkg.go.dev/vuln/GO-2026-5023"
}
],
"release_date": "2026-05-22T02:31:27.894000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T07:47:11+00:00",
"details": "Before you apply this update, make sure all previously released errata\nthat are relevant to your system are applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:26e58654cdd092cb812207cb4473f5f5988ebd708d95c34152c2e8c124f7297d_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:40e5d9634aa7469df8247758961d486cfac3e7d7f0b59184e11ed5571b46bf40_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:5b59faed336de07965755c893cb9d0ffc52ec90f61cc8c54487f6c0cac53322e_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:b59aea0c9e859025988b0f0c9b6e7748c4acf6d0b4cee35f3fabb7b84feb598b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:03adc6277e2bf409391941c6f4508154abc38a0c043139978754f6d4fd32c5a8_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:7e100af30ed11325cb2cbee02af09306e53df5db5847f2a4b733cd307e3cd623_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:91b474b4808b18c279c9f8eb3be8e6d1e1e47cf2b5f9553acd901c74b20bddbc_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:d56f884a9700a4f193d6f3db1895bd54745ec77e02ead3d43bd6e4fe04a2969e_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:47737"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:31bd91156f49687d2efffd3be971d9ee0e16abb420b8e8b958caa88b97770020_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:a6315866c67ba350665f5a92f960a5a44e427ca37ae7505e2072af4e02c42f76_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:b3ad6fa1de658f3a40c8b183ab501ebc66b359d8cc01439d4215aa52769df213_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:bfde9ebea1fcd27b6d104d5f67db62e870878f9517ccbec2f649dd2c1af4a073_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:08fed161d59299881ff7a54db859feaf8ed7bdb8238d6cf12628ccb73575665e_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:09436fe2649ca384b1bc1fd8f736fb1d71392733310e66758ed9f289e00471f9_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:3b83670e1c0e9d1f5b76bd7b75d77072bc6208646bc2201bd0bd200dbc59e34a_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:927146f966e4c5c2908d29d8ab45a8f3071dbd5ebd9cf0424460a23f814a72a7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:38a3bc59511133cae56827eba879e7c82c5a974bf1f16b6e8d95e1f79821e669_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:3fa04db82e3ce6169270db0ce29107b69d8e044e0a1ab13a2bf1050b8c26d087_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:6041a918713d4464c73560b68c294a12d33f297a980d2f9d0e0cc8c300a96f24_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:98bd72ba69bdfb3070d87b3edcbd7050579a514b72cfd67c2926541ba52dbaf7_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:938abc970731c2eeda8e2b7b73e96d4dfcbf7587330c7b7e52117a577700e426_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:a0876a25ce85d7d4616212813f012422826f152b8d71065e75cd9c3e23034d8a_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:c77077a0cca835a503a6529c89ab19c4027f949d361afdf8a5a259e1e87b0d55_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:d5bbf3fe886f27cdc27363dcb175e004487d9c8f36de4f1f8516fbeda3a95224_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:0f5d8cae3ba4ea4fcdc5fb9d08f797d576bc225b92af66f193bd4b1324cda4b9_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:2d3588825f8a714fa59b1648d0934d064165e333f322f7f31f01f07b940d42d9_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:68aa571827f5331f1d5a3bd0c60ad441a18877ba11921aff2633940236bafcd4_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:9b80c9c61d4befefa7f6a65ae8c001ce7e343a1e4f251e5ebe025625d9511730_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:9b2c24401a91903f023096d2b641aa977acff423eb6770a8e4c4a81aecfd4e62_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:9d74585acc098c13f3e9dac5ae7f5ef337fa82bd7119d7f1849c5f8a50e84907_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:a6ee95d0ed82bddef084684d11fa770bd646d9be9bc65b3bc386d7c58b33975c_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:f7b8654eb8bf675c8c26f0ad395d790f990308d3ad6683bb61b484c92073bbac_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:2a598e7fd07db27100d9a53a328ac9a0535865883bddd1373f4f1f2705068d2f_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:4f8f0b02d0969753e156226a998d442746c238a2a50ea606a49ca0cf695b8925_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:63c02348faa7d4e26e35c69aef5453613dd607a26116823b931b89fe5311e181_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:ae224866f0085d2c00ab18a28d2aed076e455731903989a49a544abf49950d1f_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:0a90a13f006ef0b271079b728ef6d54081f36ae19b6d0e9ab4dc24ea52a30fad_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:3a53629645832974a883002e53198df7c28e59dd6d1df99bf321b52d0ef84b61_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:879315f438ca43abb607d6c97f8fbd4ca2d38209b142e2d97cc0598740273252_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:c6c4d01f5fcee6cad3fc870cace92f45000624760e6e93654bb5e814afeed7bb_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:50f7647620c78fd6b445379c8762f5e978113fe3552906376a24459263f27459_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:53e641f48ddc05c63da2e6bc24e9e4636a10de2c3599d8f5f78622bdebca07ca_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:57114b7a386c406715e342637558fab57afeef2e193517f99173a441f39401d5_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:dcdcaa90f292f2d7ad3f10acbedfab9f7f22f3432c3156055f34760d9bf9429c_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:3723b1d5c74f37cba219e203fd2026a718d4821595cb505ec6626684695da65b_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:562291f52b6bce98ec8795856b808545c4fe30047b54544c7f6c2ab4678480ff_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:e6dfac9bc3e467e141a425944782f5087ed967ac4d02d8d47442e3d61ba5b882_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:f683186c2cc8be9ec09b8efdec66d6b8b1f991c7f7b9fd398dc7c3f9ab8b3079_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:2471edd63a94473c68cf37ee50de643e40003f2c5bba84063c154e4888a7f0bd_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:7cef49d68df5d8efe52061a18920e07e6c7efa3016c0cea7d1747e67851f254a_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:d912383405599032acffbad22bc154f63a87dd429ba882fd7a94cb82fe650d8e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:f3034211e16de48af540efe4ee460395dba0a4a544fa4f277a12840a25df1730_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:181d1decb2f16fcf6f5938027ed346aca29126687bbe6cdcc601c25087f70d11_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:ab5e4d27e23448d99a37b8c05442bb1254083cdc4ff325e721d97d80ec27346c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:ac172243d158e126594f28317e0cfb37dc1790c9f2121e95fe52506b5e05fc91_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:fd96b6284d270effa0f838d960ea4218b72b54c4718513eb523658f2f4972682_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:c59d9cd479c62730eda5d482fb2f4e9fbc17a90a5a2861b130aafe1f3a27a333_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:e547f672b14b6e8fc2ffd300b150aedbd3f6b6b36ddcad612f7c992a936a7c82_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:ead1263d538974c48790c65e44cd9cab07a62c2893b2eeb250174e7cf58d7f9d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:ed0457a57c7b39b79fb308176f45ffe678938b25fbb8c15de2cedbe54b916f64_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:9847a5752ec77e17861dcdac5546ee5c53679c80c3569609b21d9080ee3b7ef3_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:d3c823e61a0682ddc85e576e86234e580992886de471035630f9c89bbad6ebb7_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:ded425ed0af88a1411a06e5191aee25c4c59f1de85b041eba95c9997686cf09e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:ee63f59942f9df04e95fc4266f0d194cd62a7ca08dd5478283884d0ab6003da7_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:724377cabaa284a5197e7505a7150c89631c2f2bcc629e074c7c0be18abd8e6f_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:cbf797c9e93413540b20ebee9191375ddd8185ef22dc8c9e23cc3a4c015abaf7_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:d7609d62a801cf07ef639abcd4f193b2d68967fadebbfddf2349003d7e9eaa44_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:f61fe90362f793225591eb7e2a86d5cdc6fb35aa087e9b6a6218a42b1c1d945d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:1c4de9460688800b62bad6fb13653ef4b52bf215e4d41674291193e9b8e71b24_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:4f1e59610b2fbedc56f425b3fbd8f16c9ea6ea96025f18a404fe48f6a49bdc1e_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:ab0d28306dd6daa03af79bdc2ea650e59a50a03317987c4cdd0d1ee70f95b597_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:b700a8bb7ea6e4253afb8bcf94e5ad086349980ca0716a87817724d3da3fdce1_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4015f46d2172db26a348635e2e8cbd4bbcdbbaa56a4b12c232676a3d0f5bbee2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4169252c61ec70b91b10c750d5f9ecd53f5c3c906766bba9103afbac3c3f9edf_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4ab72a192553c21de76754f06fe38cf443e686e4b4edc2aa2ceb2b6b9d95bb6c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:579ef0925c6f56ed48f22121767189431bef6c4eaa72b2648a1b91488357a51d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:2b796bf55ecf7a14d1c87d829a2b20d998fc2943686373105b0a50f5053ef836_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:7e960b59f64547f7e9602b7c066a51ab52aba929726aec2bacdf486a9d4d28fd_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:a43e430a2ec0b86fb6ade361677be298b4e27444388a9bca35ddafbf9c77277c_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:d2394b121256985e5ca322aea77bb0bf999ba2d7a6f1627e62bbc125c475dbbd_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:1868e2ea03d063b4cd64601cb0aaf5c9ea7f55e83eba2e2d4dcf6f830efeafc7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:4bfbf0bdc882979bc94d85a4aeff8caa0ec7887aec7412e32ae1442811325d06_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:844e3d69d3c26914e02612466021592a876e6e2dd6cf77084723a70f567ba0e2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:bbe04eb8fd197f15875f498e3c18b9a7a445380efb5f696422d79df99a34a881_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:2c9f9b47c01c5e5e017c583c6a09c5c52f40ef88acf789689265cb31ef328fb8_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:7b5e883efde312c1571c4825b523ff04ab57af6a9f4162a36b80b973f9602c46_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:d896dd89fb924da246fc729041d9debc019d8a4210cfd3de8883834e429cca10_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:ede3e22d4e4de49789622149dec23beaa7e0569a3715ac2262929df543e05bc3_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:273a393b8c62fbc4edb4bf4033c47d8b52bda56fc9cafa289d9513210840815b_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:71f1b590785ce7f4577ecd687dbab9bc3c5931c568a3108eb84279c7aa892046_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:d1e1b4310eb64891c9456be7c34547bf36b0aafdeb471a49f0892d7eaf8f41f4_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:e0a7514406c7ffae080db6d4db3bbf7b77a606ea4632bf09f8301ce1d3739bb5_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:2a4c6c061d154ed9c74707a7a2e2390fde2a150f36197386c3e49c0612d345b2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:6ffcc051c955e198c6d96b59bda0ef26b5124ebbdef5357d36a84534f2c7097c_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:c9258bf58373f9c6859789c8ec272cd7d702c37e063fc2ee53c66d296e7ee3d0_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:d83c6bb4f2a91d2c4de3ffbf4aa8ceecb695f8491ba7586d55275c62cd1931e6_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:67637c5cba3eca1597885823c6e44c13db445d0ef38751eb8364b69dbf07caac_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:68fb5c2a3c8a0d5e6bbcf2c5568969f6b13e72006d4d54bc5c57cd9a032d1bf6_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:9f5fa40c88b0f5d1ae3634632240817a91f4575f8eae9c005b8e35a55cf38003_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:fcbcee9fc7e0bbf5775a33ae9b7e3d7e48a90e2aa1cb85605e05612b6e4d4e30_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:0c165bb93ce933c7f9998a615908bfcca0b4eb38e32e24a1c823e63791b7604b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:42aa392f82bdc45a3b857d1ed44e224ddfd14db1e3dcbb74dcc850ac0540e964_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:9dcd0c0ecf1523bf05bd296edbecd85841b2753dee7a5c9df32437f9a8e31471_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:c5505c462e6b2c04a6e14bc1e22dfc42dc8adea8f6eaf0615cd58b1973b7d62e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:1a93df314c31f10da7b1345fab07b15b846e28865764178e34124f84dc967152_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:34343f81973c3fbdd8630c32d0fad597745ea10f960ea64236408e58e0f10e14_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:7b3635784ebfb6343a73c9fa6de7bea57b3aacce1c49a0f7f250a471f7b897e3_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:f0a7fade2853193429bab16922b2e3bbe426e14632423d6550ff7dfb66d42827_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:94950d339fa382d6911f12fc23dcaf2cdb2854c4cab654f6058f5bf0df1bb371_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:bcfbd2284cbeeba5a835aaf5a5590ddd8156bd881ca24fd0fe1465fade1f84c2_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:bd739ced163053224e5b0ea2f3cd577481c6b6c1162cc0fbc186f1716b4a1fbd_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:d40496f114898985cde3860b9664c34d8c32de85e4d3d846df91a6ba27a2e99c_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:3f7cbe7605595d712e14d9a17717fafc6c6e334f2ad3e821c34947ec78411046_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:96775900ea90e57487da6afe59d058b33cb977a0247a1bbeb1bd07bed2816398_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:caa6b121538e074312314d9888d9b423bd225aefa4f25eb145893b9fc548c0ad_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:e59c90cfe8160b28f9d2aa9e59b1d04d742df44d2195210ebc1946ee3cb78b6f_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:10c95e5c55ccc1a04e8d2ac28bd1afd3b9bb9a7e9e2a5e3e8efb301421539980_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:60a310d4464b4817845703d14e95729321b883fbfc79fbf2dd8d514bb3c675e9_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:70e6c14d72f14d25a90f44043932fbd3f824b30e8ad4b36307100726b24d9c06_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:784129cf69b3bf77a907fe909fd73a2a4d0fbd947fe0037e47aa1d62c6ffcf0b_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:26e58654cdd092cb812207cb4473f5f5988ebd708d95c34152c2e8c124f7297d_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:40e5d9634aa7469df8247758961d486cfac3e7d7f0b59184e11ed5571b46bf40_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:5b59faed336de07965755c893cb9d0ffc52ec90f61cc8c54487f6c0cac53322e_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:b59aea0c9e859025988b0f0c9b6e7748c4acf6d0b4cee35f3fabb7b84feb598b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:2368703206d833e4cb73b7e8750efb9997633a6f9accbf032426bcfcae4c00d9_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:80b543b207e724e880ff932c514fe9c6a3925bfede1c31863531e4e69d050d40_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:82405a9a5715db5442dfa3d3f594888bd7b2f9c778d68357a7d8884f5ea46915_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:8fd2bda7b8d94ededf7973f76a159dd61105776a05d961ac9cfd9bee0a988213_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:4def845360282dad99181b96bcd834b4863eab39e246fda2476234c561c652ec_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:b67aec868b6366cf04f3980b15588e1a0af5c88b2248958bc3884261ad390ca0_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:ceacf3491ebec6f5613011fe8d36b66d00f8b3697832615a4d7024e23125085e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:d9f6a520b818dcccbedb94720b5979ef1cdec2e02491c76e3decb3ee18f2085d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:3e6519c0c789b946eb1b811867c41c4f204440bad5734760c0aca4e3fc602e5a_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:95684cfaf4d5d91bc9fe8cfbf64a6f113e944e3f0c102d27851be5232eca0dbb_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:9cb20990af88287dd8a27de4e4ef12eb244577a1844482d26107359c6efe8efa_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:a69ebb0c7e817d44cfabd86ad13ef4cc94a8bf5b6e8a607d17b197603d64a224_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:0eea35a3af36d08db945a70c387cc38eb326f75b4ed322f09d8c91863cfe5d02_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:22c48db227cd6f2ecec746674e31ac7f5a983a418679fc91678a0aa0ebb49496_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:8e8d249c39d562f819d347f12610dda7f5c01215c41101bfd5dca008e04edf6e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:f8adb8dd40a204bacb51cd423803097a514ec8e8e9f52209e02ecf14cad622bb_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:03adc6277e2bf409391941c6f4508154abc38a0c043139978754f6d4fd32c5a8_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:7e100af30ed11325cb2cbee02af09306e53df5db5847f2a4b733cd307e3cd623_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:91b474b4808b18c279c9f8eb3be8e6d1e1e47cf2b5f9553acd901c74b20bddbc_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:d56f884a9700a4f193d6f3db1895bd54745ec77e02ead3d43bd6e4fe04a2969e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:1f7ed606f69a74943aedb0a956e5a71019f8a1ab53cd3f8166be0f55a69809b9_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:4841076eb82f1f1748345556ff6c4e02a17f1f63c661e375eaba720291cbaf6a_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:a79ac7dcae109aa526e2a218327dd8c5dba2b924fc27447a07199b3b2f2f67b3_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:dee022821852f2d5ebdbbd9f09c9b97997a905061dadb3f78433291d462d49a7_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:1a746b16f362a83f399255d925b322b3440b3d89ae4d64ab7962db3d82ee91a1_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:417a31bec11c3ffb70f40fa955069d5160dc12e2426b67e1d2e35ae3f7fa06df_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:89a3cb77fdb3dcbddfe96785a9ba3fa2b6132098fce028f859663b31fcf77a34_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:b1ba0b4cd8f515895af7b9f797f6ea5b661f7254ce019ce5115375639dcd06e9_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:0827c96b922ca185b7a7321a4f504e8a5dc01aadafcfd20443060546981339a8_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:b5b732dfc0ce3d740781eda9a72e1542c7a30b28b39d2be6e0ba470af06a9680_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:f74081e5eb03227ccff5717a7d139ceee6c5b610625ff7b99e639a2652bf7663_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:f80976ae4fc332600e1d8e1d70b42c038ea05d76ac2c5b1d7d0cbaddbe89140a_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:4029ece83812237ce8b1d394252e9561012e8cd94af40680a90284fbea1bc32a_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:63a3465a7539a8a286c846a84d63e3feca9a11758e4c0d697889b0bdeb26a25c_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:81c227d7c7599b0d4357ccdc3b567f31b67bbd1198c9e7ddba1864c299bad11b_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:f392bde8ce22aca058d77132cc709440442931679dbe725c52516f1cdc97b38d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:4825fab15300bc911e0b2b5c4ae342004bfcff95fa64af0fdb1085fadd132aa2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:68f879679911c2ca828551b900eca1c2f4e8caec7312fbba502fabc4778d1832_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:b4188ac728c746769ef6586663dd6d7d07db984b083397d2c76fe847ef22ea60_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:f2805fc1e6f37bc8acc3187ea8712d38f32151d584c10d5996c0ad7076cd638b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:1c943edcf23df14f254e4aabb93cbc1665bbc7902076b3f04bd80edd2fe324db_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:84c5d2b24caf68c3a6a6d078bd9f66de9fb88e769f6c09c11a248693d463ac21_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:907d6e24922d6d372bceb21ad830c254c6a9c9d6be0ac4f4edf22c236437a09d_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:923a3ee0e3d5b7341b96826e465e6856855f2801dbaf381d139a632c77bda1c5_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:285d2e2d103b458f0603435aedb4d779d85e48fed2267845b798f4a04a0df4c7_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:44981f5fcbc9086470143fae6e21a5de3baad2258d9f8c81accecb2faad6b2a2_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:5ba248d0bc8fcde70e210319bb962f4043e5e8ab8a5625c8f8f30ec96d47c6b7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:f681cdac28ee9ff6375fb39d7b7d12917a06043db44c16e8f84bdb9e09e7b5e7_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:2057531884d897574fc0648e5d3cf21c4549738ac5f35d8095f400cdb80049cc_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:8be0e50a132a2c974893f36b51f3f40b6d6e1f913ae0f9ee6319ef0d5ec455b7_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:a2edc5d233d1547fa2e1d01f29d8a914930735f7098289892430ba9a17d20ab7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:c81c7aeb3dd05801e279a9fcc8d6c3baf00a2ccc08eab53f8acc8bd4d2d129c4_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:25e17bf203568420587cf5907e84e4167afab84dfce549c91bea99e70290b742_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:277f4e8ac5fc292b9f0f2d123f924c6b5cbc0a2eeba3c87a0e61c5ee2399aaa9_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:76766b77ed53513cd254195b25d205ab6964522816e1e3662800e38a105abdf2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:c7ace45f7cb86055e2ba18e27a660f6aa6cb4eff497204294875d5dd1d63cce3_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:3780b1bc80ab7ebc3cfed06ce69346d589dc07b53cea65ad3ed92cc912284300_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:681b356709778083448892513b4559f693e002bfda897a57e2d065f736a902b5_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:d110b52ce8ea022b3d35e7c4b0ce3b646f30513cf8abb55327132565ea4a6a87_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:f076ab59f3abe061e4553a61f98a144a472297dba5ed924ca887f130e9372da9_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation"
},
{
"cve": "CVE-2026-50151",
"cwe": {
"id": "CWE-522",
"name": "Insufficiently Protected Credentials"
},
"discovery_date": "2026-07-01T21:35:45+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:31bd91156f49687d2efffd3be971d9ee0e16abb420b8e8b958caa88b97770020_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:a6315866c67ba350665f5a92f960a5a44e427ca37ae7505e2072af4e02c42f76_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:b3ad6fa1de658f3a40c8b183ab501ebc66b359d8cc01439d4215aa52769df213_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:bfde9ebea1fcd27b6d104d5f67db62e870878f9517ccbec2f649dd2c1af4a073_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:08fed161d59299881ff7a54db859feaf8ed7bdb8238d6cf12628ccb73575665e_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:09436fe2649ca384b1bc1fd8f736fb1d71392733310e66758ed9f289e00471f9_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:3b83670e1c0e9d1f5b76bd7b75d77072bc6208646bc2201bd0bd200dbc59e34a_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:927146f966e4c5c2908d29d8ab45a8f3071dbd5ebd9cf0424460a23f814a72a7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:38a3bc59511133cae56827eba879e7c82c5a974bf1f16b6e8d95e1f79821e669_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:3fa04db82e3ce6169270db0ce29107b69d8e044e0a1ab13a2bf1050b8c26d087_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:6041a918713d4464c73560b68c294a12d33f297a980d2f9d0e0cc8c300a96f24_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:98bd72ba69bdfb3070d87b3edcbd7050579a514b72cfd67c2926541ba52dbaf7_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:938abc970731c2eeda8e2b7b73e96d4dfcbf7587330c7b7e52117a577700e426_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:a0876a25ce85d7d4616212813f012422826f152b8d71065e75cd9c3e23034d8a_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:c77077a0cca835a503a6529c89ab19c4027f949d361afdf8a5a259e1e87b0d55_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:d5bbf3fe886f27cdc27363dcb175e004487d9c8f36de4f1f8516fbeda3a95224_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:0f5d8cae3ba4ea4fcdc5fb9d08f797d576bc225b92af66f193bd4b1324cda4b9_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:2d3588825f8a714fa59b1648d0934d064165e333f322f7f31f01f07b940d42d9_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:68aa571827f5331f1d5a3bd0c60ad441a18877ba11921aff2633940236bafcd4_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:9b80c9c61d4befefa7f6a65ae8c001ce7e343a1e4f251e5ebe025625d9511730_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:9b2c24401a91903f023096d2b641aa977acff423eb6770a8e4c4a81aecfd4e62_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:9d74585acc098c13f3e9dac5ae7f5ef337fa82bd7119d7f1849c5f8a50e84907_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:a6ee95d0ed82bddef084684d11fa770bd646d9be9bc65b3bc386d7c58b33975c_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:f7b8654eb8bf675c8c26f0ad395d790f990308d3ad6683bb61b484c92073bbac_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:2a598e7fd07db27100d9a53a328ac9a0535865883bddd1373f4f1f2705068d2f_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:4f8f0b02d0969753e156226a998d442746c238a2a50ea606a49ca0cf695b8925_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:63c02348faa7d4e26e35c69aef5453613dd607a26116823b931b89fe5311e181_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:ae224866f0085d2c00ab18a28d2aed076e455731903989a49a544abf49950d1f_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:0a90a13f006ef0b271079b728ef6d54081f36ae19b6d0e9ab4dc24ea52a30fad_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:3a53629645832974a883002e53198df7c28e59dd6d1df99bf321b52d0ef84b61_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:879315f438ca43abb607d6c97f8fbd4ca2d38209b142e2d97cc0598740273252_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:c6c4d01f5fcee6cad3fc870cace92f45000624760e6e93654bb5e814afeed7bb_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:50f7647620c78fd6b445379c8762f5e978113fe3552906376a24459263f27459_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:53e641f48ddc05c63da2e6bc24e9e4636a10de2c3599d8f5f78622bdebca07ca_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:57114b7a386c406715e342637558fab57afeef2e193517f99173a441f39401d5_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:dcdcaa90f292f2d7ad3f10acbedfab9f7f22f3432c3156055f34760d9bf9429c_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:3723b1d5c74f37cba219e203fd2026a718d4821595cb505ec6626684695da65b_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:562291f52b6bce98ec8795856b808545c4fe30047b54544c7f6c2ab4678480ff_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:e6dfac9bc3e467e141a425944782f5087ed967ac4d02d8d47442e3d61ba5b882_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:f683186c2cc8be9ec09b8efdec66d6b8b1f991c7f7b9fd398dc7c3f9ab8b3079_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:2471edd63a94473c68cf37ee50de643e40003f2c5bba84063c154e4888a7f0bd_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:7cef49d68df5d8efe52061a18920e07e6c7efa3016c0cea7d1747e67851f254a_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:d912383405599032acffbad22bc154f63a87dd429ba882fd7a94cb82fe650d8e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:f3034211e16de48af540efe4ee460395dba0a4a544fa4f277a12840a25df1730_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:181d1decb2f16fcf6f5938027ed346aca29126687bbe6cdcc601c25087f70d11_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:ab5e4d27e23448d99a37b8c05442bb1254083cdc4ff325e721d97d80ec27346c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:ac172243d158e126594f28317e0cfb37dc1790c9f2121e95fe52506b5e05fc91_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:fd96b6284d270effa0f838d960ea4218b72b54c4718513eb523658f2f4972682_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:c59d9cd479c62730eda5d482fb2f4e9fbc17a90a5a2861b130aafe1f3a27a333_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:e547f672b14b6e8fc2ffd300b150aedbd3f6b6b36ddcad612f7c992a936a7c82_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:ead1263d538974c48790c65e44cd9cab07a62c2893b2eeb250174e7cf58d7f9d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:ed0457a57c7b39b79fb308176f45ffe678938b25fbb8c15de2cedbe54b916f64_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:9847a5752ec77e17861dcdac5546ee5c53679c80c3569609b21d9080ee3b7ef3_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:d3c823e61a0682ddc85e576e86234e580992886de471035630f9c89bbad6ebb7_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:ded425ed0af88a1411a06e5191aee25c4c59f1de85b041eba95c9997686cf09e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:ee63f59942f9df04e95fc4266f0d194cd62a7ca08dd5478283884d0ab6003da7_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:724377cabaa284a5197e7505a7150c89631c2f2bcc629e074c7c0be18abd8e6f_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:cbf797c9e93413540b20ebee9191375ddd8185ef22dc8c9e23cc3a4c015abaf7_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:d7609d62a801cf07ef639abcd4f193b2d68967fadebbfddf2349003d7e9eaa44_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:f61fe90362f793225591eb7e2a86d5cdc6fb35aa087e9b6a6218a42b1c1d945d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:1c4de9460688800b62bad6fb13653ef4b52bf215e4d41674291193e9b8e71b24_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:4f1e59610b2fbedc56f425b3fbd8f16c9ea6ea96025f18a404fe48f6a49bdc1e_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:ab0d28306dd6daa03af79bdc2ea650e59a50a03317987c4cdd0d1ee70f95b597_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:b700a8bb7ea6e4253afb8bcf94e5ad086349980ca0716a87817724d3da3fdce1_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4015f46d2172db26a348635e2e8cbd4bbcdbbaa56a4b12c232676a3d0f5bbee2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4169252c61ec70b91b10c750d5f9ecd53f5c3c906766bba9103afbac3c3f9edf_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4ab72a192553c21de76754f06fe38cf443e686e4b4edc2aa2ceb2b6b9d95bb6c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:579ef0925c6f56ed48f22121767189431bef6c4eaa72b2648a1b91488357a51d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:2b796bf55ecf7a14d1c87d829a2b20d998fc2943686373105b0a50f5053ef836_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:7e960b59f64547f7e9602b7c066a51ab52aba929726aec2bacdf486a9d4d28fd_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:a43e430a2ec0b86fb6ade361677be298b4e27444388a9bca35ddafbf9c77277c_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:d2394b121256985e5ca322aea77bb0bf999ba2d7a6f1627e62bbc125c475dbbd_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:1868e2ea03d063b4cd64601cb0aaf5c9ea7f55e83eba2e2d4dcf6f830efeafc7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:4bfbf0bdc882979bc94d85a4aeff8caa0ec7887aec7412e32ae1442811325d06_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:844e3d69d3c26914e02612466021592a876e6e2dd6cf77084723a70f567ba0e2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:bbe04eb8fd197f15875f498e3c18b9a7a445380efb5f696422d79df99a34a881_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:2c9f9b47c01c5e5e017c583c6a09c5c52f40ef88acf789689265cb31ef328fb8_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:7b5e883efde312c1571c4825b523ff04ab57af6a9f4162a36b80b973f9602c46_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:d896dd89fb924da246fc729041d9debc019d8a4210cfd3de8883834e429cca10_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:ede3e22d4e4de49789622149dec23beaa7e0569a3715ac2262929df543e05bc3_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:273a393b8c62fbc4edb4bf4033c47d8b52bda56fc9cafa289d9513210840815b_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:71f1b590785ce7f4577ecd687dbab9bc3c5931c568a3108eb84279c7aa892046_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:d1e1b4310eb64891c9456be7c34547bf36b0aafdeb471a49f0892d7eaf8f41f4_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:e0a7514406c7ffae080db6d4db3bbf7b77a606ea4632bf09f8301ce1d3739bb5_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:2a4c6c061d154ed9c74707a7a2e2390fde2a150f36197386c3e49c0612d345b2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:6ffcc051c955e198c6d96b59bda0ef26b5124ebbdef5357d36a84534f2c7097c_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:c9258bf58373f9c6859789c8ec272cd7d702c37e063fc2ee53c66d296e7ee3d0_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:d83c6bb4f2a91d2c4de3ffbf4aa8ceecb695f8491ba7586d55275c62cd1931e6_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:67637c5cba3eca1597885823c6e44c13db445d0ef38751eb8364b69dbf07caac_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:68fb5c2a3c8a0d5e6bbcf2c5568969f6b13e72006d4d54bc5c57cd9a032d1bf6_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:9f5fa40c88b0f5d1ae3634632240817a91f4575f8eae9c005b8e35a55cf38003_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:fcbcee9fc7e0bbf5775a33ae9b7e3d7e48a90e2aa1cb85605e05612b6e4d4e30_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:0c165bb93ce933c7f9998a615908bfcca0b4eb38e32e24a1c823e63791b7604b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:42aa392f82bdc45a3b857d1ed44e224ddfd14db1e3dcbb74dcc850ac0540e964_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:9dcd0c0ecf1523bf05bd296edbecd85841b2753dee7a5c9df32437f9a8e31471_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:c5505c462e6b2c04a6e14bc1e22dfc42dc8adea8f6eaf0615cd58b1973b7d62e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:1a93df314c31f10da7b1345fab07b15b846e28865764178e34124f84dc967152_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:34343f81973c3fbdd8630c32d0fad597745ea10f960ea64236408e58e0f10e14_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:7b3635784ebfb6343a73c9fa6de7bea57b3aacce1c49a0f7f250a471f7b897e3_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:f0a7fade2853193429bab16922b2e3bbe426e14632423d6550ff7dfb66d42827_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:94950d339fa382d6911f12fc23dcaf2cdb2854c4cab654f6058f5bf0df1bb371_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:bcfbd2284cbeeba5a835aaf5a5590ddd8156bd881ca24fd0fe1465fade1f84c2_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:bd739ced163053224e5b0ea2f3cd577481c6b6c1162cc0fbc186f1716b4a1fbd_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:d40496f114898985cde3860b9664c34d8c32de85e4d3d846df91a6ba27a2e99c_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:3f7cbe7605595d712e14d9a17717fafc6c6e334f2ad3e821c34947ec78411046_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:96775900ea90e57487da6afe59d058b33cb977a0247a1bbeb1bd07bed2816398_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:caa6b121538e074312314d9888d9b423bd225aefa4f25eb145893b9fc548c0ad_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:e59c90cfe8160b28f9d2aa9e59b1d04d742df44d2195210ebc1946ee3cb78b6f_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:10c95e5c55ccc1a04e8d2ac28bd1afd3b9bb9a7e9e2a5e3e8efb301421539980_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:60a310d4464b4817845703d14e95729321b883fbfc79fbf2dd8d514bb3c675e9_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:70e6c14d72f14d25a90f44043932fbd3f824b30e8ad4b36307100726b24d9c06_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:784129cf69b3bf77a907fe909fd73a2a4d0fbd947fe0037e47aa1d62c6ffcf0b_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:2368703206d833e4cb73b7e8750efb9997633a6f9accbf032426bcfcae4c00d9_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:80b543b207e724e880ff932c514fe9c6a3925bfede1c31863531e4e69d050d40_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:82405a9a5715db5442dfa3d3f594888bd7b2f9c778d68357a7d8884f5ea46915_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:8fd2bda7b8d94ededf7973f76a159dd61105776a05d961ac9cfd9bee0a988213_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:4def845360282dad99181b96bcd834b4863eab39e246fda2476234c561c652ec_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:b67aec868b6366cf04f3980b15588e1a0af5c88b2248958bc3884261ad390ca0_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:ceacf3491ebec6f5613011fe8d36b66d00f8b3697832615a4d7024e23125085e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:d9f6a520b818dcccbedb94720b5979ef1cdec2e02491c76e3decb3ee18f2085d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:03adc6277e2bf409391941c6f4508154abc38a0c043139978754f6d4fd32c5a8_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:7e100af30ed11325cb2cbee02af09306e53df5db5847f2a4b733cd307e3cd623_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:91b474b4808b18c279c9f8eb3be8e6d1e1e47cf2b5f9553acd901c74b20bddbc_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:d56f884a9700a4f193d6f3db1895bd54745ec77e02ead3d43bd6e4fe04a2969e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:1f7ed606f69a74943aedb0a956e5a71019f8a1ab53cd3f8166be0f55a69809b9_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:4841076eb82f1f1748345556ff6c4e02a17f1f63c661e375eaba720291cbaf6a_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:a79ac7dcae109aa526e2a218327dd8c5dba2b924fc27447a07199b3b2f2f67b3_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:dee022821852f2d5ebdbbd9f09c9b97997a905061dadb3f78433291d462d49a7_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:1a746b16f362a83f399255d925b322b3440b3d89ae4d64ab7962db3d82ee91a1_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:417a31bec11c3ffb70f40fa955069d5160dc12e2426b67e1d2e35ae3f7fa06df_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:89a3cb77fdb3dcbddfe96785a9ba3fa2b6132098fce028f859663b31fcf77a34_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:b1ba0b4cd8f515895af7b9f797f6ea5b661f7254ce019ce5115375639dcd06e9_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:0827c96b922ca185b7a7321a4f504e8a5dc01aadafcfd20443060546981339a8_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:b5b732dfc0ce3d740781eda9a72e1542c7a30b28b39d2be6e0ba470af06a9680_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:f74081e5eb03227ccff5717a7d139ceee6c5b610625ff7b99e639a2652bf7663_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:f80976ae4fc332600e1d8e1d70b42c038ea05d76ac2c5b1d7d0cbaddbe89140a_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:4029ece83812237ce8b1d394252e9561012e8cd94af40680a90284fbea1bc32a_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:63a3465a7539a8a286c846a84d63e3feca9a11758e4c0d697889b0bdeb26a25c_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:81c227d7c7599b0d4357ccdc3b567f31b67bbd1198c9e7ddba1864c299bad11b_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:f392bde8ce22aca058d77132cc709440442931679dbe725c52516f1cdc97b38d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:4825fab15300bc911e0b2b5c4ae342004bfcff95fa64af0fdb1085fadd132aa2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:68f879679911c2ca828551b900eca1c2f4e8caec7312fbba502fabc4778d1832_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:b4188ac728c746769ef6586663dd6d7d07db984b083397d2c76fe847ef22ea60_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:f2805fc1e6f37bc8acc3187ea8712d38f32151d584c10d5996c0ad7076cd638b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:1c943edcf23df14f254e4aabb93cbc1665bbc7902076b3f04bd80edd2fe324db_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:84c5d2b24caf68c3a6a6d078bd9f66de9fb88e769f6c09c11a248693d463ac21_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:907d6e24922d6d372bceb21ad830c254c6a9c9d6be0ac4f4edf22c236437a09d_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:923a3ee0e3d5b7341b96826e465e6856855f2801dbaf381d139a632c77bda1c5_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:285d2e2d103b458f0603435aedb4d779d85e48fed2267845b798f4a04a0df4c7_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:44981f5fcbc9086470143fae6e21a5de3baad2258d9f8c81accecb2faad6b2a2_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:5ba248d0bc8fcde70e210319bb962f4043e5e8ab8a5625c8f8f30ec96d47c6b7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:f681cdac28ee9ff6375fb39d7b7d12917a06043db44c16e8f84bdb9e09e7b5e7_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:2057531884d897574fc0648e5d3cf21c4549738ac5f35d8095f400cdb80049cc_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:8be0e50a132a2c974893f36b51f3f40b6d6e1f913ae0f9ee6319ef0d5ec455b7_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:a2edc5d233d1547fa2e1d01f29d8a914930735f7098289892430ba9a17d20ab7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:c81c7aeb3dd05801e279a9fcc8d6c3baf00a2ccc08eab53f8acc8bd4d2d129c4_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:25e17bf203568420587cf5907e84e4167afab84dfce549c91bea99e70290b742_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:277f4e8ac5fc292b9f0f2d123f924c6b5cbc0a2eeba3c87a0e61c5ee2399aaa9_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:76766b77ed53513cd254195b25d205ab6964522816e1e3662800e38a105abdf2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:c7ace45f7cb86055e2ba18e27a660f6aa6cb4eff497204294875d5dd1d63cce3_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:3780b1bc80ab7ebc3cfed06ce69346d589dc07b53cea65ad3ed92cc912284300_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:681b356709778083448892513b4559f693e002bfda897a57e2d065f736a902b5_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:d110b52ce8ea022b3d35e7c4b0ce3b646f30513cf8abb55327132565ea4a6a87_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:f076ab59f3abe061e4553a61f98a144a472297dba5ed924ca887f130e9372da9_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2499693"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in oras-go. During the monolithic blob upload process, oras-go reuses the Authorization header for subsequent requests, even if a malicious registry provides a cross-host Location header. This vulnerability allows an attacker-controlled endpoint to receive the caller\u0027s credentials, leading to information disclosure. Additionally, it can enable client-side Server-Side Request Forgery (SSRF) to a cross-host target.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "oras-go: oras-go: Credential forwarding via unvalidated Location header during blob upload",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in oras-go. During monolithic blob upload, the Authorization header is reused for cross-host Location redirects, allowing a malicious registry to exfiltrate caller credentials.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:26e58654cdd092cb812207cb4473f5f5988ebd708d95c34152c2e8c124f7297d_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:40e5d9634aa7469df8247758961d486cfac3e7d7f0b59184e11ed5571b46bf40_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:5b59faed336de07965755c893cb9d0ffc52ec90f61cc8c54487f6c0cac53322e_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:b59aea0c9e859025988b0f0c9b6e7748c4acf6d0b4cee35f3fabb7b84feb598b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:3e6519c0c789b946eb1b811867c41c4f204440bad5734760c0aca4e3fc602e5a_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:95684cfaf4d5d91bc9fe8cfbf64a6f113e944e3f0c102d27851be5232eca0dbb_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:9cb20990af88287dd8a27de4e4ef12eb244577a1844482d26107359c6efe8efa_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:a69ebb0c7e817d44cfabd86ad13ef4cc94a8bf5b6e8a607d17b197603d64a224_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:0eea35a3af36d08db945a70c387cc38eb326f75b4ed322f09d8c91863cfe5d02_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:22c48db227cd6f2ecec746674e31ac7f5a983a418679fc91678a0aa0ebb49496_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:8e8d249c39d562f819d347f12610dda7f5c01215c41101bfd5dca008e04edf6e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:f8adb8dd40a204bacb51cd423803097a514ec8e8e9f52209e02ecf14cad622bb_ppc64le"
],
"known_not_affected": [
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:31bd91156f49687d2efffd3be971d9ee0e16abb420b8e8b958caa88b97770020_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:a6315866c67ba350665f5a92f960a5a44e427ca37ae7505e2072af4e02c42f76_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:b3ad6fa1de658f3a40c8b183ab501ebc66b359d8cc01439d4215aa52769df213_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:bfde9ebea1fcd27b6d104d5f67db62e870878f9517ccbec2f649dd2c1af4a073_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:08fed161d59299881ff7a54db859feaf8ed7bdb8238d6cf12628ccb73575665e_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:09436fe2649ca384b1bc1fd8f736fb1d71392733310e66758ed9f289e00471f9_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:3b83670e1c0e9d1f5b76bd7b75d77072bc6208646bc2201bd0bd200dbc59e34a_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:927146f966e4c5c2908d29d8ab45a8f3071dbd5ebd9cf0424460a23f814a72a7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:38a3bc59511133cae56827eba879e7c82c5a974bf1f16b6e8d95e1f79821e669_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:3fa04db82e3ce6169270db0ce29107b69d8e044e0a1ab13a2bf1050b8c26d087_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:6041a918713d4464c73560b68c294a12d33f297a980d2f9d0e0cc8c300a96f24_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:98bd72ba69bdfb3070d87b3edcbd7050579a514b72cfd67c2926541ba52dbaf7_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:938abc970731c2eeda8e2b7b73e96d4dfcbf7587330c7b7e52117a577700e426_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:a0876a25ce85d7d4616212813f012422826f152b8d71065e75cd9c3e23034d8a_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:c77077a0cca835a503a6529c89ab19c4027f949d361afdf8a5a259e1e87b0d55_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:d5bbf3fe886f27cdc27363dcb175e004487d9c8f36de4f1f8516fbeda3a95224_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:0f5d8cae3ba4ea4fcdc5fb9d08f797d576bc225b92af66f193bd4b1324cda4b9_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:2d3588825f8a714fa59b1648d0934d064165e333f322f7f31f01f07b940d42d9_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:68aa571827f5331f1d5a3bd0c60ad441a18877ba11921aff2633940236bafcd4_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:9b80c9c61d4befefa7f6a65ae8c001ce7e343a1e4f251e5ebe025625d9511730_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:9b2c24401a91903f023096d2b641aa977acff423eb6770a8e4c4a81aecfd4e62_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:9d74585acc098c13f3e9dac5ae7f5ef337fa82bd7119d7f1849c5f8a50e84907_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:a6ee95d0ed82bddef084684d11fa770bd646d9be9bc65b3bc386d7c58b33975c_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:f7b8654eb8bf675c8c26f0ad395d790f990308d3ad6683bb61b484c92073bbac_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:2a598e7fd07db27100d9a53a328ac9a0535865883bddd1373f4f1f2705068d2f_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:4f8f0b02d0969753e156226a998d442746c238a2a50ea606a49ca0cf695b8925_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:63c02348faa7d4e26e35c69aef5453613dd607a26116823b931b89fe5311e181_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:ae224866f0085d2c00ab18a28d2aed076e455731903989a49a544abf49950d1f_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:0a90a13f006ef0b271079b728ef6d54081f36ae19b6d0e9ab4dc24ea52a30fad_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:3a53629645832974a883002e53198df7c28e59dd6d1df99bf321b52d0ef84b61_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:879315f438ca43abb607d6c97f8fbd4ca2d38209b142e2d97cc0598740273252_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:c6c4d01f5fcee6cad3fc870cace92f45000624760e6e93654bb5e814afeed7bb_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:50f7647620c78fd6b445379c8762f5e978113fe3552906376a24459263f27459_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:53e641f48ddc05c63da2e6bc24e9e4636a10de2c3599d8f5f78622bdebca07ca_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:57114b7a386c406715e342637558fab57afeef2e193517f99173a441f39401d5_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:dcdcaa90f292f2d7ad3f10acbedfab9f7f22f3432c3156055f34760d9bf9429c_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:3723b1d5c74f37cba219e203fd2026a718d4821595cb505ec6626684695da65b_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:562291f52b6bce98ec8795856b808545c4fe30047b54544c7f6c2ab4678480ff_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:e6dfac9bc3e467e141a425944782f5087ed967ac4d02d8d47442e3d61ba5b882_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:f683186c2cc8be9ec09b8efdec66d6b8b1f991c7f7b9fd398dc7c3f9ab8b3079_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:2471edd63a94473c68cf37ee50de643e40003f2c5bba84063c154e4888a7f0bd_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:7cef49d68df5d8efe52061a18920e07e6c7efa3016c0cea7d1747e67851f254a_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:d912383405599032acffbad22bc154f63a87dd429ba882fd7a94cb82fe650d8e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:f3034211e16de48af540efe4ee460395dba0a4a544fa4f277a12840a25df1730_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:181d1decb2f16fcf6f5938027ed346aca29126687bbe6cdcc601c25087f70d11_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:ab5e4d27e23448d99a37b8c05442bb1254083cdc4ff325e721d97d80ec27346c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:ac172243d158e126594f28317e0cfb37dc1790c9f2121e95fe52506b5e05fc91_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:fd96b6284d270effa0f838d960ea4218b72b54c4718513eb523658f2f4972682_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:c59d9cd479c62730eda5d482fb2f4e9fbc17a90a5a2861b130aafe1f3a27a333_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:e547f672b14b6e8fc2ffd300b150aedbd3f6b6b36ddcad612f7c992a936a7c82_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:ead1263d538974c48790c65e44cd9cab07a62c2893b2eeb250174e7cf58d7f9d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:ed0457a57c7b39b79fb308176f45ffe678938b25fbb8c15de2cedbe54b916f64_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:9847a5752ec77e17861dcdac5546ee5c53679c80c3569609b21d9080ee3b7ef3_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:d3c823e61a0682ddc85e576e86234e580992886de471035630f9c89bbad6ebb7_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:ded425ed0af88a1411a06e5191aee25c4c59f1de85b041eba95c9997686cf09e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:ee63f59942f9df04e95fc4266f0d194cd62a7ca08dd5478283884d0ab6003da7_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:724377cabaa284a5197e7505a7150c89631c2f2bcc629e074c7c0be18abd8e6f_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:cbf797c9e93413540b20ebee9191375ddd8185ef22dc8c9e23cc3a4c015abaf7_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:d7609d62a801cf07ef639abcd4f193b2d68967fadebbfddf2349003d7e9eaa44_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:f61fe90362f793225591eb7e2a86d5cdc6fb35aa087e9b6a6218a42b1c1d945d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:1c4de9460688800b62bad6fb13653ef4b52bf215e4d41674291193e9b8e71b24_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:4f1e59610b2fbedc56f425b3fbd8f16c9ea6ea96025f18a404fe48f6a49bdc1e_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:ab0d28306dd6daa03af79bdc2ea650e59a50a03317987c4cdd0d1ee70f95b597_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:b700a8bb7ea6e4253afb8bcf94e5ad086349980ca0716a87817724d3da3fdce1_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4015f46d2172db26a348635e2e8cbd4bbcdbbaa56a4b12c232676a3d0f5bbee2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4169252c61ec70b91b10c750d5f9ecd53f5c3c906766bba9103afbac3c3f9edf_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4ab72a192553c21de76754f06fe38cf443e686e4b4edc2aa2ceb2b6b9d95bb6c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:579ef0925c6f56ed48f22121767189431bef6c4eaa72b2648a1b91488357a51d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:2b796bf55ecf7a14d1c87d829a2b20d998fc2943686373105b0a50f5053ef836_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:7e960b59f64547f7e9602b7c066a51ab52aba929726aec2bacdf486a9d4d28fd_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:a43e430a2ec0b86fb6ade361677be298b4e27444388a9bca35ddafbf9c77277c_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:d2394b121256985e5ca322aea77bb0bf999ba2d7a6f1627e62bbc125c475dbbd_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:1868e2ea03d063b4cd64601cb0aaf5c9ea7f55e83eba2e2d4dcf6f830efeafc7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:4bfbf0bdc882979bc94d85a4aeff8caa0ec7887aec7412e32ae1442811325d06_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:844e3d69d3c26914e02612466021592a876e6e2dd6cf77084723a70f567ba0e2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:bbe04eb8fd197f15875f498e3c18b9a7a445380efb5f696422d79df99a34a881_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:2c9f9b47c01c5e5e017c583c6a09c5c52f40ef88acf789689265cb31ef328fb8_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:7b5e883efde312c1571c4825b523ff04ab57af6a9f4162a36b80b973f9602c46_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:d896dd89fb924da246fc729041d9debc019d8a4210cfd3de8883834e429cca10_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:ede3e22d4e4de49789622149dec23beaa7e0569a3715ac2262929df543e05bc3_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:273a393b8c62fbc4edb4bf4033c47d8b52bda56fc9cafa289d9513210840815b_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:71f1b590785ce7f4577ecd687dbab9bc3c5931c568a3108eb84279c7aa892046_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:d1e1b4310eb64891c9456be7c34547bf36b0aafdeb471a49f0892d7eaf8f41f4_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:e0a7514406c7ffae080db6d4db3bbf7b77a606ea4632bf09f8301ce1d3739bb5_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:2a4c6c061d154ed9c74707a7a2e2390fde2a150f36197386c3e49c0612d345b2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:6ffcc051c955e198c6d96b59bda0ef26b5124ebbdef5357d36a84534f2c7097c_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:c9258bf58373f9c6859789c8ec272cd7d702c37e063fc2ee53c66d296e7ee3d0_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:d83c6bb4f2a91d2c4de3ffbf4aa8ceecb695f8491ba7586d55275c62cd1931e6_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:67637c5cba3eca1597885823c6e44c13db445d0ef38751eb8364b69dbf07caac_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:68fb5c2a3c8a0d5e6bbcf2c5568969f6b13e72006d4d54bc5c57cd9a032d1bf6_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:9f5fa40c88b0f5d1ae3634632240817a91f4575f8eae9c005b8e35a55cf38003_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:fcbcee9fc7e0bbf5775a33ae9b7e3d7e48a90e2aa1cb85605e05612b6e4d4e30_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:0c165bb93ce933c7f9998a615908bfcca0b4eb38e32e24a1c823e63791b7604b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:42aa392f82bdc45a3b857d1ed44e224ddfd14db1e3dcbb74dcc850ac0540e964_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:9dcd0c0ecf1523bf05bd296edbecd85841b2753dee7a5c9df32437f9a8e31471_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:c5505c462e6b2c04a6e14bc1e22dfc42dc8adea8f6eaf0615cd58b1973b7d62e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:1a93df314c31f10da7b1345fab07b15b846e28865764178e34124f84dc967152_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:34343f81973c3fbdd8630c32d0fad597745ea10f960ea64236408e58e0f10e14_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:7b3635784ebfb6343a73c9fa6de7bea57b3aacce1c49a0f7f250a471f7b897e3_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:f0a7fade2853193429bab16922b2e3bbe426e14632423d6550ff7dfb66d42827_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:94950d339fa382d6911f12fc23dcaf2cdb2854c4cab654f6058f5bf0df1bb371_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:bcfbd2284cbeeba5a835aaf5a5590ddd8156bd881ca24fd0fe1465fade1f84c2_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:bd739ced163053224e5b0ea2f3cd577481c6b6c1162cc0fbc186f1716b4a1fbd_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:d40496f114898985cde3860b9664c34d8c32de85e4d3d846df91a6ba27a2e99c_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:3f7cbe7605595d712e14d9a17717fafc6c6e334f2ad3e821c34947ec78411046_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:96775900ea90e57487da6afe59d058b33cb977a0247a1bbeb1bd07bed2816398_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:caa6b121538e074312314d9888d9b423bd225aefa4f25eb145893b9fc548c0ad_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:e59c90cfe8160b28f9d2aa9e59b1d04d742df44d2195210ebc1946ee3cb78b6f_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:10c95e5c55ccc1a04e8d2ac28bd1afd3b9bb9a7e9e2a5e3e8efb301421539980_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:60a310d4464b4817845703d14e95729321b883fbfc79fbf2dd8d514bb3c675e9_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:70e6c14d72f14d25a90f44043932fbd3f824b30e8ad4b36307100726b24d9c06_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:784129cf69b3bf77a907fe909fd73a2a4d0fbd947fe0037e47aa1d62c6ffcf0b_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:2368703206d833e4cb73b7e8750efb9997633a6f9accbf032426bcfcae4c00d9_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:80b543b207e724e880ff932c514fe9c6a3925bfede1c31863531e4e69d050d40_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:82405a9a5715db5442dfa3d3f594888bd7b2f9c778d68357a7d8884f5ea46915_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:8fd2bda7b8d94ededf7973f76a159dd61105776a05d961ac9cfd9bee0a988213_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:4def845360282dad99181b96bcd834b4863eab39e246fda2476234c561c652ec_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:b67aec868b6366cf04f3980b15588e1a0af5c88b2248958bc3884261ad390ca0_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:ceacf3491ebec6f5613011fe8d36b66d00f8b3697832615a4d7024e23125085e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:d9f6a520b818dcccbedb94720b5979ef1cdec2e02491c76e3decb3ee18f2085d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:03adc6277e2bf409391941c6f4508154abc38a0c043139978754f6d4fd32c5a8_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:7e100af30ed11325cb2cbee02af09306e53df5db5847f2a4b733cd307e3cd623_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:91b474b4808b18c279c9f8eb3be8e6d1e1e47cf2b5f9553acd901c74b20bddbc_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:d56f884a9700a4f193d6f3db1895bd54745ec77e02ead3d43bd6e4fe04a2969e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:1f7ed606f69a74943aedb0a956e5a71019f8a1ab53cd3f8166be0f55a69809b9_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:4841076eb82f1f1748345556ff6c4e02a17f1f63c661e375eaba720291cbaf6a_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:a79ac7dcae109aa526e2a218327dd8c5dba2b924fc27447a07199b3b2f2f67b3_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:dee022821852f2d5ebdbbd9f09c9b97997a905061dadb3f78433291d462d49a7_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:1a746b16f362a83f399255d925b322b3440b3d89ae4d64ab7962db3d82ee91a1_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:417a31bec11c3ffb70f40fa955069d5160dc12e2426b67e1d2e35ae3f7fa06df_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:89a3cb77fdb3dcbddfe96785a9ba3fa2b6132098fce028f859663b31fcf77a34_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:b1ba0b4cd8f515895af7b9f797f6ea5b661f7254ce019ce5115375639dcd06e9_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:0827c96b922ca185b7a7321a4f504e8a5dc01aadafcfd20443060546981339a8_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:b5b732dfc0ce3d740781eda9a72e1542c7a30b28b39d2be6e0ba470af06a9680_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:f74081e5eb03227ccff5717a7d139ceee6c5b610625ff7b99e639a2652bf7663_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:f80976ae4fc332600e1d8e1d70b42c038ea05d76ac2c5b1d7d0cbaddbe89140a_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:4029ece83812237ce8b1d394252e9561012e8cd94af40680a90284fbea1bc32a_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:63a3465a7539a8a286c846a84d63e3feca9a11758e4c0d697889b0bdeb26a25c_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:81c227d7c7599b0d4357ccdc3b567f31b67bbd1198c9e7ddba1864c299bad11b_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:f392bde8ce22aca058d77132cc709440442931679dbe725c52516f1cdc97b38d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:4825fab15300bc911e0b2b5c4ae342004bfcff95fa64af0fdb1085fadd132aa2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:68f879679911c2ca828551b900eca1c2f4e8caec7312fbba502fabc4778d1832_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:b4188ac728c746769ef6586663dd6d7d07db984b083397d2c76fe847ef22ea60_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:f2805fc1e6f37bc8acc3187ea8712d38f32151d584c10d5996c0ad7076cd638b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:1c943edcf23df14f254e4aabb93cbc1665bbc7902076b3f04bd80edd2fe324db_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:84c5d2b24caf68c3a6a6d078bd9f66de9fb88e769f6c09c11a248693d463ac21_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:907d6e24922d6d372bceb21ad830c254c6a9c9d6be0ac4f4edf22c236437a09d_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:923a3ee0e3d5b7341b96826e465e6856855f2801dbaf381d139a632c77bda1c5_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:285d2e2d103b458f0603435aedb4d779d85e48fed2267845b798f4a04a0df4c7_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:44981f5fcbc9086470143fae6e21a5de3baad2258d9f8c81accecb2faad6b2a2_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:5ba248d0bc8fcde70e210319bb962f4043e5e8ab8a5625c8f8f30ec96d47c6b7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:f681cdac28ee9ff6375fb39d7b7d12917a06043db44c16e8f84bdb9e09e7b5e7_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:2057531884d897574fc0648e5d3cf21c4549738ac5f35d8095f400cdb80049cc_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:8be0e50a132a2c974893f36b51f3f40b6d6e1f913ae0f9ee6319ef0d5ec455b7_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:a2edc5d233d1547fa2e1d01f29d8a914930735f7098289892430ba9a17d20ab7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:c81c7aeb3dd05801e279a9fcc8d6c3baf00a2ccc08eab53f8acc8bd4d2d129c4_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:25e17bf203568420587cf5907e84e4167afab84dfce549c91bea99e70290b742_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:277f4e8ac5fc292b9f0f2d123f924c6b5cbc0a2eeba3c87a0e61c5ee2399aaa9_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:76766b77ed53513cd254195b25d205ab6964522816e1e3662800e38a105abdf2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:c7ace45f7cb86055e2ba18e27a660f6aa6cb4eff497204294875d5dd1d63cce3_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:3780b1bc80ab7ebc3cfed06ce69346d589dc07b53cea65ad3ed92cc912284300_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:681b356709778083448892513b4559f693e002bfda897a57e2d065f736a902b5_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:d110b52ce8ea022b3d35e7c4b0ce3b646f30513cf8abb55327132565ea4a6a87_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:f076ab59f3abe061e4553a61f98a144a472297dba5ed924ca887f130e9372da9_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-50151"
},
{
"category": "external",
"summary": "RHBZ#2499693",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2499693"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-50151",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50151"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-50151",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-50151"
},
{
"category": "external",
"summary": "https://github.com/oras-project/oras-go/security/advisories/GHSA-jxpm-75mh-9fp7",
"url": "https://github.com/oras-project/oras-go/security/advisories/GHSA-jxpm-75mh-9fp7"
}
],
"release_date": "2026-07-01T21:35:45+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T07:47:11+00:00",
"details": "Before you apply this update, make sure all previously released errata\nthat are relevant to your system are applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:26e58654cdd092cb812207cb4473f5f5988ebd708d95c34152c2e8c124f7297d_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:40e5d9634aa7469df8247758961d486cfac3e7d7f0b59184e11ed5571b46bf40_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:5b59faed336de07965755c893cb9d0ffc52ec90f61cc8c54487f6c0cac53322e_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:b59aea0c9e859025988b0f0c9b6e7748c4acf6d0b4cee35f3fabb7b84feb598b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:3e6519c0c789b946eb1b811867c41c4f204440bad5734760c0aca4e3fc602e5a_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:95684cfaf4d5d91bc9fe8cfbf64a6f113e944e3f0c102d27851be5232eca0dbb_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:9cb20990af88287dd8a27de4e4ef12eb244577a1844482d26107359c6efe8efa_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:a69ebb0c7e817d44cfabd86ad13ef4cc94a8bf5b6e8a607d17b197603d64a224_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:0eea35a3af36d08db945a70c387cc38eb326f75b4ed322f09d8c91863cfe5d02_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:22c48db227cd6f2ecec746674e31ac7f5a983a418679fc91678a0aa0ebb49496_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:8e8d249c39d562f819d347f12610dda7f5c01215c41101bfd5dca008e04edf6e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:f8adb8dd40a204bacb51cd423803097a514ec8e8e9f52209e02ecf14cad622bb_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:47737"
},
{
"category": "workaround",
"details": "Upgrade to oras-go v2.6.1 or later.",
"product_ids": [
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:31bd91156f49687d2efffd3be971d9ee0e16abb420b8e8b958caa88b97770020_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:a6315866c67ba350665f5a92f960a5a44e427ca37ae7505e2072af4e02c42f76_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:b3ad6fa1de658f3a40c8b183ab501ebc66b359d8cc01439d4215aa52769df213_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:bfde9ebea1fcd27b6d104d5f67db62e870878f9517ccbec2f649dd2c1af4a073_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:08fed161d59299881ff7a54db859feaf8ed7bdb8238d6cf12628ccb73575665e_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:09436fe2649ca384b1bc1fd8f736fb1d71392733310e66758ed9f289e00471f9_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:3b83670e1c0e9d1f5b76bd7b75d77072bc6208646bc2201bd0bd200dbc59e34a_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:927146f966e4c5c2908d29d8ab45a8f3071dbd5ebd9cf0424460a23f814a72a7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:38a3bc59511133cae56827eba879e7c82c5a974bf1f16b6e8d95e1f79821e669_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:3fa04db82e3ce6169270db0ce29107b69d8e044e0a1ab13a2bf1050b8c26d087_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:6041a918713d4464c73560b68c294a12d33f297a980d2f9d0e0cc8c300a96f24_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:98bd72ba69bdfb3070d87b3edcbd7050579a514b72cfd67c2926541ba52dbaf7_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:938abc970731c2eeda8e2b7b73e96d4dfcbf7587330c7b7e52117a577700e426_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:a0876a25ce85d7d4616212813f012422826f152b8d71065e75cd9c3e23034d8a_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:c77077a0cca835a503a6529c89ab19c4027f949d361afdf8a5a259e1e87b0d55_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:d5bbf3fe886f27cdc27363dcb175e004487d9c8f36de4f1f8516fbeda3a95224_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:0f5d8cae3ba4ea4fcdc5fb9d08f797d576bc225b92af66f193bd4b1324cda4b9_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:2d3588825f8a714fa59b1648d0934d064165e333f322f7f31f01f07b940d42d9_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:68aa571827f5331f1d5a3bd0c60ad441a18877ba11921aff2633940236bafcd4_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:9b80c9c61d4befefa7f6a65ae8c001ce7e343a1e4f251e5ebe025625d9511730_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:9b2c24401a91903f023096d2b641aa977acff423eb6770a8e4c4a81aecfd4e62_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:9d74585acc098c13f3e9dac5ae7f5ef337fa82bd7119d7f1849c5f8a50e84907_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:a6ee95d0ed82bddef084684d11fa770bd646d9be9bc65b3bc386d7c58b33975c_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:f7b8654eb8bf675c8c26f0ad395d790f990308d3ad6683bb61b484c92073bbac_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:2a598e7fd07db27100d9a53a328ac9a0535865883bddd1373f4f1f2705068d2f_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:4f8f0b02d0969753e156226a998d442746c238a2a50ea606a49ca0cf695b8925_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:63c02348faa7d4e26e35c69aef5453613dd607a26116823b931b89fe5311e181_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:ae224866f0085d2c00ab18a28d2aed076e455731903989a49a544abf49950d1f_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:0a90a13f006ef0b271079b728ef6d54081f36ae19b6d0e9ab4dc24ea52a30fad_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:3a53629645832974a883002e53198df7c28e59dd6d1df99bf321b52d0ef84b61_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:879315f438ca43abb607d6c97f8fbd4ca2d38209b142e2d97cc0598740273252_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:c6c4d01f5fcee6cad3fc870cace92f45000624760e6e93654bb5e814afeed7bb_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:50f7647620c78fd6b445379c8762f5e978113fe3552906376a24459263f27459_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:53e641f48ddc05c63da2e6bc24e9e4636a10de2c3599d8f5f78622bdebca07ca_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:57114b7a386c406715e342637558fab57afeef2e193517f99173a441f39401d5_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:dcdcaa90f292f2d7ad3f10acbedfab9f7f22f3432c3156055f34760d9bf9429c_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:3723b1d5c74f37cba219e203fd2026a718d4821595cb505ec6626684695da65b_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:562291f52b6bce98ec8795856b808545c4fe30047b54544c7f6c2ab4678480ff_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:e6dfac9bc3e467e141a425944782f5087ed967ac4d02d8d47442e3d61ba5b882_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:f683186c2cc8be9ec09b8efdec66d6b8b1f991c7f7b9fd398dc7c3f9ab8b3079_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:2471edd63a94473c68cf37ee50de643e40003f2c5bba84063c154e4888a7f0bd_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:7cef49d68df5d8efe52061a18920e07e6c7efa3016c0cea7d1747e67851f254a_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:d912383405599032acffbad22bc154f63a87dd429ba882fd7a94cb82fe650d8e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:f3034211e16de48af540efe4ee460395dba0a4a544fa4f277a12840a25df1730_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:181d1decb2f16fcf6f5938027ed346aca29126687bbe6cdcc601c25087f70d11_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:ab5e4d27e23448d99a37b8c05442bb1254083cdc4ff325e721d97d80ec27346c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:ac172243d158e126594f28317e0cfb37dc1790c9f2121e95fe52506b5e05fc91_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:fd96b6284d270effa0f838d960ea4218b72b54c4718513eb523658f2f4972682_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:c59d9cd479c62730eda5d482fb2f4e9fbc17a90a5a2861b130aafe1f3a27a333_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:e547f672b14b6e8fc2ffd300b150aedbd3f6b6b36ddcad612f7c992a936a7c82_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:ead1263d538974c48790c65e44cd9cab07a62c2893b2eeb250174e7cf58d7f9d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:ed0457a57c7b39b79fb308176f45ffe678938b25fbb8c15de2cedbe54b916f64_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:9847a5752ec77e17861dcdac5546ee5c53679c80c3569609b21d9080ee3b7ef3_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:d3c823e61a0682ddc85e576e86234e580992886de471035630f9c89bbad6ebb7_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:ded425ed0af88a1411a06e5191aee25c4c59f1de85b041eba95c9997686cf09e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:ee63f59942f9df04e95fc4266f0d194cd62a7ca08dd5478283884d0ab6003da7_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:724377cabaa284a5197e7505a7150c89631c2f2bcc629e074c7c0be18abd8e6f_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:cbf797c9e93413540b20ebee9191375ddd8185ef22dc8c9e23cc3a4c015abaf7_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:d7609d62a801cf07ef639abcd4f193b2d68967fadebbfddf2349003d7e9eaa44_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:f61fe90362f793225591eb7e2a86d5cdc6fb35aa087e9b6a6218a42b1c1d945d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:1c4de9460688800b62bad6fb13653ef4b52bf215e4d41674291193e9b8e71b24_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:4f1e59610b2fbedc56f425b3fbd8f16c9ea6ea96025f18a404fe48f6a49bdc1e_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:ab0d28306dd6daa03af79bdc2ea650e59a50a03317987c4cdd0d1ee70f95b597_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:b700a8bb7ea6e4253afb8bcf94e5ad086349980ca0716a87817724d3da3fdce1_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4015f46d2172db26a348635e2e8cbd4bbcdbbaa56a4b12c232676a3d0f5bbee2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4169252c61ec70b91b10c750d5f9ecd53f5c3c906766bba9103afbac3c3f9edf_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4ab72a192553c21de76754f06fe38cf443e686e4b4edc2aa2ceb2b6b9d95bb6c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:579ef0925c6f56ed48f22121767189431bef6c4eaa72b2648a1b91488357a51d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:2b796bf55ecf7a14d1c87d829a2b20d998fc2943686373105b0a50f5053ef836_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:7e960b59f64547f7e9602b7c066a51ab52aba929726aec2bacdf486a9d4d28fd_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:a43e430a2ec0b86fb6ade361677be298b4e27444388a9bca35ddafbf9c77277c_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:d2394b121256985e5ca322aea77bb0bf999ba2d7a6f1627e62bbc125c475dbbd_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:1868e2ea03d063b4cd64601cb0aaf5c9ea7f55e83eba2e2d4dcf6f830efeafc7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:4bfbf0bdc882979bc94d85a4aeff8caa0ec7887aec7412e32ae1442811325d06_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:844e3d69d3c26914e02612466021592a876e6e2dd6cf77084723a70f567ba0e2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:bbe04eb8fd197f15875f498e3c18b9a7a445380efb5f696422d79df99a34a881_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:2c9f9b47c01c5e5e017c583c6a09c5c52f40ef88acf789689265cb31ef328fb8_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:7b5e883efde312c1571c4825b523ff04ab57af6a9f4162a36b80b973f9602c46_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:d896dd89fb924da246fc729041d9debc019d8a4210cfd3de8883834e429cca10_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:ede3e22d4e4de49789622149dec23beaa7e0569a3715ac2262929df543e05bc3_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:273a393b8c62fbc4edb4bf4033c47d8b52bda56fc9cafa289d9513210840815b_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:71f1b590785ce7f4577ecd687dbab9bc3c5931c568a3108eb84279c7aa892046_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:d1e1b4310eb64891c9456be7c34547bf36b0aafdeb471a49f0892d7eaf8f41f4_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:e0a7514406c7ffae080db6d4db3bbf7b77a606ea4632bf09f8301ce1d3739bb5_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:2a4c6c061d154ed9c74707a7a2e2390fde2a150f36197386c3e49c0612d345b2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:6ffcc051c955e198c6d96b59bda0ef26b5124ebbdef5357d36a84534f2c7097c_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:c9258bf58373f9c6859789c8ec272cd7d702c37e063fc2ee53c66d296e7ee3d0_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:d83c6bb4f2a91d2c4de3ffbf4aa8ceecb695f8491ba7586d55275c62cd1931e6_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:67637c5cba3eca1597885823c6e44c13db445d0ef38751eb8364b69dbf07caac_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:68fb5c2a3c8a0d5e6bbcf2c5568969f6b13e72006d4d54bc5c57cd9a032d1bf6_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:9f5fa40c88b0f5d1ae3634632240817a91f4575f8eae9c005b8e35a55cf38003_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:fcbcee9fc7e0bbf5775a33ae9b7e3d7e48a90e2aa1cb85605e05612b6e4d4e30_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:0c165bb93ce933c7f9998a615908bfcca0b4eb38e32e24a1c823e63791b7604b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:42aa392f82bdc45a3b857d1ed44e224ddfd14db1e3dcbb74dcc850ac0540e964_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:9dcd0c0ecf1523bf05bd296edbecd85841b2753dee7a5c9df32437f9a8e31471_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:c5505c462e6b2c04a6e14bc1e22dfc42dc8adea8f6eaf0615cd58b1973b7d62e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:1a93df314c31f10da7b1345fab07b15b846e28865764178e34124f84dc967152_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:34343f81973c3fbdd8630c32d0fad597745ea10f960ea64236408e58e0f10e14_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:7b3635784ebfb6343a73c9fa6de7bea57b3aacce1c49a0f7f250a471f7b897e3_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:f0a7fade2853193429bab16922b2e3bbe426e14632423d6550ff7dfb66d42827_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:94950d339fa382d6911f12fc23dcaf2cdb2854c4cab654f6058f5bf0df1bb371_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:bcfbd2284cbeeba5a835aaf5a5590ddd8156bd881ca24fd0fe1465fade1f84c2_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:bd739ced163053224e5b0ea2f3cd577481c6b6c1162cc0fbc186f1716b4a1fbd_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:d40496f114898985cde3860b9664c34d8c32de85e4d3d846df91a6ba27a2e99c_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:3f7cbe7605595d712e14d9a17717fafc6c6e334f2ad3e821c34947ec78411046_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:96775900ea90e57487da6afe59d058b33cb977a0247a1bbeb1bd07bed2816398_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:caa6b121538e074312314d9888d9b423bd225aefa4f25eb145893b9fc548c0ad_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:e59c90cfe8160b28f9d2aa9e59b1d04d742df44d2195210ebc1946ee3cb78b6f_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:10c95e5c55ccc1a04e8d2ac28bd1afd3b9bb9a7e9e2a5e3e8efb301421539980_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:60a310d4464b4817845703d14e95729321b883fbfc79fbf2dd8d514bb3c675e9_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:70e6c14d72f14d25a90f44043932fbd3f824b30e8ad4b36307100726b24d9c06_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:784129cf69b3bf77a907fe909fd73a2a4d0fbd947fe0037e47aa1d62c6ffcf0b_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:26e58654cdd092cb812207cb4473f5f5988ebd708d95c34152c2e8c124f7297d_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:40e5d9634aa7469df8247758961d486cfac3e7d7f0b59184e11ed5571b46bf40_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:5b59faed336de07965755c893cb9d0ffc52ec90f61cc8c54487f6c0cac53322e_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:b59aea0c9e859025988b0f0c9b6e7748c4acf6d0b4cee35f3fabb7b84feb598b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:2368703206d833e4cb73b7e8750efb9997633a6f9accbf032426bcfcae4c00d9_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:80b543b207e724e880ff932c514fe9c6a3925bfede1c31863531e4e69d050d40_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:82405a9a5715db5442dfa3d3f594888bd7b2f9c778d68357a7d8884f5ea46915_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:8fd2bda7b8d94ededf7973f76a159dd61105776a05d961ac9cfd9bee0a988213_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:4def845360282dad99181b96bcd834b4863eab39e246fda2476234c561c652ec_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:b67aec868b6366cf04f3980b15588e1a0af5c88b2248958bc3884261ad390ca0_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:ceacf3491ebec6f5613011fe8d36b66d00f8b3697832615a4d7024e23125085e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:d9f6a520b818dcccbedb94720b5979ef1cdec2e02491c76e3decb3ee18f2085d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:3e6519c0c789b946eb1b811867c41c4f204440bad5734760c0aca4e3fc602e5a_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:95684cfaf4d5d91bc9fe8cfbf64a6f113e944e3f0c102d27851be5232eca0dbb_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:9cb20990af88287dd8a27de4e4ef12eb244577a1844482d26107359c6efe8efa_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:a69ebb0c7e817d44cfabd86ad13ef4cc94a8bf5b6e8a607d17b197603d64a224_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:0eea35a3af36d08db945a70c387cc38eb326f75b4ed322f09d8c91863cfe5d02_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:22c48db227cd6f2ecec746674e31ac7f5a983a418679fc91678a0aa0ebb49496_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:8e8d249c39d562f819d347f12610dda7f5c01215c41101bfd5dca008e04edf6e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:f8adb8dd40a204bacb51cd423803097a514ec8e8e9f52209e02ecf14cad622bb_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:03adc6277e2bf409391941c6f4508154abc38a0c043139978754f6d4fd32c5a8_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:7e100af30ed11325cb2cbee02af09306e53df5db5847f2a4b733cd307e3cd623_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:91b474b4808b18c279c9f8eb3be8e6d1e1e47cf2b5f9553acd901c74b20bddbc_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:d56f884a9700a4f193d6f3db1895bd54745ec77e02ead3d43bd6e4fe04a2969e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:1f7ed606f69a74943aedb0a956e5a71019f8a1ab53cd3f8166be0f55a69809b9_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:4841076eb82f1f1748345556ff6c4e02a17f1f63c661e375eaba720291cbaf6a_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:a79ac7dcae109aa526e2a218327dd8c5dba2b924fc27447a07199b3b2f2f67b3_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:dee022821852f2d5ebdbbd9f09c9b97997a905061dadb3f78433291d462d49a7_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:1a746b16f362a83f399255d925b322b3440b3d89ae4d64ab7962db3d82ee91a1_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:417a31bec11c3ffb70f40fa955069d5160dc12e2426b67e1d2e35ae3f7fa06df_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:89a3cb77fdb3dcbddfe96785a9ba3fa2b6132098fce028f859663b31fcf77a34_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:b1ba0b4cd8f515895af7b9f797f6ea5b661f7254ce019ce5115375639dcd06e9_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:0827c96b922ca185b7a7321a4f504e8a5dc01aadafcfd20443060546981339a8_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:b5b732dfc0ce3d740781eda9a72e1542c7a30b28b39d2be6e0ba470af06a9680_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:f74081e5eb03227ccff5717a7d139ceee6c5b610625ff7b99e639a2652bf7663_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:f80976ae4fc332600e1d8e1d70b42c038ea05d76ac2c5b1d7d0cbaddbe89140a_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:4029ece83812237ce8b1d394252e9561012e8cd94af40680a90284fbea1bc32a_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:63a3465a7539a8a286c846a84d63e3feca9a11758e4c0d697889b0bdeb26a25c_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:81c227d7c7599b0d4357ccdc3b567f31b67bbd1198c9e7ddba1864c299bad11b_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:f392bde8ce22aca058d77132cc709440442931679dbe725c52516f1cdc97b38d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:4825fab15300bc911e0b2b5c4ae342004bfcff95fa64af0fdb1085fadd132aa2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:68f879679911c2ca828551b900eca1c2f4e8caec7312fbba502fabc4778d1832_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:b4188ac728c746769ef6586663dd6d7d07db984b083397d2c76fe847ef22ea60_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:f2805fc1e6f37bc8acc3187ea8712d38f32151d584c10d5996c0ad7076cd638b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:1c943edcf23df14f254e4aabb93cbc1665bbc7902076b3f04bd80edd2fe324db_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:84c5d2b24caf68c3a6a6d078bd9f66de9fb88e769f6c09c11a248693d463ac21_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:907d6e24922d6d372bceb21ad830c254c6a9c9d6be0ac4f4edf22c236437a09d_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:923a3ee0e3d5b7341b96826e465e6856855f2801dbaf381d139a632c77bda1c5_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:285d2e2d103b458f0603435aedb4d779d85e48fed2267845b798f4a04a0df4c7_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:44981f5fcbc9086470143fae6e21a5de3baad2258d9f8c81accecb2faad6b2a2_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:5ba248d0bc8fcde70e210319bb962f4043e5e8ab8a5625c8f8f30ec96d47c6b7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:f681cdac28ee9ff6375fb39d7b7d12917a06043db44c16e8f84bdb9e09e7b5e7_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:2057531884d897574fc0648e5d3cf21c4549738ac5f35d8095f400cdb80049cc_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:8be0e50a132a2c974893f36b51f3f40b6d6e1f913ae0f9ee6319ef0d5ec455b7_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:a2edc5d233d1547fa2e1d01f29d8a914930735f7098289892430ba9a17d20ab7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:c81c7aeb3dd05801e279a9fcc8d6c3baf00a2ccc08eab53f8acc8bd4d2d129c4_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:25e17bf203568420587cf5907e84e4167afab84dfce549c91bea99e70290b742_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:277f4e8ac5fc292b9f0f2d123f924c6b5cbc0a2eeba3c87a0e61c5ee2399aaa9_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:76766b77ed53513cd254195b25d205ab6964522816e1e3662800e38a105abdf2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:c7ace45f7cb86055e2ba18e27a660f6aa6cb4eff497204294875d5dd1d63cce3_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:3780b1bc80ab7ebc3cfed06ce69346d589dc07b53cea65ad3ed92cc912284300_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:681b356709778083448892513b4559f693e002bfda897a57e2d065f736a902b5_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:d110b52ce8ea022b3d35e7c4b0ce3b646f30513cf8abb55327132565ea4a6a87_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:f076ab59f3abe061e4553a61f98a144a472297dba5ed924ca887f130e9372da9_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:31bd91156f49687d2efffd3be971d9ee0e16abb420b8e8b958caa88b97770020_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:a6315866c67ba350665f5a92f960a5a44e427ca37ae7505e2072af4e02c42f76_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:b3ad6fa1de658f3a40c8b183ab501ebc66b359d8cc01439d4215aa52769df213_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:bfde9ebea1fcd27b6d104d5f67db62e870878f9517ccbec2f649dd2c1af4a073_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:08fed161d59299881ff7a54db859feaf8ed7bdb8238d6cf12628ccb73575665e_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:09436fe2649ca384b1bc1fd8f736fb1d71392733310e66758ed9f289e00471f9_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:3b83670e1c0e9d1f5b76bd7b75d77072bc6208646bc2201bd0bd200dbc59e34a_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:927146f966e4c5c2908d29d8ab45a8f3071dbd5ebd9cf0424460a23f814a72a7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:38a3bc59511133cae56827eba879e7c82c5a974bf1f16b6e8d95e1f79821e669_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:3fa04db82e3ce6169270db0ce29107b69d8e044e0a1ab13a2bf1050b8c26d087_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:6041a918713d4464c73560b68c294a12d33f297a980d2f9d0e0cc8c300a96f24_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:98bd72ba69bdfb3070d87b3edcbd7050579a514b72cfd67c2926541ba52dbaf7_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:938abc970731c2eeda8e2b7b73e96d4dfcbf7587330c7b7e52117a577700e426_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:a0876a25ce85d7d4616212813f012422826f152b8d71065e75cd9c3e23034d8a_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:c77077a0cca835a503a6529c89ab19c4027f949d361afdf8a5a259e1e87b0d55_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:d5bbf3fe886f27cdc27363dcb175e004487d9c8f36de4f1f8516fbeda3a95224_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:0f5d8cae3ba4ea4fcdc5fb9d08f797d576bc225b92af66f193bd4b1324cda4b9_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:2d3588825f8a714fa59b1648d0934d064165e333f322f7f31f01f07b940d42d9_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:68aa571827f5331f1d5a3bd0c60ad441a18877ba11921aff2633940236bafcd4_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:9b80c9c61d4befefa7f6a65ae8c001ce7e343a1e4f251e5ebe025625d9511730_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:9b2c24401a91903f023096d2b641aa977acff423eb6770a8e4c4a81aecfd4e62_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:9d74585acc098c13f3e9dac5ae7f5ef337fa82bd7119d7f1849c5f8a50e84907_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:a6ee95d0ed82bddef084684d11fa770bd646d9be9bc65b3bc386d7c58b33975c_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:f7b8654eb8bf675c8c26f0ad395d790f990308d3ad6683bb61b484c92073bbac_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:2a598e7fd07db27100d9a53a328ac9a0535865883bddd1373f4f1f2705068d2f_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:4f8f0b02d0969753e156226a998d442746c238a2a50ea606a49ca0cf695b8925_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:63c02348faa7d4e26e35c69aef5453613dd607a26116823b931b89fe5311e181_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:ae224866f0085d2c00ab18a28d2aed076e455731903989a49a544abf49950d1f_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:0a90a13f006ef0b271079b728ef6d54081f36ae19b6d0e9ab4dc24ea52a30fad_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:3a53629645832974a883002e53198df7c28e59dd6d1df99bf321b52d0ef84b61_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:879315f438ca43abb607d6c97f8fbd4ca2d38209b142e2d97cc0598740273252_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:c6c4d01f5fcee6cad3fc870cace92f45000624760e6e93654bb5e814afeed7bb_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:50f7647620c78fd6b445379c8762f5e978113fe3552906376a24459263f27459_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:53e641f48ddc05c63da2e6bc24e9e4636a10de2c3599d8f5f78622bdebca07ca_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:57114b7a386c406715e342637558fab57afeef2e193517f99173a441f39401d5_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:dcdcaa90f292f2d7ad3f10acbedfab9f7f22f3432c3156055f34760d9bf9429c_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:3723b1d5c74f37cba219e203fd2026a718d4821595cb505ec6626684695da65b_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:562291f52b6bce98ec8795856b808545c4fe30047b54544c7f6c2ab4678480ff_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:e6dfac9bc3e467e141a425944782f5087ed967ac4d02d8d47442e3d61ba5b882_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:f683186c2cc8be9ec09b8efdec66d6b8b1f991c7f7b9fd398dc7c3f9ab8b3079_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:2471edd63a94473c68cf37ee50de643e40003f2c5bba84063c154e4888a7f0bd_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:7cef49d68df5d8efe52061a18920e07e6c7efa3016c0cea7d1747e67851f254a_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:d912383405599032acffbad22bc154f63a87dd429ba882fd7a94cb82fe650d8e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:f3034211e16de48af540efe4ee460395dba0a4a544fa4f277a12840a25df1730_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:181d1decb2f16fcf6f5938027ed346aca29126687bbe6cdcc601c25087f70d11_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:ab5e4d27e23448d99a37b8c05442bb1254083cdc4ff325e721d97d80ec27346c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:ac172243d158e126594f28317e0cfb37dc1790c9f2121e95fe52506b5e05fc91_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:fd96b6284d270effa0f838d960ea4218b72b54c4718513eb523658f2f4972682_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:c59d9cd479c62730eda5d482fb2f4e9fbc17a90a5a2861b130aafe1f3a27a333_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:e547f672b14b6e8fc2ffd300b150aedbd3f6b6b36ddcad612f7c992a936a7c82_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:ead1263d538974c48790c65e44cd9cab07a62c2893b2eeb250174e7cf58d7f9d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:ed0457a57c7b39b79fb308176f45ffe678938b25fbb8c15de2cedbe54b916f64_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:9847a5752ec77e17861dcdac5546ee5c53679c80c3569609b21d9080ee3b7ef3_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:d3c823e61a0682ddc85e576e86234e580992886de471035630f9c89bbad6ebb7_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:ded425ed0af88a1411a06e5191aee25c4c59f1de85b041eba95c9997686cf09e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:ee63f59942f9df04e95fc4266f0d194cd62a7ca08dd5478283884d0ab6003da7_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:724377cabaa284a5197e7505a7150c89631c2f2bcc629e074c7c0be18abd8e6f_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:cbf797c9e93413540b20ebee9191375ddd8185ef22dc8c9e23cc3a4c015abaf7_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:d7609d62a801cf07ef639abcd4f193b2d68967fadebbfddf2349003d7e9eaa44_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:f61fe90362f793225591eb7e2a86d5cdc6fb35aa087e9b6a6218a42b1c1d945d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:1c4de9460688800b62bad6fb13653ef4b52bf215e4d41674291193e9b8e71b24_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:4f1e59610b2fbedc56f425b3fbd8f16c9ea6ea96025f18a404fe48f6a49bdc1e_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:ab0d28306dd6daa03af79bdc2ea650e59a50a03317987c4cdd0d1ee70f95b597_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:b700a8bb7ea6e4253afb8bcf94e5ad086349980ca0716a87817724d3da3fdce1_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4015f46d2172db26a348635e2e8cbd4bbcdbbaa56a4b12c232676a3d0f5bbee2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4169252c61ec70b91b10c750d5f9ecd53f5c3c906766bba9103afbac3c3f9edf_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4ab72a192553c21de76754f06fe38cf443e686e4b4edc2aa2ceb2b6b9d95bb6c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:579ef0925c6f56ed48f22121767189431bef6c4eaa72b2648a1b91488357a51d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:2b796bf55ecf7a14d1c87d829a2b20d998fc2943686373105b0a50f5053ef836_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:7e960b59f64547f7e9602b7c066a51ab52aba929726aec2bacdf486a9d4d28fd_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:a43e430a2ec0b86fb6ade361677be298b4e27444388a9bca35ddafbf9c77277c_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:d2394b121256985e5ca322aea77bb0bf999ba2d7a6f1627e62bbc125c475dbbd_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:1868e2ea03d063b4cd64601cb0aaf5c9ea7f55e83eba2e2d4dcf6f830efeafc7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:4bfbf0bdc882979bc94d85a4aeff8caa0ec7887aec7412e32ae1442811325d06_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:844e3d69d3c26914e02612466021592a876e6e2dd6cf77084723a70f567ba0e2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:bbe04eb8fd197f15875f498e3c18b9a7a445380efb5f696422d79df99a34a881_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:2c9f9b47c01c5e5e017c583c6a09c5c52f40ef88acf789689265cb31ef328fb8_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:7b5e883efde312c1571c4825b523ff04ab57af6a9f4162a36b80b973f9602c46_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:d896dd89fb924da246fc729041d9debc019d8a4210cfd3de8883834e429cca10_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:ede3e22d4e4de49789622149dec23beaa7e0569a3715ac2262929df543e05bc3_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:273a393b8c62fbc4edb4bf4033c47d8b52bda56fc9cafa289d9513210840815b_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:71f1b590785ce7f4577ecd687dbab9bc3c5931c568a3108eb84279c7aa892046_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:d1e1b4310eb64891c9456be7c34547bf36b0aafdeb471a49f0892d7eaf8f41f4_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:e0a7514406c7ffae080db6d4db3bbf7b77a606ea4632bf09f8301ce1d3739bb5_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:2a4c6c061d154ed9c74707a7a2e2390fde2a150f36197386c3e49c0612d345b2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:6ffcc051c955e198c6d96b59bda0ef26b5124ebbdef5357d36a84534f2c7097c_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:c9258bf58373f9c6859789c8ec272cd7d702c37e063fc2ee53c66d296e7ee3d0_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:d83c6bb4f2a91d2c4de3ffbf4aa8ceecb695f8491ba7586d55275c62cd1931e6_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:67637c5cba3eca1597885823c6e44c13db445d0ef38751eb8364b69dbf07caac_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:68fb5c2a3c8a0d5e6bbcf2c5568969f6b13e72006d4d54bc5c57cd9a032d1bf6_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:9f5fa40c88b0f5d1ae3634632240817a91f4575f8eae9c005b8e35a55cf38003_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:fcbcee9fc7e0bbf5775a33ae9b7e3d7e48a90e2aa1cb85605e05612b6e4d4e30_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:0c165bb93ce933c7f9998a615908bfcca0b4eb38e32e24a1c823e63791b7604b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:42aa392f82bdc45a3b857d1ed44e224ddfd14db1e3dcbb74dcc850ac0540e964_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:9dcd0c0ecf1523bf05bd296edbecd85841b2753dee7a5c9df32437f9a8e31471_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:c5505c462e6b2c04a6e14bc1e22dfc42dc8adea8f6eaf0615cd58b1973b7d62e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:1a93df314c31f10da7b1345fab07b15b846e28865764178e34124f84dc967152_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:34343f81973c3fbdd8630c32d0fad597745ea10f960ea64236408e58e0f10e14_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:7b3635784ebfb6343a73c9fa6de7bea57b3aacce1c49a0f7f250a471f7b897e3_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:f0a7fade2853193429bab16922b2e3bbe426e14632423d6550ff7dfb66d42827_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:94950d339fa382d6911f12fc23dcaf2cdb2854c4cab654f6058f5bf0df1bb371_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:bcfbd2284cbeeba5a835aaf5a5590ddd8156bd881ca24fd0fe1465fade1f84c2_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:bd739ced163053224e5b0ea2f3cd577481c6b6c1162cc0fbc186f1716b4a1fbd_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:d40496f114898985cde3860b9664c34d8c32de85e4d3d846df91a6ba27a2e99c_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:3f7cbe7605595d712e14d9a17717fafc6c6e334f2ad3e821c34947ec78411046_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:96775900ea90e57487da6afe59d058b33cb977a0247a1bbeb1bd07bed2816398_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:caa6b121538e074312314d9888d9b423bd225aefa4f25eb145893b9fc548c0ad_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:e59c90cfe8160b28f9d2aa9e59b1d04d742df44d2195210ebc1946ee3cb78b6f_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:10c95e5c55ccc1a04e8d2ac28bd1afd3b9bb9a7e9e2a5e3e8efb301421539980_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:60a310d4464b4817845703d14e95729321b883fbfc79fbf2dd8d514bb3c675e9_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:70e6c14d72f14d25a90f44043932fbd3f824b30e8ad4b36307100726b24d9c06_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:784129cf69b3bf77a907fe909fd73a2a4d0fbd947fe0037e47aa1d62c6ffcf0b_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:26e58654cdd092cb812207cb4473f5f5988ebd708d95c34152c2e8c124f7297d_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:40e5d9634aa7469df8247758961d486cfac3e7d7f0b59184e11ed5571b46bf40_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:5b59faed336de07965755c893cb9d0ffc52ec90f61cc8c54487f6c0cac53322e_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:b59aea0c9e859025988b0f0c9b6e7748c4acf6d0b4cee35f3fabb7b84feb598b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:2368703206d833e4cb73b7e8750efb9997633a6f9accbf032426bcfcae4c00d9_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:80b543b207e724e880ff932c514fe9c6a3925bfede1c31863531e4e69d050d40_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:82405a9a5715db5442dfa3d3f594888bd7b2f9c778d68357a7d8884f5ea46915_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:8fd2bda7b8d94ededf7973f76a159dd61105776a05d961ac9cfd9bee0a988213_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:4def845360282dad99181b96bcd834b4863eab39e246fda2476234c561c652ec_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:b67aec868b6366cf04f3980b15588e1a0af5c88b2248958bc3884261ad390ca0_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:ceacf3491ebec6f5613011fe8d36b66d00f8b3697832615a4d7024e23125085e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:d9f6a520b818dcccbedb94720b5979ef1cdec2e02491c76e3decb3ee18f2085d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:3e6519c0c789b946eb1b811867c41c4f204440bad5734760c0aca4e3fc602e5a_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:95684cfaf4d5d91bc9fe8cfbf64a6f113e944e3f0c102d27851be5232eca0dbb_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:9cb20990af88287dd8a27de4e4ef12eb244577a1844482d26107359c6efe8efa_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:a69ebb0c7e817d44cfabd86ad13ef4cc94a8bf5b6e8a607d17b197603d64a224_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:0eea35a3af36d08db945a70c387cc38eb326f75b4ed322f09d8c91863cfe5d02_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:22c48db227cd6f2ecec746674e31ac7f5a983a418679fc91678a0aa0ebb49496_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:8e8d249c39d562f819d347f12610dda7f5c01215c41101bfd5dca008e04edf6e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:f8adb8dd40a204bacb51cd423803097a514ec8e8e9f52209e02ecf14cad622bb_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:03adc6277e2bf409391941c6f4508154abc38a0c043139978754f6d4fd32c5a8_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:7e100af30ed11325cb2cbee02af09306e53df5db5847f2a4b733cd307e3cd623_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:91b474b4808b18c279c9f8eb3be8e6d1e1e47cf2b5f9553acd901c74b20bddbc_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:d56f884a9700a4f193d6f3db1895bd54745ec77e02ead3d43bd6e4fe04a2969e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:1f7ed606f69a74943aedb0a956e5a71019f8a1ab53cd3f8166be0f55a69809b9_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:4841076eb82f1f1748345556ff6c4e02a17f1f63c661e375eaba720291cbaf6a_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:a79ac7dcae109aa526e2a218327dd8c5dba2b924fc27447a07199b3b2f2f67b3_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:dee022821852f2d5ebdbbd9f09c9b97997a905061dadb3f78433291d462d49a7_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:1a746b16f362a83f399255d925b322b3440b3d89ae4d64ab7962db3d82ee91a1_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:417a31bec11c3ffb70f40fa955069d5160dc12e2426b67e1d2e35ae3f7fa06df_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:89a3cb77fdb3dcbddfe96785a9ba3fa2b6132098fce028f859663b31fcf77a34_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:b1ba0b4cd8f515895af7b9f797f6ea5b661f7254ce019ce5115375639dcd06e9_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:0827c96b922ca185b7a7321a4f504e8a5dc01aadafcfd20443060546981339a8_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:b5b732dfc0ce3d740781eda9a72e1542c7a30b28b39d2be6e0ba470af06a9680_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:f74081e5eb03227ccff5717a7d139ceee6c5b610625ff7b99e639a2652bf7663_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:f80976ae4fc332600e1d8e1d70b42c038ea05d76ac2c5b1d7d0cbaddbe89140a_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:4029ece83812237ce8b1d394252e9561012e8cd94af40680a90284fbea1bc32a_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:63a3465a7539a8a286c846a84d63e3feca9a11758e4c0d697889b0bdeb26a25c_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:81c227d7c7599b0d4357ccdc3b567f31b67bbd1198c9e7ddba1864c299bad11b_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:f392bde8ce22aca058d77132cc709440442931679dbe725c52516f1cdc97b38d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:4825fab15300bc911e0b2b5c4ae342004bfcff95fa64af0fdb1085fadd132aa2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:68f879679911c2ca828551b900eca1c2f4e8caec7312fbba502fabc4778d1832_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:b4188ac728c746769ef6586663dd6d7d07db984b083397d2c76fe847ef22ea60_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:f2805fc1e6f37bc8acc3187ea8712d38f32151d584c10d5996c0ad7076cd638b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:1c943edcf23df14f254e4aabb93cbc1665bbc7902076b3f04bd80edd2fe324db_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:84c5d2b24caf68c3a6a6d078bd9f66de9fb88e769f6c09c11a248693d463ac21_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:907d6e24922d6d372bceb21ad830c254c6a9c9d6be0ac4f4edf22c236437a09d_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:923a3ee0e3d5b7341b96826e465e6856855f2801dbaf381d139a632c77bda1c5_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:285d2e2d103b458f0603435aedb4d779d85e48fed2267845b798f4a04a0df4c7_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:44981f5fcbc9086470143fae6e21a5de3baad2258d9f8c81accecb2faad6b2a2_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:5ba248d0bc8fcde70e210319bb962f4043e5e8ab8a5625c8f8f30ec96d47c6b7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:f681cdac28ee9ff6375fb39d7b7d12917a06043db44c16e8f84bdb9e09e7b5e7_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:2057531884d897574fc0648e5d3cf21c4549738ac5f35d8095f400cdb80049cc_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:8be0e50a132a2c974893f36b51f3f40b6d6e1f913ae0f9ee6319ef0d5ec455b7_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:a2edc5d233d1547fa2e1d01f29d8a914930735f7098289892430ba9a17d20ab7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:c81c7aeb3dd05801e279a9fcc8d6c3baf00a2ccc08eab53f8acc8bd4d2d129c4_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:25e17bf203568420587cf5907e84e4167afab84dfce549c91bea99e70290b742_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:277f4e8ac5fc292b9f0f2d123f924c6b5cbc0a2eeba3c87a0e61c5ee2399aaa9_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:76766b77ed53513cd254195b25d205ab6964522816e1e3662800e38a105abdf2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:c7ace45f7cb86055e2ba18e27a660f6aa6cb4eff497204294875d5dd1d63cce3_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:3780b1bc80ab7ebc3cfed06ce69346d589dc07b53cea65ad3ed92cc912284300_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:681b356709778083448892513b4559f693e002bfda897a57e2d065f736a902b5_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:d110b52ce8ea022b3d35e7c4b0ce3b646f30513cf8abb55327132565ea4a6a87_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:f076ab59f3abe061e4553a61f98a144a472297dba5ed924ca887f130e9372da9_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "oras-go: oras-go: Credential forwarding via unvalidated Location header during blob upload"
},
{
"cve": "CVE-2026-53488",
"cwe": {
"id": "CWE-78",
"name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
},
"discovery_date": "2026-07-01T02:01:09.589815+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:31bd91156f49687d2efffd3be971d9ee0e16abb420b8e8b958caa88b97770020_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:a6315866c67ba350665f5a92f960a5a44e427ca37ae7505e2072af4e02c42f76_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:b3ad6fa1de658f3a40c8b183ab501ebc66b359d8cc01439d4215aa52769df213_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:bfde9ebea1fcd27b6d104d5f67db62e870878f9517ccbec2f649dd2c1af4a073_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:08fed161d59299881ff7a54db859feaf8ed7bdb8238d6cf12628ccb73575665e_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:09436fe2649ca384b1bc1fd8f736fb1d71392733310e66758ed9f289e00471f9_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:3b83670e1c0e9d1f5b76bd7b75d77072bc6208646bc2201bd0bd200dbc59e34a_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:927146f966e4c5c2908d29d8ab45a8f3071dbd5ebd9cf0424460a23f814a72a7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:38a3bc59511133cae56827eba879e7c82c5a974bf1f16b6e8d95e1f79821e669_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:3fa04db82e3ce6169270db0ce29107b69d8e044e0a1ab13a2bf1050b8c26d087_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:6041a918713d4464c73560b68c294a12d33f297a980d2f9d0e0cc8c300a96f24_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:98bd72ba69bdfb3070d87b3edcbd7050579a514b72cfd67c2926541ba52dbaf7_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:938abc970731c2eeda8e2b7b73e96d4dfcbf7587330c7b7e52117a577700e426_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:a0876a25ce85d7d4616212813f012422826f152b8d71065e75cd9c3e23034d8a_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:c77077a0cca835a503a6529c89ab19c4027f949d361afdf8a5a259e1e87b0d55_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:d5bbf3fe886f27cdc27363dcb175e004487d9c8f36de4f1f8516fbeda3a95224_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:0f5d8cae3ba4ea4fcdc5fb9d08f797d576bc225b92af66f193bd4b1324cda4b9_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:2d3588825f8a714fa59b1648d0934d064165e333f322f7f31f01f07b940d42d9_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:68aa571827f5331f1d5a3bd0c60ad441a18877ba11921aff2633940236bafcd4_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:9b80c9c61d4befefa7f6a65ae8c001ce7e343a1e4f251e5ebe025625d9511730_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:9b2c24401a91903f023096d2b641aa977acff423eb6770a8e4c4a81aecfd4e62_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:9d74585acc098c13f3e9dac5ae7f5ef337fa82bd7119d7f1849c5f8a50e84907_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:a6ee95d0ed82bddef084684d11fa770bd646d9be9bc65b3bc386d7c58b33975c_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:f7b8654eb8bf675c8c26f0ad395d790f990308d3ad6683bb61b484c92073bbac_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:2a598e7fd07db27100d9a53a328ac9a0535865883bddd1373f4f1f2705068d2f_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:4f8f0b02d0969753e156226a998d442746c238a2a50ea606a49ca0cf695b8925_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:63c02348faa7d4e26e35c69aef5453613dd607a26116823b931b89fe5311e181_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:ae224866f0085d2c00ab18a28d2aed076e455731903989a49a544abf49950d1f_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:0a90a13f006ef0b271079b728ef6d54081f36ae19b6d0e9ab4dc24ea52a30fad_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:3a53629645832974a883002e53198df7c28e59dd6d1df99bf321b52d0ef84b61_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:879315f438ca43abb607d6c97f8fbd4ca2d38209b142e2d97cc0598740273252_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:c6c4d01f5fcee6cad3fc870cace92f45000624760e6e93654bb5e814afeed7bb_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:50f7647620c78fd6b445379c8762f5e978113fe3552906376a24459263f27459_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:53e641f48ddc05c63da2e6bc24e9e4636a10de2c3599d8f5f78622bdebca07ca_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:57114b7a386c406715e342637558fab57afeef2e193517f99173a441f39401d5_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:dcdcaa90f292f2d7ad3f10acbedfab9f7f22f3432c3156055f34760d9bf9429c_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:3723b1d5c74f37cba219e203fd2026a718d4821595cb505ec6626684695da65b_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:562291f52b6bce98ec8795856b808545c4fe30047b54544c7f6c2ab4678480ff_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:e6dfac9bc3e467e141a425944782f5087ed967ac4d02d8d47442e3d61ba5b882_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:f683186c2cc8be9ec09b8efdec66d6b8b1f991c7f7b9fd398dc7c3f9ab8b3079_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:2471edd63a94473c68cf37ee50de643e40003f2c5bba84063c154e4888a7f0bd_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:7cef49d68df5d8efe52061a18920e07e6c7efa3016c0cea7d1747e67851f254a_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:d912383405599032acffbad22bc154f63a87dd429ba882fd7a94cb82fe650d8e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:f3034211e16de48af540efe4ee460395dba0a4a544fa4f277a12840a25df1730_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:181d1decb2f16fcf6f5938027ed346aca29126687bbe6cdcc601c25087f70d11_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:ab5e4d27e23448d99a37b8c05442bb1254083cdc4ff325e721d97d80ec27346c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:ac172243d158e126594f28317e0cfb37dc1790c9f2121e95fe52506b5e05fc91_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:fd96b6284d270effa0f838d960ea4218b72b54c4718513eb523658f2f4972682_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:c59d9cd479c62730eda5d482fb2f4e9fbc17a90a5a2861b130aafe1f3a27a333_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:e547f672b14b6e8fc2ffd300b150aedbd3f6b6b36ddcad612f7c992a936a7c82_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:ead1263d538974c48790c65e44cd9cab07a62c2893b2eeb250174e7cf58d7f9d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:ed0457a57c7b39b79fb308176f45ffe678938b25fbb8c15de2cedbe54b916f64_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:9847a5752ec77e17861dcdac5546ee5c53679c80c3569609b21d9080ee3b7ef3_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:d3c823e61a0682ddc85e576e86234e580992886de471035630f9c89bbad6ebb7_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:ded425ed0af88a1411a06e5191aee25c4c59f1de85b041eba95c9997686cf09e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:ee63f59942f9df04e95fc4266f0d194cd62a7ca08dd5478283884d0ab6003da7_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:724377cabaa284a5197e7505a7150c89631c2f2bcc629e074c7c0be18abd8e6f_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:cbf797c9e93413540b20ebee9191375ddd8185ef22dc8c9e23cc3a4c015abaf7_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:d7609d62a801cf07ef639abcd4f193b2d68967fadebbfddf2349003d7e9eaa44_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:f61fe90362f793225591eb7e2a86d5cdc6fb35aa087e9b6a6218a42b1c1d945d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:1c4de9460688800b62bad6fb13653ef4b52bf215e4d41674291193e9b8e71b24_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:4f1e59610b2fbedc56f425b3fbd8f16c9ea6ea96025f18a404fe48f6a49bdc1e_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:ab0d28306dd6daa03af79bdc2ea650e59a50a03317987c4cdd0d1ee70f95b597_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:b700a8bb7ea6e4253afb8bcf94e5ad086349980ca0716a87817724d3da3fdce1_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4015f46d2172db26a348635e2e8cbd4bbcdbbaa56a4b12c232676a3d0f5bbee2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4169252c61ec70b91b10c750d5f9ecd53f5c3c906766bba9103afbac3c3f9edf_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4ab72a192553c21de76754f06fe38cf443e686e4b4edc2aa2ceb2b6b9d95bb6c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:579ef0925c6f56ed48f22121767189431bef6c4eaa72b2648a1b91488357a51d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:2b796bf55ecf7a14d1c87d829a2b20d998fc2943686373105b0a50f5053ef836_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:7e960b59f64547f7e9602b7c066a51ab52aba929726aec2bacdf486a9d4d28fd_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:a43e430a2ec0b86fb6ade361677be298b4e27444388a9bca35ddafbf9c77277c_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:d2394b121256985e5ca322aea77bb0bf999ba2d7a6f1627e62bbc125c475dbbd_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:1868e2ea03d063b4cd64601cb0aaf5c9ea7f55e83eba2e2d4dcf6f830efeafc7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:4bfbf0bdc882979bc94d85a4aeff8caa0ec7887aec7412e32ae1442811325d06_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:844e3d69d3c26914e02612466021592a876e6e2dd6cf77084723a70f567ba0e2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:bbe04eb8fd197f15875f498e3c18b9a7a445380efb5f696422d79df99a34a881_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:2c9f9b47c01c5e5e017c583c6a09c5c52f40ef88acf789689265cb31ef328fb8_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:7b5e883efde312c1571c4825b523ff04ab57af6a9f4162a36b80b973f9602c46_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:d896dd89fb924da246fc729041d9debc019d8a4210cfd3de8883834e429cca10_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:ede3e22d4e4de49789622149dec23beaa7e0569a3715ac2262929df543e05bc3_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:273a393b8c62fbc4edb4bf4033c47d8b52bda56fc9cafa289d9513210840815b_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:71f1b590785ce7f4577ecd687dbab9bc3c5931c568a3108eb84279c7aa892046_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:d1e1b4310eb64891c9456be7c34547bf36b0aafdeb471a49f0892d7eaf8f41f4_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:e0a7514406c7ffae080db6d4db3bbf7b77a606ea4632bf09f8301ce1d3739bb5_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:2a4c6c061d154ed9c74707a7a2e2390fde2a150f36197386c3e49c0612d345b2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:6ffcc051c955e198c6d96b59bda0ef26b5124ebbdef5357d36a84534f2c7097c_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:c9258bf58373f9c6859789c8ec272cd7d702c37e063fc2ee53c66d296e7ee3d0_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:d83c6bb4f2a91d2c4de3ffbf4aa8ceecb695f8491ba7586d55275c62cd1931e6_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:67637c5cba3eca1597885823c6e44c13db445d0ef38751eb8364b69dbf07caac_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:68fb5c2a3c8a0d5e6bbcf2c5568969f6b13e72006d4d54bc5c57cd9a032d1bf6_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:9f5fa40c88b0f5d1ae3634632240817a91f4575f8eae9c005b8e35a55cf38003_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:fcbcee9fc7e0bbf5775a33ae9b7e3d7e48a90e2aa1cb85605e05612b6e4d4e30_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:0c165bb93ce933c7f9998a615908bfcca0b4eb38e32e24a1c823e63791b7604b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:42aa392f82bdc45a3b857d1ed44e224ddfd14db1e3dcbb74dcc850ac0540e964_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:9dcd0c0ecf1523bf05bd296edbecd85841b2753dee7a5c9df32437f9a8e31471_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:c5505c462e6b2c04a6e14bc1e22dfc42dc8adea8f6eaf0615cd58b1973b7d62e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:1a93df314c31f10da7b1345fab07b15b846e28865764178e34124f84dc967152_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:34343f81973c3fbdd8630c32d0fad597745ea10f960ea64236408e58e0f10e14_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:7b3635784ebfb6343a73c9fa6de7bea57b3aacce1c49a0f7f250a471f7b897e3_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:f0a7fade2853193429bab16922b2e3bbe426e14632423d6550ff7dfb66d42827_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:94950d339fa382d6911f12fc23dcaf2cdb2854c4cab654f6058f5bf0df1bb371_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:bcfbd2284cbeeba5a835aaf5a5590ddd8156bd881ca24fd0fe1465fade1f84c2_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:bd739ced163053224e5b0ea2f3cd577481c6b6c1162cc0fbc186f1716b4a1fbd_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:d40496f114898985cde3860b9664c34d8c32de85e4d3d846df91a6ba27a2e99c_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:3f7cbe7605595d712e14d9a17717fafc6c6e334f2ad3e821c34947ec78411046_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:96775900ea90e57487da6afe59d058b33cb977a0247a1bbeb1bd07bed2816398_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:caa6b121538e074312314d9888d9b423bd225aefa4f25eb145893b9fc548c0ad_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:e59c90cfe8160b28f9d2aa9e59b1d04d742df44d2195210ebc1946ee3cb78b6f_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:10c95e5c55ccc1a04e8d2ac28bd1afd3b9bb9a7e9e2a5e3e8efb301421539980_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:60a310d4464b4817845703d14e95729321b883fbfc79fbf2dd8d514bb3c675e9_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:70e6c14d72f14d25a90f44043932fbd3f824b30e8ad4b36307100726b24d9c06_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:784129cf69b3bf77a907fe909fd73a2a4d0fbd947fe0037e47aa1d62c6ffcf0b_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:2368703206d833e4cb73b7e8750efb9997633a6f9accbf032426bcfcae4c00d9_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:80b543b207e724e880ff932c514fe9c6a3925bfede1c31863531e4e69d050d40_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:82405a9a5715db5442dfa3d3f594888bd7b2f9c778d68357a7d8884f5ea46915_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:8fd2bda7b8d94ededf7973f76a159dd61105776a05d961ac9cfd9bee0a988213_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:4def845360282dad99181b96bcd834b4863eab39e246fda2476234c561c652ec_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:b67aec868b6366cf04f3980b15588e1a0af5c88b2248958bc3884261ad390ca0_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:ceacf3491ebec6f5613011fe8d36b66d00f8b3697832615a4d7024e23125085e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:d9f6a520b818dcccbedb94720b5979ef1cdec2e02491c76e3decb3ee18f2085d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:03adc6277e2bf409391941c6f4508154abc38a0c043139978754f6d4fd32c5a8_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:7e100af30ed11325cb2cbee02af09306e53df5db5847f2a4b733cd307e3cd623_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:91b474b4808b18c279c9f8eb3be8e6d1e1e47cf2b5f9553acd901c74b20bddbc_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:d56f884a9700a4f193d6f3db1895bd54745ec77e02ead3d43bd6e4fe04a2969e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:1f7ed606f69a74943aedb0a956e5a71019f8a1ab53cd3f8166be0f55a69809b9_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:4841076eb82f1f1748345556ff6c4e02a17f1f63c661e375eaba720291cbaf6a_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:a79ac7dcae109aa526e2a218327dd8c5dba2b924fc27447a07199b3b2f2f67b3_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:dee022821852f2d5ebdbbd9f09c9b97997a905061dadb3f78433291d462d49a7_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:1a746b16f362a83f399255d925b322b3440b3d89ae4d64ab7962db3d82ee91a1_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:417a31bec11c3ffb70f40fa955069d5160dc12e2426b67e1d2e35ae3f7fa06df_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:89a3cb77fdb3dcbddfe96785a9ba3fa2b6132098fce028f859663b31fcf77a34_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:b1ba0b4cd8f515895af7b9f797f6ea5b661f7254ce019ce5115375639dcd06e9_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:0827c96b922ca185b7a7321a4f504e8a5dc01aadafcfd20443060546981339a8_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:b5b732dfc0ce3d740781eda9a72e1542c7a30b28b39d2be6e0ba470af06a9680_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:f74081e5eb03227ccff5717a7d139ceee6c5b610625ff7b99e639a2652bf7663_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:f80976ae4fc332600e1d8e1d70b42c038ea05d76ac2c5b1d7d0cbaddbe89140a_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:4029ece83812237ce8b1d394252e9561012e8cd94af40680a90284fbea1bc32a_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:63a3465a7539a8a286c846a84d63e3feca9a11758e4c0d697889b0bdeb26a25c_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:81c227d7c7599b0d4357ccdc3b567f31b67bbd1198c9e7ddba1864c299bad11b_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:f392bde8ce22aca058d77132cc709440442931679dbe725c52516f1cdc97b38d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:4825fab15300bc911e0b2b5c4ae342004bfcff95fa64af0fdb1085fadd132aa2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:68f879679911c2ca828551b900eca1c2f4e8caec7312fbba502fabc4778d1832_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:b4188ac728c746769ef6586663dd6d7d07db984b083397d2c76fe847ef22ea60_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:f2805fc1e6f37bc8acc3187ea8712d38f32151d584c10d5996c0ad7076cd638b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:1c943edcf23df14f254e4aabb93cbc1665bbc7902076b3f04bd80edd2fe324db_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:84c5d2b24caf68c3a6a6d078bd9f66de9fb88e769f6c09c11a248693d463ac21_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:907d6e24922d6d372bceb21ad830c254c6a9c9d6be0ac4f4edf22c236437a09d_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:923a3ee0e3d5b7341b96826e465e6856855f2801dbaf381d139a632c77bda1c5_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:285d2e2d103b458f0603435aedb4d779d85e48fed2267845b798f4a04a0df4c7_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:44981f5fcbc9086470143fae6e21a5de3baad2258d9f8c81accecb2faad6b2a2_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:5ba248d0bc8fcde70e210319bb962f4043e5e8ab8a5625c8f8f30ec96d47c6b7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:f681cdac28ee9ff6375fb39d7b7d12917a06043db44c16e8f84bdb9e09e7b5e7_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:2057531884d897574fc0648e5d3cf21c4549738ac5f35d8095f400cdb80049cc_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:8be0e50a132a2c974893f36b51f3f40b6d6e1f913ae0f9ee6319ef0d5ec455b7_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:a2edc5d233d1547fa2e1d01f29d8a914930735f7098289892430ba9a17d20ab7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:c81c7aeb3dd05801e279a9fcc8d6c3baf00a2ccc08eab53f8acc8bd4d2d129c4_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:25e17bf203568420587cf5907e84e4167afab84dfce549c91bea99e70290b742_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:277f4e8ac5fc292b9f0f2d123f924c6b5cbc0a2eeba3c87a0e61c5ee2399aaa9_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:76766b77ed53513cd254195b25d205ab6964522816e1e3662800e38a105abdf2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:c7ace45f7cb86055e2ba18e27a660f6aa6cb4eff497204294875d5dd1d63cce3_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:3780b1bc80ab7ebc3cfed06ce69346d589dc07b53cea65ad3ed92cc912284300_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:681b356709778083448892513b4559f693e002bfda897a57e2d065f736a902b5_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:d110b52ce8ea022b3d35e7c4b0ce3b646f30513cf8abb55327132565ea4a6a87_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:f076ab59f3abe061e4553a61f98a144a472297dba5ed924ca887f130e9372da9_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2495815"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in containerd, an open-source container runtime. The Container Runtime Interface (CRI) plugin, which manages container operations, fails to validate labels propagated from an image configuration to a container. This oversight could enable an attacker to execute arbitrary commands on the host system through a plugin that processes these unvalidated labels. The primary impact is host-root command execution, allowing unauthorized control over the underlying system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/containerd/containerd: containerd: Host-root command execution via unvalidated image config labels in CRI plugin",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in containerd where the CRI plugin propagates labels from an image configuration (LABEL instruction in a Dockerfile) to a container without validation. This may result in executing an arbitrary command on the host via a plugin that consumes container labels for operations, such as the restart-monitor binary:// logger. An attacker who can cause a crafted container image to be pulled and run can achieve host-level code execution.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:26e58654cdd092cb812207cb4473f5f5988ebd708d95c34152c2e8c124f7297d_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:40e5d9634aa7469df8247758961d486cfac3e7d7f0b59184e11ed5571b46bf40_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:5b59faed336de07965755c893cb9d0ffc52ec90f61cc8c54487f6c0cac53322e_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:b59aea0c9e859025988b0f0c9b6e7748c4acf6d0b4cee35f3fabb7b84feb598b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:3e6519c0c789b946eb1b811867c41c4f204440bad5734760c0aca4e3fc602e5a_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:95684cfaf4d5d91bc9fe8cfbf64a6f113e944e3f0c102d27851be5232eca0dbb_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:9cb20990af88287dd8a27de4e4ef12eb244577a1844482d26107359c6efe8efa_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:a69ebb0c7e817d44cfabd86ad13ef4cc94a8bf5b6e8a607d17b197603d64a224_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:0eea35a3af36d08db945a70c387cc38eb326f75b4ed322f09d8c91863cfe5d02_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:22c48db227cd6f2ecec746674e31ac7f5a983a418679fc91678a0aa0ebb49496_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:8e8d249c39d562f819d347f12610dda7f5c01215c41101bfd5dca008e04edf6e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:f8adb8dd40a204bacb51cd423803097a514ec8e8e9f52209e02ecf14cad622bb_ppc64le"
],
"known_not_affected": [
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:31bd91156f49687d2efffd3be971d9ee0e16abb420b8e8b958caa88b97770020_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:a6315866c67ba350665f5a92f960a5a44e427ca37ae7505e2072af4e02c42f76_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:b3ad6fa1de658f3a40c8b183ab501ebc66b359d8cc01439d4215aa52769df213_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:bfde9ebea1fcd27b6d104d5f67db62e870878f9517ccbec2f649dd2c1af4a073_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:08fed161d59299881ff7a54db859feaf8ed7bdb8238d6cf12628ccb73575665e_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:09436fe2649ca384b1bc1fd8f736fb1d71392733310e66758ed9f289e00471f9_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:3b83670e1c0e9d1f5b76bd7b75d77072bc6208646bc2201bd0bd200dbc59e34a_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:927146f966e4c5c2908d29d8ab45a8f3071dbd5ebd9cf0424460a23f814a72a7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:38a3bc59511133cae56827eba879e7c82c5a974bf1f16b6e8d95e1f79821e669_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:3fa04db82e3ce6169270db0ce29107b69d8e044e0a1ab13a2bf1050b8c26d087_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:6041a918713d4464c73560b68c294a12d33f297a980d2f9d0e0cc8c300a96f24_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:98bd72ba69bdfb3070d87b3edcbd7050579a514b72cfd67c2926541ba52dbaf7_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:938abc970731c2eeda8e2b7b73e96d4dfcbf7587330c7b7e52117a577700e426_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:a0876a25ce85d7d4616212813f012422826f152b8d71065e75cd9c3e23034d8a_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:c77077a0cca835a503a6529c89ab19c4027f949d361afdf8a5a259e1e87b0d55_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:d5bbf3fe886f27cdc27363dcb175e004487d9c8f36de4f1f8516fbeda3a95224_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:0f5d8cae3ba4ea4fcdc5fb9d08f797d576bc225b92af66f193bd4b1324cda4b9_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:2d3588825f8a714fa59b1648d0934d064165e333f322f7f31f01f07b940d42d9_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:68aa571827f5331f1d5a3bd0c60ad441a18877ba11921aff2633940236bafcd4_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:9b80c9c61d4befefa7f6a65ae8c001ce7e343a1e4f251e5ebe025625d9511730_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:9b2c24401a91903f023096d2b641aa977acff423eb6770a8e4c4a81aecfd4e62_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:9d74585acc098c13f3e9dac5ae7f5ef337fa82bd7119d7f1849c5f8a50e84907_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:a6ee95d0ed82bddef084684d11fa770bd646d9be9bc65b3bc386d7c58b33975c_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:f7b8654eb8bf675c8c26f0ad395d790f990308d3ad6683bb61b484c92073bbac_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:2a598e7fd07db27100d9a53a328ac9a0535865883bddd1373f4f1f2705068d2f_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:4f8f0b02d0969753e156226a998d442746c238a2a50ea606a49ca0cf695b8925_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:63c02348faa7d4e26e35c69aef5453613dd607a26116823b931b89fe5311e181_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:ae224866f0085d2c00ab18a28d2aed076e455731903989a49a544abf49950d1f_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:0a90a13f006ef0b271079b728ef6d54081f36ae19b6d0e9ab4dc24ea52a30fad_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:3a53629645832974a883002e53198df7c28e59dd6d1df99bf321b52d0ef84b61_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:879315f438ca43abb607d6c97f8fbd4ca2d38209b142e2d97cc0598740273252_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:c6c4d01f5fcee6cad3fc870cace92f45000624760e6e93654bb5e814afeed7bb_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:50f7647620c78fd6b445379c8762f5e978113fe3552906376a24459263f27459_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:53e641f48ddc05c63da2e6bc24e9e4636a10de2c3599d8f5f78622bdebca07ca_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:57114b7a386c406715e342637558fab57afeef2e193517f99173a441f39401d5_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:dcdcaa90f292f2d7ad3f10acbedfab9f7f22f3432c3156055f34760d9bf9429c_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:3723b1d5c74f37cba219e203fd2026a718d4821595cb505ec6626684695da65b_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:562291f52b6bce98ec8795856b808545c4fe30047b54544c7f6c2ab4678480ff_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:e6dfac9bc3e467e141a425944782f5087ed967ac4d02d8d47442e3d61ba5b882_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:f683186c2cc8be9ec09b8efdec66d6b8b1f991c7f7b9fd398dc7c3f9ab8b3079_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:2471edd63a94473c68cf37ee50de643e40003f2c5bba84063c154e4888a7f0bd_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:7cef49d68df5d8efe52061a18920e07e6c7efa3016c0cea7d1747e67851f254a_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:d912383405599032acffbad22bc154f63a87dd429ba882fd7a94cb82fe650d8e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:f3034211e16de48af540efe4ee460395dba0a4a544fa4f277a12840a25df1730_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:181d1decb2f16fcf6f5938027ed346aca29126687bbe6cdcc601c25087f70d11_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:ab5e4d27e23448d99a37b8c05442bb1254083cdc4ff325e721d97d80ec27346c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:ac172243d158e126594f28317e0cfb37dc1790c9f2121e95fe52506b5e05fc91_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:fd96b6284d270effa0f838d960ea4218b72b54c4718513eb523658f2f4972682_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:c59d9cd479c62730eda5d482fb2f4e9fbc17a90a5a2861b130aafe1f3a27a333_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:e547f672b14b6e8fc2ffd300b150aedbd3f6b6b36ddcad612f7c992a936a7c82_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:ead1263d538974c48790c65e44cd9cab07a62c2893b2eeb250174e7cf58d7f9d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:ed0457a57c7b39b79fb308176f45ffe678938b25fbb8c15de2cedbe54b916f64_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:9847a5752ec77e17861dcdac5546ee5c53679c80c3569609b21d9080ee3b7ef3_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:d3c823e61a0682ddc85e576e86234e580992886de471035630f9c89bbad6ebb7_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:ded425ed0af88a1411a06e5191aee25c4c59f1de85b041eba95c9997686cf09e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:ee63f59942f9df04e95fc4266f0d194cd62a7ca08dd5478283884d0ab6003da7_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:724377cabaa284a5197e7505a7150c89631c2f2bcc629e074c7c0be18abd8e6f_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:cbf797c9e93413540b20ebee9191375ddd8185ef22dc8c9e23cc3a4c015abaf7_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:d7609d62a801cf07ef639abcd4f193b2d68967fadebbfddf2349003d7e9eaa44_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:f61fe90362f793225591eb7e2a86d5cdc6fb35aa087e9b6a6218a42b1c1d945d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:1c4de9460688800b62bad6fb13653ef4b52bf215e4d41674291193e9b8e71b24_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:4f1e59610b2fbedc56f425b3fbd8f16c9ea6ea96025f18a404fe48f6a49bdc1e_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:ab0d28306dd6daa03af79bdc2ea650e59a50a03317987c4cdd0d1ee70f95b597_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:b700a8bb7ea6e4253afb8bcf94e5ad086349980ca0716a87817724d3da3fdce1_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4015f46d2172db26a348635e2e8cbd4bbcdbbaa56a4b12c232676a3d0f5bbee2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4169252c61ec70b91b10c750d5f9ecd53f5c3c906766bba9103afbac3c3f9edf_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4ab72a192553c21de76754f06fe38cf443e686e4b4edc2aa2ceb2b6b9d95bb6c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:579ef0925c6f56ed48f22121767189431bef6c4eaa72b2648a1b91488357a51d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:2b796bf55ecf7a14d1c87d829a2b20d998fc2943686373105b0a50f5053ef836_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:7e960b59f64547f7e9602b7c066a51ab52aba929726aec2bacdf486a9d4d28fd_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:a43e430a2ec0b86fb6ade361677be298b4e27444388a9bca35ddafbf9c77277c_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:d2394b121256985e5ca322aea77bb0bf999ba2d7a6f1627e62bbc125c475dbbd_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:1868e2ea03d063b4cd64601cb0aaf5c9ea7f55e83eba2e2d4dcf6f830efeafc7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:4bfbf0bdc882979bc94d85a4aeff8caa0ec7887aec7412e32ae1442811325d06_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:844e3d69d3c26914e02612466021592a876e6e2dd6cf77084723a70f567ba0e2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:bbe04eb8fd197f15875f498e3c18b9a7a445380efb5f696422d79df99a34a881_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:2c9f9b47c01c5e5e017c583c6a09c5c52f40ef88acf789689265cb31ef328fb8_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:7b5e883efde312c1571c4825b523ff04ab57af6a9f4162a36b80b973f9602c46_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:d896dd89fb924da246fc729041d9debc019d8a4210cfd3de8883834e429cca10_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:ede3e22d4e4de49789622149dec23beaa7e0569a3715ac2262929df543e05bc3_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:273a393b8c62fbc4edb4bf4033c47d8b52bda56fc9cafa289d9513210840815b_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:71f1b590785ce7f4577ecd687dbab9bc3c5931c568a3108eb84279c7aa892046_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:d1e1b4310eb64891c9456be7c34547bf36b0aafdeb471a49f0892d7eaf8f41f4_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:e0a7514406c7ffae080db6d4db3bbf7b77a606ea4632bf09f8301ce1d3739bb5_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:2a4c6c061d154ed9c74707a7a2e2390fde2a150f36197386c3e49c0612d345b2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:6ffcc051c955e198c6d96b59bda0ef26b5124ebbdef5357d36a84534f2c7097c_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:c9258bf58373f9c6859789c8ec272cd7d702c37e063fc2ee53c66d296e7ee3d0_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:d83c6bb4f2a91d2c4de3ffbf4aa8ceecb695f8491ba7586d55275c62cd1931e6_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:67637c5cba3eca1597885823c6e44c13db445d0ef38751eb8364b69dbf07caac_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:68fb5c2a3c8a0d5e6bbcf2c5568969f6b13e72006d4d54bc5c57cd9a032d1bf6_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:9f5fa40c88b0f5d1ae3634632240817a91f4575f8eae9c005b8e35a55cf38003_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:fcbcee9fc7e0bbf5775a33ae9b7e3d7e48a90e2aa1cb85605e05612b6e4d4e30_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:0c165bb93ce933c7f9998a615908bfcca0b4eb38e32e24a1c823e63791b7604b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:42aa392f82bdc45a3b857d1ed44e224ddfd14db1e3dcbb74dcc850ac0540e964_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:9dcd0c0ecf1523bf05bd296edbecd85841b2753dee7a5c9df32437f9a8e31471_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:c5505c462e6b2c04a6e14bc1e22dfc42dc8adea8f6eaf0615cd58b1973b7d62e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:1a93df314c31f10da7b1345fab07b15b846e28865764178e34124f84dc967152_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:34343f81973c3fbdd8630c32d0fad597745ea10f960ea64236408e58e0f10e14_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:7b3635784ebfb6343a73c9fa6de7bea57b3aacce1c49a0f7f250a471f7b897e3_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:f0a7fade2853193429bab16922b2e3bbe426e14632423d6550ff7dfb66d42827_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:94950d339fa382d6911f12fc23dcaf2cdb2854c4cab654f6058f5bf0df1bb371_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:bcfbd2284cbeeba5a835aaf5a5590ddd8156bd881ca24fd0fe1465fade1f84c2_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:bd739ced163053224e5b0ea2f3cd577481c6b6c1162cc0fbc186f1716b4a1fbd_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:d40496f114898985cde3860b9664c34d8c32de85e4d3d846df91a6ba27a2e99c_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:3f7cbe7605595d712e14d9a17717fafc6c6e334f2ad3e821c34947ec78411046_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:96775900ea90e57487da6afe59d058b33cb977a0247a1bbeb1bd07bed2816398_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:caa6b121538e074312314d9888d9b423bd225aefa4f25eb145893b9fc548c0ad_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:e59c90cfe8160b28f9d2aa9e59b1d04d742df44d2195210ebc1946ee3cb78b6f_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:10c95e5c55ccc1a04e8d2ac28bd1afd3b9bb9a7e9e2a5e3e8efb301421539980_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:60a310d4464b4817845703d14e95729321b883fbfc79fbf2dd8d514bb3c675e9_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:70e6c14d72f14d25a90f44043932fbd3f824b30e8ad4b36307100726b24d9c06_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:784129cf69b3bf77a907fe909fd73a2a4d0fbd947fe0037e47aa1d62c6ffcf0b_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:2368703206d833e4cb73b7e8750efb9997633a6f9accbf032426bcfcae4c00d9_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:80b543b207e724e880ff932c514fe9c6a3925bfede1c31863531e4e69d050d40_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:82405a9a5715db5442dfa3d3f594888bd7b2f9c778d68357a7d8884f5ea46915_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:8fd2bda7b8d94ededf7973f76a159dd61105776a05d961ac9cfd9bee0a988213_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:4def845360282dad99181b96bcd834b4863eab39e246fda2476234c561c652ec_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:b67aec868b6366cf04f3980b15588e1a0af5c88b2248958bc3884261ad390ca0_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:ceacf3491ebec6f5613011fe8d36b66d00f8b3697832615a4d7024e23125085e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:d9f6a520b818dcccbedb94720b5979ef1cdec2e02491c76e3decb3ee18f2085d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:03adc6277e2bf409391941c6f4508154abc38a0c043139978754f6d4fd32c5a8_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:7e100af30ed11325cb2cbee02af09306e53df5db5847f2a4b733cd307e3cd623_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:91b474b4808b18c279c9f8eb3be8e6d1e1e47cf2b5f9553acd901c74b20bddbc_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:d56f884a9700a4f193d6f3db1895bd54745ec77e02ead3d43bd6e4fe04a2969e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:1f7ed606f69a74943aedb0a956e5a71019f8a1ab53cd3f8166be0f55a69809b9_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:4841076eb82f1f1748345556ff6c4e02a17f1f63c661e375eaba720291cbaf6a_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:a79ac7dcae109aa526e2a218327dd8c5dba2b924fc27447a07199b3b2f2f67b3_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:dee022821852f2d5ebdbbd9f09c9b97997a905061dadb3f78433291d462d49a7_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:1a746b16f362a83f399255d925b322b3440b3d89ae4d64ab7962db3d82ee91a1_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:417a31bec11c3ffb70f40fa955069d5160dc12e2426b67e1d2e35ae3f7fa06df_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:89a3cb77fdb3dcbddfe96785a9ba3fa2b6132098fce028f859663b31fcf77a34_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:b1ba0b4cd8f515895af7b9f797f6ea5b661f7254ce019ce5115375639dcd06e9_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:0827c96b922ca185b7a7321a4f504e8a5dc01aadafcfd20443060546981339a8_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:b5b732dfc0ce3d740781eda9a72e1542c7a30b28b39d2be6e0ba470af06a9680_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:f74081e5eb03227ccff5717a7d139ceee6c5b610625ff7b99e639a2652bf7663_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:f80976ae4fc332600e1d8e1d70b42c038ea05d76ac2c5b1d7d0cbaddbe89140a_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:4029ece83812237ce8b1d394252e9561012e8cd94af40680a90284fbea1bc32a_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:63a3465a7539a8a286c846a84d63e3feca9a11758e4c0d697889b0bdeb26a25c_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:81c227d7c7599b0d4357ccdc3b567f31b67bbd1198c9e7ddba1864c299bad11b_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:f392bde8ce22aca058d77132cc709440442931679dbe725c52516f1cdc97b38d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:4825fab15300bc911e0b2b5c4ae342004bfcff95fa64af0fdb1085fadd132aa2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:68f879679911c2ca828551b900eca1c2f4e8caec7312fbba502fabc4778d1832_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:b4188ac728c746769ef6586663dd6d7d07db984b083397d2c76fe847ef22ea60_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:f2805fc1e6f37bc8acc3187ea8712d38f32151d584c10d5996c0ad7076cd638b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:1c943edcf23df14f254e4aabb93cbc1665bbc7902076b3f04bd80edd2fe324db_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:84c5d2b24caf68c3a6a6d078bd9f66de9fb88e769f6c09c11a248693d463ac21_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:907d6e24922d6d372bceb21ad830c254c6a9c9d6be0ac4f4edf22c236437a09d_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:923a3ee0e3d5b7341b96826e465e6856855f2801dbaf381d139a632c77bda1c5_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:285d2e2d103b458f0603435aedb4d779d85e48fed2267845b798f4a04a0df4c7_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:44981f5fcbc9086470143fae6e21a5de3baad2258d9f8c81accecb2faad6b2a2_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:5ba248d0bc8fcde70e210319bb962f4043e5e8ab8a5625c8f8f30ec96d47c6b7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:f681cdac28ee9ff6375fb39d7b7d12917a06043db44c16e8f84bdb9e09e7b5e7_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:2057531884d897574fc0648e5d3cf21c4549738ac5f35d8095f400cdb80049cc_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:8be0e50a132a2c974893f36b51f3f40b6d6e1f913ae0f9ee6319ef0d5ec455b7_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:a2edc5d233d1547fa2e1d01f29d8a914930735f7098289892430ba9a17d20ab7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:c81c7aeb3dd05801e279a9fcc8d6c3baf00a2ccc08eab53f8acc8bd4d2d129c4_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:25e17bf203568420587cf5907e84e4167afab84dfce549c91bea99e70290b742_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:277f4e8ac5fc292b9f0f2d123f924c6b5cbc0a2eeba3c87a0e61c5ee2399aaa9_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:76766b77ed53513cd254195b25d205ab6964522816e1e3662800e38a105abdf2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:c7ace45f7cb86055e2ba18e27a660f6aa6cb4eff497204294875d5dd1d63cce3_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:3780b1bc80ab7ebc3cfed06ce69346d589dc07b53cea65ad3ed92cc912284300_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:681b356709778083448892513b4559f693e002bfda897a57e2d065f736a902b5_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:d110b52ce8ea022b3d35e7c4b0ce3b646f30513cf8abb55327132565ea4a6a87_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:f076ab59f3abe061e4553a61f98a144a472297dba5ed924ca887f130e9372da9_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-53488"
},
{
"category": "external",
"summary": "RHBZ#2495815",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2495815"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-53488",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-53488"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-53488",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53488"
},
{
"category": "external",
"summary": "https://github.com/containerd/containerd/security/advisories/GHSA-xhf5-7wjv-pqxp",
"url": "https://github.com/containerd/containerd/security/advisories/GHSA-xhf5-7wjv-pqxp"
}
],
"release_date": "2026-07-01T00:11:20.610000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T07:47:11+00:00",
"details": "Before you apply this update, make sure all previously released errata\nthat are relevant to your system are applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:26e58654cdd092cb812207cb4473f5f5988ebd708d95c34152c2e8c124f7297d_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:40e5d9634aa7469df8247758961d486cfac3e7d7f0b59184e11ed5571b46bf40_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:5b59faed336de07965755c893cb9d0ffc52ec90f61cc8c54487f6c0cac53322e_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:b59aea0c9e859025988b0f0c9b6e7748c4acf6d0b4cee35f3fabb7b84feb598b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:3e6519c0c789b946eb1b811867c41c4f204440bad5734760c0aca4e3fc602e5a_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:95684cfaf4d5d91bc9fe8cfbf64a6f113e944e3f0c102d27851be5232eca0dbb_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:9cb20990af88287dd8a27de4e4ef12eb244577a1844482d26107359c6efe8efa_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:a69ebb0c7e817d44cfabd86ad13ef4cc94a8bf5b6e8a607d17b197603d64a224_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:0eea35a3af36d08db945a70c387cc38eb326f75b4ed322f09d8c91863cfe5d02_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:22c48db227cd6f2ecec746674e31ac7f5a983a418679fc91678a0aa0ebb49496_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:8e8d249c39d562f819d347f12610dda7f5c01215c41101bfd5dca008e04edf6e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:f8adb8dd40a204bacb51cd423803097a514ec8e8e9f52209e02ecf14cad622bb_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:47737"
},
{
"category": "workaround",
"details": "Restrict container image pulls to trusted registries using admission policies or image signature verification. Where containerd is used as the container runtime, disable or restrict the binary:// logger URI scheme in the containerd configuration to prevent the label-to-logger attack path.",
"product_ids": [
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:31bd91156f49687d2efffd3be971d9ee0e16abb420b8e8b958caa88b97770020_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:a6315866c67ba350665f5a92f960a5a44e427ca37ae7505e2072af4e02c42f76_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:b3ad6fa1de658f3a40c8b183ab501ebc66b359d8cc01439d4215aa52769df213_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:bfde9ebea1fcd27b6d104d5f67db62e870878f9517ccbec2f649dd2c1af4a073_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:08fed161d59299881ff7a54db859feaf8ed7bdb8238d6cf12628ccb73575665e_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:09436fe2649ca384b1bc1fd8f736fb1d71392733310e66758ed9f289e00471f9_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:3b83670e1c0e9d1f5b76bd7b75d77072bc6208646bc2201bd0bd200dbc59e34a_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:927146f966e4c5c2908d29d8ab45a8f3071dbd5ebd9cf0424460a23f814a72a7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:38a3bc59511133cae56827eba879e7c82c5a974bf1f16b6e8d95e1f79821e669_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:3fa04db82e3ce6169270db0ce29107b69d8e044e0a1ab13a2bf1050b8c26d087_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:6041a918713d4464c73560b68c294a12d33f297a980d2f9d0e0cc8c300a96f24_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:98bd72ba69bdfb3070d87b3edcbd7050579a514b72cfd67c2926541ba52dbaf7_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:938abc970731c2eeda8e2b7b73e96d4dfcbf7587330c7b7e52117a577700e426_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:a0876a25ce85d7d4616212813f012422826f152b8d71065e75cd9c3e23034d8a_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:c77077a0cca835a503a6529c89ab19c4027f949d361afdf8a5a259e1e87b0d55_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:d5bbf3fe886f27cdc27363dcb175e004487d9c8f36de4f1f8516fbeda3a95224_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:0f5d8cae3ba4ea4fcdc5fb9d08f797d576bc225b92af66f193bd4b1324cda4b9_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:2d3588825f8a714fa59b1648d0934d064165e333f322f7f31f01f07b940d42d9_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:68aa571827f5331f1d5a3bd0c60ad441a18877ba11921aff2633940236bafcd4_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:9b80c9c61d4befefa7f6a65ae8c001ce7e343a1e4f251e5ebe025625d9511730_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:9b2c24401a91903f023096d2b641aa977acff423eb6770a8e4c4a81aecfd4e62_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:9d74585acc098c13f3e9dac5ae7f5ef337fa82bd7119d7f1849c5f8a50e84907_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:a6ee95d0ed82bddef084684d11fa770bd646d9be9bc65b3bc386d7c58b33975c_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:f7b8654eb8bf675c8c26f0ad395d790f990308d3ad6683bb61b484c92073bbac_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:2a598e7fd07db27100d9a53a328ac9a0535865883bddd1373f4f1f2705068d2f_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:4f8f0b02d0969753e156226a998d442746c238a2a50ea606a49ca0cf695b8925_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:63c02348faa7d4e26e35c69aef5453613dd607a26116823b931b89fe5311e181_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:ae224866f0085d2c00ab18a28d2aed076e455731903989a49a544abf49950d1f_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:0a90a13f006ef0b271079b728ef6d54081f36ae19b6d0e9ab4dc24ea52a30fad_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:3a53629645832974a883002e53198df7c28e59dd6d1df99bf321b52d0ef84b61_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:879315f438ca43abb607d6c97f8fbd4ca2d38209b142e2d97cc0598740273252_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:c6c4d01f5fcee6cad3fc870cace92f45000624760e6e93654bb5e814afeed7bb_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:50f7647620c78fd6b445379c8762f5e978113fe3552906376a24459263f27459_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:53e641f48ddc05c63da2e6bc24e9e4636a10de2c3599d8f5f78622bdebca07ca_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:57114b7a386c406715e342637558fab57afeef2e193517f99173a441f39401d5_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:dcdcaa90f292f2d7ad3f10acbedfab9f7f22f3432c3156055f34760d9bf9429c_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:3723b1d5c74f37cba219e203fd2026a718d4821595cb505ec6626684695da65b_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:562291f52b6bce98ec8795856b808545c4fe30047b54544c7f6c2ab4678480ff_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:e6dfac9bc3e467e141a425944782f5087ed967ac4d02d8d47442e3d61ba5b882_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:f683186c2cc8be9ec09b8efdec66d6b8b1f991c7f7b9fd398dc7c3f9ab8b3079_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:2471edd63a94473c68cf37ee50de643e40003f2c5bba84063c154e4888a7f0bd_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:7cef49d68df5d8efe52061a18920e07e6c7efa3016c0cea7d1747e67851f254a_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:d912383405599032acffbad22bc154f63a87dd429ba882fd7a94cb82fe650d8e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:f3034211e16de48af540efe4ee460395dba0a4a544fa4f277a12840a25df1730_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:181d1decb2f16fcf6f5938027ed346aca29126687bbe6cdcc601c25087f70d11_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:ab5e4d27e23448d99a37b8c05442bb1254083cdc4ff325e721d97d80ec27346c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:ac172243d158e126594f28317e0cfb37dc1790c9f2121e95fe52506b5e05fc91_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:fd96b6284d270effa0f838d960ea4218b72b54c4718513eb523658f2f4972682_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:c59d9cd479c62730eda5d482fb2f4e9fbc17a90a5a2861b130aafe1f3a27a333_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:e547f672b14b6e8fc2ffd300b150aedbd3f6b6b36ddcad612f7c992a936a7c82_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:ead1263d538974c48790c65e44cd9cab07a62c2893b2eeb250174e7cf58d7f9d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:ed0457a57c7b39b79fb308176f45ffe678938b25fbb8c15de2cedbe54b916f64_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:9847a5752ec77e17861dcdac5546ee5c53679c80c3569609b21d9080ee3b7ef3_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:d3c823e61a0682ddc85e576e86234e580992886de471035630f9c89bbad6ebb7_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:ded425ed0af88a1411a06e5191aee25c4c59f1de85b041eba95c9997686cf09e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:ee63f59942f9df04e95fc4266f0d194cd62a7ca08dd5478283884d0ab6003da7_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:724377cabaa284a5197e7505a7150c89631c2f2bcc629e074c7c0be18abd8e6f_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:cbf797c9e93413540b20ebee9191375ddd8185ef22dc8c9e23cc3a4c015abaf7_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:d7609d62a801cf07ef639abcd4f193b2d68967fadebbfddf2349003d7e9eaa44_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:f61fe90362f793225591eb7e2a86d5cdc6fb35aa087e9b6a6218a42b1c1d945d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:1c4de9460688800b62bad6fb13653ef4b52bf215e4d41674291193e9b8e71b24_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:4f1e59610b2fbedc56f425b3fbd8f16c9ea6ea96025f18a404fe48f6a49bdc1e_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:ab0d28306dd6daa03af79bdc2ea650e59a50a03317987c4cdd0d1ee70f95b597_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:b700a8bb7ea6e4253afb8bcf94e5ad086349980ca0716a87817724d3da3fdce1_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4015f46d2172db26a348635e2e8cbd4bbcdbbaa56a4b12c232676a3d0f5bbee2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4169252c61ec70b91b10c750d5f9ecd53f5c3c906766bba9103afbac3c3f9edf_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4ab72a192553c21de76754f06fe38cf443e686e4b4edc2aa2ceb2b6b9d95bb6c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:579ef0925c6f56ed48f22121767189431bef6c4eaa72b2648a1b91488357a51d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:2b796bf55ecf7a14d1c87d829a2b20d998fc2943686373105b0a50f5053ef836_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:7e960b59f64547f7e9602b7c066a51ab52aba929726aec2bacdf486a9d4d28fd_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:a43e430a2ec0b86fb6ade361677be298b4e27444388a9bca35ddafbf9c77277c_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:d2394b121256985e5ca322aea77bb0bf999ba2d7a6f1627e62bbc125c475dbbd_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:1868e2ea03d063b4cd64601cb0aaf5c9ea7f55e83eba2e2d4dcf6f830efeafc7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:4bfbf0bdc882979bc94d85a4aeff8caa0ec7887aec7412e32ae1442811325d06_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:844e3d69d3c26914e02612466021592a876e6e2dd6cf77084723a70f567ba0e2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:bbe04eb8fd197f15875f498e3c18b9a7a445380efb5f696422d79df99a34a881_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:2c9f9b47c01c5e5e017c583c6a09c5c52f40ef88acf789689265cb31ef328fb8_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:7b5e883efde312c1571c4825b523ff04ab57af6a9f4162a36b80b973f9602c46_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:d896dd89fb924da246fc729041d9debc019d8a4210cfd3de8883834e429cca10_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:ede3e22d4e4de49789622149dec23beaa7e0569a3715ac2262929df543e05bc3_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:273a393b8c62fbc4edb4bf4033c47d8b52bda56fc9cafa289d9513210840815b_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:71f1b590785ce7f4577ecd687dbab9bc3c5931c568a3108eb84279c7aa892046_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:d1e1b4310eb64891c9456be7c34547bf36b0aafdeb471a49f0892d7eaf8f41f4_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:e0a7514406c7ffae080db6d4db3bbf7b77a606ea4632bf09f8301ce1d3739bb5_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:2a4c6c061d154ed9c74707a7a2e2390fde2a150f36197386c3e49c0612d345b2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:6ffcc051c955e198c6d96b59bda0ef26b5124ebbdef5357d36a84534f2c7097c_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:c9258bf58373f9c6859789c8ec272cd7d702c37e063fc2ee53c66d296e7ee3d0_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:d83c6bb4f2a91d2c4de3ffbf4aa8ceecb695f8491ba7586d55275c62cd1931e6_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:67637c5cba3eca1597885823c6e44c13db445d0ef38751eb8364b69dbf07caac_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:68fb5c2a3c8a0d5e6bbcf2c5568969f6b13e72006d4d54bc5c57cd9a032d1bf6_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:9f5fa40c88b0f5d1ae3634632240817a91f4575f8eae9c005b8e35a55cf38003_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:fcbcee9fc7e0bbf5775a33ae9b7e3d7e48a90e2aa1cb85605e05612b6e4d4e30_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:0c165bb93ce933c7f9998a615908bfcca0b4eb38e32e24a1c823e63791b7604b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:42aa392f82bdc45a3b857d1ed44e224ddfd14db1e3dcbb74dcc850ac0540e964_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:9dcd0c0ecf1523bf05bd296edbecd85841b2753dee7a5c9df32437f9a8e31471_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:c5505c462e6b2c04a6e14bc1e22dfc42dc8adea8f6eaf0615cd58b1973b7d62e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:1a93df314c31f10da7b1345fab07b15b846e28865764178e34124f84dc967152_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:34343f81973c3fbdd8630c32d0fad597745ea10f960ea64236408e58e0f10e14_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:7b3635784ebfb6343a73c9fa6de7bea57b3aacce1c49a0f7f250a471f7b897e3_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:f0a7fade2853193429bab16922b2e3bbe426e14632423d6550ff7dfb66d42827_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:94950d339fa382d6911f12fc23dcaf2cdb2854c4cab654f6058f5bf0df1bb371_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:bcfbd2284cbeeba5a835aaf5a5590ddd8156bd881ca24fd0fe1465fade1f84c2_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:bd739ced163053224e5b0ea2f3cd577481c6b6c1162cc0fbc186f1716b4a1fbd_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:d40496f114898985cde3860b9664c34d8c32de85e4d3d846df91a6ba27a2e99c_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:3f7cbe7605595d712e14d9a17717fafc6c6e334f2ad3e821c34947ec78411046_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:96775900ea90e57487da6afe59d058b33cb977a0247a1bbeb1bd07bed2816398_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:caa6b121538e074312314d9888d9b423bd225aefa4f25eb145893b9fc548c0ad_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:e59c90cfe8160b28f9d2aa9e59b1d04d742df44d2195210ebc1946ee3cb78b6f_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:10c95e5c55ccc1a04e8d2ac28bd1afd3b9bb9a7e9e2a5e3e8efb301421539980_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:60a310d4464b4817845703d14e95729321b883fbfc79fbf2dd8d514bb3c675e9_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:70e6c14d72f14d25a90f44043932fbd3f824b30e8ad4b36307100726b24d9c06_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:784129cf69b3bf77a907fe909fd73a2a4d0fbd947fe0037e47aa1d62c6ffcf0b_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:26e58654cdd092cb812207cb4473f5f5988ebd708d95c34152c2e8c124f7297d_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:40e5d9634aa7469df8247758961d486cfac3e7d7f0b59184e11ed5571b46bf40_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:5b59faed336de07965755c893cb9d0ffc52ec90f61cc8c54487f6c0cac53322e_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:b59aea0c9e859025988b0f0c9b6e7748c4acf6d0b4cee35f3fabb7b84feb598b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:2368703206d833e4cb73b7e8750efb9997633a6f9accbf032426bcfcae4c00d9_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:80b543b207e724e880ff932c514fe9c6a3925bfede1c31863531e4e69d050d40_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:82405a9a5715db5442dfa3d3f594888bd7b2f9c778d68357a7d8884f5ea46915_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:8fd2bda7b8d94ededf7973f76a159dd61105776a05d961ac9cfd9bee0a988213_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:4def845360282dad99181b96bcd834b4863eab39e246fda2476234c561c652ec_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:b67aec868b6366cf04f3980b15588e1a0af5c88b2248958bc3884261ad390ca0_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:ceacf3491ebec6f5613011fe8d36b66d00f8b3697832615a4d7024e23125085e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:d9f6a520b818dcccbedb94720b5979ef1cdec2e02491c76e3decb3ee18f2085d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:3e6519c0c789b946eb1b811867c41c4f204440bad5734760c0aca4e3fc602e5a_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:95684cfaf4d5d91bc9fe8cfbf64a6f113e944e3f0c102d27851be5232eca0dbb_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:9cb20990af88287dd8a27de4e4ef12eb244577a1844482d26107359c6efe8efa_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:a69ebb0c7e817d44cfabd86ad13ef4cc94a8bf5b6e8a607d17b197603d64a224_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:0eea35a3af36d08db945a70c387cc38eb326f75b4ed322f09d8c91863cfe5d02_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:22c48db227cd6f2ecec746674e31ac7f5a983a418679fc91678a0aa0ebb49496_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:8e8d249c39d562f819d347f12610dda7f5c01215c41101bfd5dca008e04edf6e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:f8adb8dd40a204bacb51cd423803097a514ec8e8e9f52209e02ecf14cad622bb_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:03adc6277e2bf409391941c6f4508154abc38a0c043139978754f6d4fd32c5a8_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:7e100af30ed11325cb2cbee02af09306e53df5db5847f2a4b733cd307e3cd623_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:91b474b4808b18c279c9f8eb3be8e6d1e1e47cf2b5f9553acd901c74b20bddbc_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:d56f884a9700a4f193d6f3db1895bd54745ec77e02ead3d43bd6e4fe04a2969e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:1f7ed606f69a74943aedb0a956e5a71019f8a1ab53cd3f8166be0f55a69809b9_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:4841076eb82f1f1748345556ff6c4e02a17f1f63c661e375eaba720291cbaf6a_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:a79ac7dcae109aa526e2a218327dd8c5dba2b924fc27447a07199b3b2f2f67b3_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:dee022821852f2d5ebdbbd9f09c9b97997a905061dadb3f78433291d462d49a7_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:1a746b16f362a83f399255d925b322b3440b3d89ae4d64ab7962db3d82ee91a1_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:417a31bec11c3ffb70f40fa955069d5160dc12e2426b67e1d2e35ae3f7fa06df_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:89a3cb77fdb3dcbddfe96785a9ba3fa2b6132098fce028f859663b31fcf77a34_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:b1ba0b4cd8f515895af7b9f797f6ea5b661f7254ce019ce5115375639dcd06e9_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:0827c96b922ca185b7a7321a4f504e8a5dc01aadafcfd20443060546981339a8_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:b5b732dfc0ce3d740781eda9a72e1542c7a30b28b39d2be6e0ba470af06a9680_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:f74081e5eb03227ccff5717a7d139ceee6c5b610625ff7b99e639a2652bf7663_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:f80976ae4fc332600e1d8e1d70b42c038ea05d76ac2c5b1d7d0cbaddbe89140a_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:4029ece83812237ce8b1d394252e9561012e8cd94af40680a90284fbea1bc32a_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:63a3465a7539a8a286c846a84d63e3feca9a11758e4c0d697889b0bdeb26a25c_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:81c227d7c7599b0d4357ccdc3b567f31b67bbd1198c9e7ddba1864c299bad11b_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:f392bde8ce22aca058d77132cc709440442931679dbe725c52516f1cdc97b38d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:4825fab15300bc911e0b2b5c4ae342004bfcff95fa64af0fdb1085fadd132aa2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:68f879679911c2ca828551b900eca1c2f4e8caec7312fbba502fabc4778d1832_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:b4188ac728c746769ef6586663dd6d7d07db984b083397d2c76fe847ef22ea60_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:f2805fc1e6f37bc8acc3187ea8712d38f32151d584c10d5996c0ad7076cd638b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:1c943edcf23df14f254e4aabb93cbc1665bbc7902076b3f04bd80edd2fe324db_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:84c5d2b24caf68c3a6a6d078bd9f66de9fb88e769f6c09c11a248693d463ac21_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:907d6e24922d6d372bceb21ad830c254c6a9c9d6be0ac4f4edf22c236437a09d_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:923a3ee0e3d5b7341b96826e465e6856855f2801dbaf381d139a632c77bda1c5_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:285d2e2d103b458f0603435aedb4d779d85e48fed2267845b798f4a04a0df4c7_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:44981f5fcbc9086470143fae6e21a5de3baad2258d9f8c81accecb2faad6b2a2_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:5ba248d0bc8fcde70e210319bb962f4043e5e8ab8a5625c8f8f30ec96d47c6b7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:f681cdac28ee9ff6375fb39d7b7d12917a06043db44c16e8f84bdb9e09e7b5e7_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:2057531884d897574fc0648e5d3cf21c4549738ac5f35d8095f400cdb80049cc_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:8be0e50a132a2c974893f36b51f3f40b6d6e1f913ae0f9ee6319ef0d5ec455b7_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:a2edc5d233d1547fa2e1d01f29d8a914930735f7098289892430ba9a17d20ab7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:c81c7aeb3dd05801e279a9fcc8d6c3baf00a2ccc08eab53f8acc8bd4d2d129c4_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:25e17bf203568420587cf5907e84e4167afab84dfce549c91bea99e70290b742_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:277f4e8ac5fc292b9f0f2d123f924c6b5cbc0a2eeba3c87a0e61c5ee2399aaa9_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:76766b77ed53513cd254195b25d205ab6964522816e1e3662800e38a105abdf2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:c7ace45f7cb86055e2ba18e27a660f6aa6cb4eff497204294875d5dd1d63cce3_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:3780b1bc80ab7ebc3cfed06ce69346d589dc07b53cea65ad3ed92cc912284300_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:681b356709778083448892513b4559f693e002bfda897a57e2d065f736a902b5_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:d110b52ce8ea022b3d35e7c4b0ce3b646f30513cf8abb55327132565ea4a6a87_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:f076ab59f3abe061e4553a61f98a144a472297dba5ed924ca887f130e9372da9_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:31bd91156f49687d2efffd3be971d9ee0e16abb420b8e8b958caa88b97770020_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:a6315866c67ba350665f5a92f960a5a44e427ca37ae7505e2072af4e02c42f76_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:b3ad6fa1de658f3a40c8b183ab501ebc66b359d8cc01439d4215aa52769df213_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:bfde9ebea1fcd27b6d104d5f67db62e870878f9517ccbec2f649dd2c1af4a073_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:08fed161d59299881ff7a54db859feaf8ed7bdb8238d6cf12628ccb73575665e_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:09436fe2649ca384b1bc1fd8f736fb1d71392733310e66758ed9f289e00471f9_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:3b83670e1c0e9d1f5b76bd7b75d77072bc6208646bc2201bd0bd200dbc59e34a_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:927146f966e4c5c2908d29d8ab45a8f3071dbd5ebd9cf0424460a23f814a72a7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:38a3bc59511133cae56827eba879e7c82c5a974bf1f16b6e8d95e1f79821e669_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:3fa04db82e3ce6169270db0ce29107b69d8e044e0a1ab13a2bf1050b8c26d087_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:6041a918713d4464c73560b68c294a12d33f297a980d2f9d0e0cc8c300a96f24_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:98bd72ba69bdfb3070d87b3edcbd7050579a514b72cfd67c2926541ba52dbaf7_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:938abc970731c2eeda8e2b7b73e96d4dfcbf7587330c7b7e52117a577700e426_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:a0876a25ce85d7d4616212813f012422826f152b8d71065e75cd9c3e23034d8a_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:c77077a0cca835a503a6529c89ab19c4027f949d361afdf8a5a259e1e87b0d55_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:d5bbf3fe886f27cdc27363dcb175e004487d9c8f36de4f1f8516fbeda3a95224_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:0f5d8cae3ba4ea4fcdc5fb9d08f797d576bc225b92af66f193bd4b1324cda4b9_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:2d3588825f8a714fa59b1648d0934d064165e333f322f7f31f01f07b940d42d9_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:68aa571827f5331f1d5a3bd0c60ad441a18877ba11921aff2633940236bafcd4_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:9b80c9c61d4befefa7f6a65ae8c001ce7e343a1e4f251e5ebe025625d9511730_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:9b2c24401a91903f023096d2b641aa977acff423eb6770a8e4c4a81aecfd4e62_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:9d74585acc098c13f3e9dac5ae7f5ef337fa82bd7119d7f1849c5f8a50e84907_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:a6ee95d0ed82bddef084684d11fa770bd646d9be9bc65b3bc386d7c58b33975c_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:f7b8654eb8bf675c8c26f0ad395d790f990308d3ad6683bb61b484c92073bbac_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:2a598e7fd07db27100d9a53a328ac9a0535865883bddd1373f4f1f2705068d2f_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:4f8f0b02d0969753e156226a998d442746c238a2a50ea606a49ca0cf695b8925_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:63c02348faa7d4e26e35c69aef5453613dd607a26116823b931b89fe5311e181_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:ae224866f0085d2c00ab18a28d2aed076e455731903989a49a544abf49950d1f_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:0a90a13f006ef0b271079b728ef6d54081f36ae19b6d0e9ab4dc24ea52a30fad_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:3a53629645832974a883002e53198df7c28e59dd6d1df99bf321b52d0ef84b61_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:879315f438ca43abb607d6c97f8fbd4ca2d38209b142e2d97cc0598740273252_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:c6c4d01f5fcee6cad3fc870cace92f45000624760e6e93654bb5e814afeed7bb_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:50f7647620c78fd6b445379c8762f5e978113fe3552906376a24459263f27459_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:53e641f48ddc05c63da2e6bc24e9e4636a10de2c3599d8f5f78622bdebca07ca_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:57114b7a386c406715e342637558fab57afeef2e193517f99173a441f39401d5_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:dcdcaa90f292f2d7ad3f10acbedfab9f7f22f3432c3156055f34760d9bf9429c_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:3723b1d5c74f37cba219e203fd2026a718d4821595cb505ec6626684695da65b_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:562291f52b6bce98ec8795856b808545c4fe30047b54544c7f6c2ab4678480ff_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:e6dfac9bc3e467e141a425944782f5087ed967ac4d02d8d47442e3d61ba5b882_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:f683186c2cc8be9ec09b8efdec66d6b8b1f991c7f7b9fd398dc7c3f9ab8b3079_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:2471edd63a94473c68cf37ee50de643e40003f2c5bba84063c154e4888a7f0bd_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:7cef49d68df5d8efe52061a18920e07e6c7efa3016c0cea7d1747e67851f254a_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:d912383405599032acffbad22bc154f63a87dd429ba882fd7a94cb82fe650d8e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:f3034211e16de48af540efe4ee460395dba0a4a544fa4f277a12840a25df1730_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:181d1decb2f16fcf6f5938027ed346aca29126687bbe6cdcc601c25087f70d11_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:ab5e4d27e23448d99a37b8c05442bb1254083cdc4ff325e721d97d80ec27346c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:ac172243d158e126594f28317e0cfb37dc1790c9f2121e95fe52506b5e05fc91_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:fd96b6284d270effa0f838d960ea4218b72b54c4718513eb523658f2f4972682_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:c59d9cd479c62730eda5d482fb2f4e9fbc17a90a5a2861b130aafe1f3a27a333_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:e547f672b14b6e8fc2ffd300b150aedbd3f6b6b36ddcad612f7c992a936a7c82_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:ead1263d538974c48790c65e44cd9cab07a62c2893b2eeb250174e7cf58d7f9d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:ed0457a57c7b39b79fb308176f45ffe678938b25fbb8c15de2cedbe54b916f64_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:9847a5752ec77e17861dcdac5546ee5c53679c80c3569609b21d9080ee3b7ef3_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:d3c823e61a0682ddc85e576e86234e580992886de471035630f9c89bbad6ebb7_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:ded425ed0af88a1411a06e5191aee25c4c59f1de85b041eba95c9997686cf09e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:ee63f59942f9df04e95fc4266f0d194cd62a7ca08dd5478283884d0ab6003da7_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:724377cabaa284a5197e7505a7150c89631c2f2bcc629e074c7c0be18abd8e6f_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:cbf797c9e93413540b20ebee9191375ddd8185ef22dc8c9e23cc3a4c015abaf7_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:d7609d62a801cf07ef639abcd4f193b2d68967fadebbfddf2349003d7e9eaa44_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:f61fe90362f793225591eb7e2a86d5cdc6fb35aa087e9b6a6218a42b1c1d945d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:1c4de9460688800b62bad6fb13653ef4b52bf215e4d41674291193e9b8e71b24_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:4f1e59610b2fbedc56f425b3fbd8f16c9ea6ea96025f18a404fe48f6a49bdc1e_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:ab0d28306dd6daa03af79bdc2ea650e59a50a03317987c4cdd0d1ee70f95b597_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:b700a8bb7ea6e4253afb8bcf94e5ad086349980ca0716a87817724d3da3fdce1_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4015f46d2172db26a348635e2e8cbd4bbcdbbaa56a4b12c232676a3d0f5bbee2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4169252c61ec70b91b10c750d5f9ecd53f5c3c906766bba9103afbac3c3f9edf_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4ab72a192553c21de76754f06fe38cf443e686e4b4edc2aa2ceb2b6b9d95bb6c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:579ef0925c6f56ed48f22121767189431bef6c4eaa72b2648a1b91488357a51d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:2b796bf55ecf7a14d1c87d829a2b20d998fc2943686373105b0a50f5053ef836_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:7e960b59f64547f7e9602b7c066a51ab52aba929726aec2bacdf486a9d4d28fd_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:a43e430a2ec0b86fb6ade361677be298b4e27444388a9bca35ddafbf9c77277c_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:d2394b121256985e5ca322aea77bb0bf999ba2d7a6f1627e62bbc125c475dbbd_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:1868e2ea03d063b4cd64601cb0aaf5c9ea7f55e83eba2e2d4dcf6f830efeafc7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:4bfbf0bdc882979bc94d85a4aeff8caa0ec7887aec7412e32ae1442811325d06_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:844e3d69d3c26914e02612466021592a876e6e2dd6cf77084723a70f567ba0e2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:bbe04eb8fd197f15875f498e3c18b9a7a445380efb5f696422d79df99a34a881_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:2c9f9b47c01c5e5e017c583c6a09c5c52f40ef88acf789689265cb31ef328fb8_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:7b5e883efde312c1571c4825b523ff04ab57af6a9f4162a36b80b973f9602c46_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:d896dd89fb924da246fc729041d9debc019d8a4210cfd3de8883834e429cca10_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:ede3e22d4e4de49789622149dec23beaa7e0569a3715ac2262929df543e05bc3_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:273a393b8c62fbc4edb4bf4033c47d8b52bda56fc9cafa289d9513210840815b_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:71f1b590785ce7f4577ecd687dbab9bc3c5931c568a3108eb84279c7aa892046_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:d1e1b4310eb64891c9456be7c34547bf36b0aafdeb471a49f0892d7eaf8f41f4_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:e0a7514406c7ffae080db6d4db3bbf7b77a606ea4632bf09f8301ce1d3739bb5_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:2a4c6c061d154ed9c74707a7a2e2390fde2a150f36197386c3e49c0612d345b2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:6ffcc051c955e198c6d96b59bda0ef26b5124ebbdef5357d36a84534f2c7097c_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:c9258bf58373f9c6859789c8ec272cd7d702c37e063fc2ee53c66d296e7ee3d0_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:d83c6bb4f2a91d2c4de3ffbf4aa8ceecb695f8491ba7586d55275c62cd1931e6_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:67637c5cba3eca1597885823c6e44c13db445d0ef38751eb8364b69dbf07caac_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:68fb5c2a3c8a0d5e6bbcf2c5568969f6b13e72006d4d54bc5c57cd9a032d1bf6_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:9f5fa40c88b0f5d1ae3634632240817a91f4575f8eae9c005b8e35a55cf38003_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:fcbcee9fc7e0bbf5775a33ae9b7e3d7e48a90e2aa1cb85605e05612b6e4d4e30_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:0c165bb93ce933c7f9998a615908bfcca0b4eb38e32e24a1c823e63791b7604b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:42aa392f82bdc45a3b857d1ed44e224ddfd14db1e3dcbb74dcc850ac0540e964_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:9dcd0c0ecf1523bf05bd296edbecd85841b2753dee7a5c9df32437f9a8e31471_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:c5505c462e6b2c04a6e14bc1e22dfc42dc8adea8f6eaf0615cd58b1973b7d62e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:1a93df314c31f10da7b1345fab07b15b846e28865764178e34124f84dc967152_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:34343f81973c3fbdd8630c32d0fad597745ea10f960ea64236408e58e0f10e14_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:7b3635784ebfb6343a73c9fa6de7bea57b3aacce1c49a0f7f250a471f7b897e3_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:f0a7fade2853193429bab16922b2e3bbe426e14632423d6550ff7dfb66d42827_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:94950d339fa382d6911f12fc23dcaf2cdb2854c4cab654f6058f5bf0df1bb371_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:bcfbd2284cbeeba5a835aaf5a5590ddd8156bd881ca24fd0fe1465fade1f84c2_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:bd739ced163053224e5b0ea2f3cd577481c6b6c1162cc0fbc186f1716b4a1fbd_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:d40496f114898985cde3860b9664c34d8c32de85e4d3d846df91a6ba27a2e99c_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:3f7cbe7605595d712e14d9a17717fafc6c6e334f2ad3e821c34947ec78411046_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:96775900ea90e57487da6afe59d058b33cb977a0247a1bbeb1bd07bed2816398_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:caa6b121538e074312314d9888d9b423bd225aefa4f25eb145893b9fc548c0ad_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:e59c90cfe8160b28f9d2aa9e59b1d04d742df44d2195210ebc1946ee3cb78b6f_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:10c95e5c55ccc1a04e8d2ac28bd1afd3b9bb9a7e9e2a5e3e8efb301421539980_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:60a310d4464b4817845703d14e95729321b883fbfc79fbf2dd8d514bb3c675e9_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:70e6c14d72f14d25a90f44043932fbd3f824b30e8ad4b36307100726b24d9c06_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:784129cf69b3bf77a907fe909fd73a2a4d0fbd947fe0037e47aa1d62c6ffcf0b_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:26e58654cdd092cb812207cb4473f5f5988ebd708d95c34152c2e8c124f7297d_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:40e5d9634aa7469df8247758961d486cfac3e7d7f0b59184e11ed5571b46bf40_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:5b59faed336de07965755c893cb9d0ffc52ec90f61cc8c54487f6c0cac53322e_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:b59aea0c9e859025988b0f0c9b6e7748c4acf6d0b4cee35f3fabb7b84feb598b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:2368703206d833e4cb73b7e8750efb9997633a6f9accbf032426bcfcae4c00d9_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:80b543b207e724e880ff932c514fe9c6a3925bfede1c31863531e4e69d050d40_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:82405a9a5715db5442dfa3d3f594888bd7b2f9c778d68357a7d8884f5ea46915_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:8fd2bda7b8d94ededf7973f76a159dd61105776a05d961ac9cfd9bee0a988213_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:4def845360282dad99181b96bcd834b4863eab39e246fda2476234c561c652ec_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:b67aec868b6366cf04f3980b15588e1a0af5c88b2248958bc3884261ad390ca0_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:ceacf3491ebec6f5613011fe8d36b66d00f8b3697832615a4d7024e23125085e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:d9f6a520b818dcccbedb94720b5979ef1cdec2e02491c76e3decb3ee18f2085d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:3e6519c0c789b946eb1b811867c41c4f204440bad5734760c0aca4e3fc602e5a_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:95684cfaf4d5d91bc9fe8cfbf64a6f113e944e3f0c102d27851be5232eca0dbb_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:9cb20990af88287dd8a27de4e4ef12eb244577a1844482d26107359c6efe8efa_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:a69ebb0c7e817d44cfabd86ad13ef4cc94a8bf5b6e8a607d17b197603d64a224_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:0eea35a3af36d08db945a70c387cc38eb326f75b4ed322f09d8c91863cfe5d02_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:22c48db227cd6f2ecec746674e31ac7f5a983a418679fc91678a0aa0ebb49496_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:8e8d249c39d562f819d347f12610dda7f5c01215c41101bfd5dca008e04edf6e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:f8adb8dd40a204bacb51cd423803097a514ec8e8e9f52209e02ecf14cad622bb_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:03adc6277e2bf409391941c6f4508154abc38a0c043139978754f6d4fd32c5a8_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:7e100af30ed11325cb2cbee02af09306e53df5db5847f2a4b733cd307e3cd623_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:91b474b4808b18c279c9f8eb3be8e6d1e1e47cf2b5f9553acd901c74b20bddbc_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:d56f884a9700a4f193d6f3db1895bd54745ec77e02ead3d43bd6e4fe04a2969e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:1f7ed606f69a74943aedb0a956e5a71019f8a1ab53cd3f8166be0f55a69809b9_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:4841076eb82f1f1748345556ff6c4e02a17f1f63c661e375eaba720291cbaf6a_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:a79ac7dcae109aa526e2a218327dd8c5dba2b924fc27447a07199b3b2f2f67b3_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:dee022821852f2d5ebdbbd9f09c9b97997a905061dadb3f78433291d462d49a7_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:1a746b16f362a83f399255d925b322b3440b3d89ae4d64ab7962db3d82ee91a1_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:417a31bec11c3ffb70f40fa955069d5160dc12e2426b67e1d2e35ae3f7fa06df_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:89a3cb77fdb3dcbddfe96785a9ba3fa2b6132098fce028f859663b31fcf77a34_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:b1ba0b4cd8f515895af7b9f797f6ea5b661f7254ce019ce5115375639dcd06e9_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:0827c96b922ca185b7a7321a4f504e8a5dc01aadafcfd20443060546981339a8_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:b5b732dfc0ce3d740781eda9a72e1542c7a30b28b39d2be6e0ba470af06a9680_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:f74081e5eb03227ccff5717a7d139ceee6c5b610625ff7b99e639a2652bf7663_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:f80976ae4fc332600e1d8e1d70b42c038ea05d76ac2c5b1d7d0cbaddbe89140a_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:4029ece83812237ce8b1d394252e9561012e8cd94af40680a90284fbea1bc32a_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:63a3465a7539a8a286c846a84d63e3feca9a11758e4c0d697889b0bdeb26a25c_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:81c227d7c7599b0d4357ccdc3b567f31b67bbd1198c9e7ddba1864c299bad11b_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:f392bde8ce22aca058d77132cc709440442931679dbe725c52516f1cdc97b38d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:4825fab15300bc911e0b2b5c4ae342004bfcff95fa64af0fdb1085fadd132aa2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:68f879679911c2ca828551b900eca1c2f4e8caec7312fbba502fabc4778d1832_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:b4188ac728c746769ef6586663dd6d7d07db984b083397d2c76fe847ef22ea60_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:f2805fc1e6f37bc8acc3187ea8712d38f32151d584c10d5996c0ad7076cd638b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:1c943edcf23df14f254e4aabb93cbc1665bbc7902076b3f04bd80edd2fe324db_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:84c5d2b24caf68c3a6a6d078bd9f66de9fb88e769f6c09c11a248693d463ac21_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:907d6e24922d6d372bceb21ad830c254c6a9c9d6be0ac4f4edf22c236437a09d_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:923a3ee0e3d5b7341b96826e465e6856855f2801dbaf381d139a632c77bda1c5_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:285d2e2d103b458f0603435aedb4d779d85e48fed2267845b798f4a04a0df4c7_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:44981f5fcbc9086470143fae6e21a5de3baad2258d9f8c81accecb2faad6b2a2_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:5ba248d0bc8fcde70e210319bb962f4043e5e8ab8a5625c8f8f30ec96d47c6b7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:f681cdac28ee9ff6375fb39d7b7d12917a06043db44c16e8f84bdb9e09e7b5e7_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:2057531884d897574fc0648e5d3cf21c4549738ac5f35d8095f400cdb80049cc_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:8be0e50a132a2c974893f36b51f3f40b6d6e1f913ae0f9ee6319ef0d5ec455b7_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:a2edc5d233d1547fa2e1d01f29d8a914930735f7098289892430ba9a17d20ab7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:c81c7aeb3dd05801e279a9fcc8d6c3baf00a2ccc08eab53f8acc8bd4d2d129c4_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:25e17bf203568420587cf5907e84e4167afab84dfce549c91bea99e70290b742_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:277f4e8ac5fc292b9f0f2d123f924c6b5cbc0a2eeba3c87a0e61c5ee2399aaa9_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:76766b77ed53513cd254195b25d205ab6964522816e1e3662800e38a105abdf2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:c7ace45f7cb86055e2ba18e27a660f6aa6cb4eff497204294875d5dd1d63cce3_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:3780b1bc80ab7ebc3cfed06ce69346d589dc07b53cea65ad3ed92cc912284300_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:681b356709778083448892513b4559f693e002bfda897a57e2d065f736a902b5_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:d110b52ce8ea022b3d35e7c4b0ce3b646f30513cf8abb55327132565ea4a6a87_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:f076ab59f3abe061e4553a61f98a144a472297dba5ed924ca887f130e9372da9_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/containerd/containerd: containerd: Host-root command execution via unvalidated image config labels in CRI plugin"
},
{
"cve": "CVE-2026-59869",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-07-08T16:01:38.408322+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:31bd91156f49687d2efffd3be971d9ee0e16abb420b8e8b958caa88b97770020_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:a6315866c67ba350665f5a92f960a5a44e427ca37ae7505e2072af4e02c42f76_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:b3ad6fa1de658f3a40c8b183ab501ebc66b359d8cc01439d4215aa52769df213_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:bfde9ebea1fcd27b6d104d5f67db62e870878f9517ccbec2f649dd2c1af4a073_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:08fed161d59299881ff7a54db859feaf8ed7bdb8238d6cf12628ccb73575665e_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:09436fe2649ca384b1bc1fd8f736fb1d71392733310e66758ed9f289e00471f9_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:3b83670e1c0e9d1f5b76bd7b75d77072bc6208646bc2201bd0bd200dbc59e34a_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:927146f966e4c5c2908d29d8ab45a8f3071dbd5ebd9cf0424460a23f814a72a7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:38a3bc59511133cae56827eba879e7c82c5a974bf1f16b6e8d95e1f79821e669_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:3fa04db82e3ce6169270db0ce29107b69d8e044e0a1ab13a2bf1050b8c26d087_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:6041a918713d4464c73560b68c294a12d33f297a980d2f9d0e0cc8c300a96f24_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:98bd72ba69bdfb3070d87b3edcbd7050579a514b72cfd67c2926541ba52dbaf7_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:938abc970731c2eeda8e2b7b73e96d4dfcbf7587330c7b7e52117a577700e426_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:a0876a25ce85d7d4616212813f012422826f152b8d71065e75cd9c3e23034d8a_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:c77077a0cca835a503a6529c89ab19c4027f949d361afdf8a5a259e1e87b0d55_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:d5bbf3fe886f27cdc27363dcb175e004487d9c8f36de4f1f8516fbeda3a95224_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:0f5d8cae3ba4ea4fcdc5fb9d08f797d576bc225b92af66f193bd4b1324cda4b9_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:2d3588825f8a714fa59b1648d0934d064165e333f322f7f31f01f07b940d42d9_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:68aa571827f5331f1d5a3bd0c60ad441a18877ba11921aff2633940236bafcd4_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:9b80c9c61d4befefa7f6a65ae8c001ce7e343a1e4f251e5ebe025625d9511730_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:9b2c24401a91903f023096d2b641aa977acff423eb6770a8e4c4a81aecfd4e62_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:9d74585acc098c13f3e9dac5ae7f5ef337fa82bd7119d7f1849c5f8a50e84907_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:a6ee95d0ed82bddef084684d11fa770bd646d9be9bc65b3bc386d7c58b33975c_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:f7b8654eb8bf675c8c26f0ad395d790f990308d3ad6683bb61b484c92073bbac_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:2a598e7fd07db27100d9a53a328ac9a0535865883bddd1373f4f1f2705068d2f_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:4f8f0b02d0969753e156226a998d442746c238a2a50ea606a49ca0cf695b8925_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:63c02348faa7d4e26e35c69aef5453613dd607a26116823b931b89fe5311e181_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:ae224866f0085d2c00ab18a28d2aed076e455731903989a49a544abf49950d1f_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:0a90a13f006ef0b271079b728ef6d54081f36ae19b6d0e9ab4dc24ea52a30fad_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:3a53629645832974a883002e53198df7c28e59dd6d1df99bf321b52d0ef84b61_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:879315f438ca43abb607d6c97f8fbd4ca2d38209b142e2d97cc0598740273252_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:c6c4d01f5fcee6cad3fc870cace92f45000624760e6e93654bb5e814afeed7bb_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:50f7647620c78fd6b445379c8762f5e978113fe3552906376a24459263f27459_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:53e641f48ddc05c63da2e6bc24e9e4636a10de2c3599d8f5f78622bdebca07ca_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:57114b7a386c406715e342637558fab57afeef2e193517f99173a441f39401d5_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:dcdcaa90f292f2d7ad3f10acbedfab9f7f22f3432c3156055f34760d9bf9429c_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:3723b1d5c74f37cba219e203fd2026a718d4821595cb505ec6626684695da65b_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:562291f52b6bce98ec8795856b808545c4fe30047b54544c7f6c2ab4678480ff_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:e6dfac9bc3e467e141a425944782f5087ed967ac4d02d8d47442e3d61ba5b882_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:f683186c2cc8be9ec09b8efdec66d6b8b1f991c7f7b9fd398dc7c3f9ab8b3079_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:2471edd63a94473c68cf37ee50de643e40003f2c5bba84063c154e4888a7f0bd_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:7cef49d68df5d8efe52061a18920e07e6c7efa3016c0cea7d1747e67851f254a_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:d912383405599032acffbad22bc154f63a87dd429ba882fd7a94cb82fe650d8e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:f3034211e16de48af540efe4ee460395dba0a4a544fa4f277a12840a25df1730_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:181d1decb2f16fcf6f5938027ed346aca29126687bbe6cdcc601c25087f70d11_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:ab5e4d27e23448d99a37b8c05442bb1254083cdc4ff325e721d97d80ec27346c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:ac172243d158e126594f28317e0cfb37dc1790c9f2121e95fe52506b5e05fc91_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:fd96b6284d270effa0f838d960ea4218b72b54c4718513eb523658f2f4972682_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:c59d9cd479c62730eda5d482fb2f4e9fbc17a90a5a2861b130aafe1f3a27a333_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:e547f672b14b6e8fc2ffd300b150aedbd3f6b6b36ddcad612f7c992a936a7c82_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:ead1263d538974c48790c65e44cd9cab07a62c2893b2eeb250174e7cf58d7f9d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:ed0457a57c7b39b79fb308176f45ffe678938b25fbb8c15de2cedbe54b916f64_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:9847a5752ec77e17861dcdac5546ee5c53679c80c3569609b21d9080ee3b7ef3_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:d3c823e61a0682ddc85e576e86234e580992886de471035630f9c89bbad6ebb7_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:ded425ed0af88a1411a06e5191aee25c4c59f1de85b041eba95c9997686cf09e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:ee63f59942f9df04e95fc4266f0d194cd62a7ca08dd5478283884d0ab6003da7_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:724377cabaa284a5197e7505a7150c89631c2f2bcc629e074c7c0be18abd8e6f_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:cbf797c9e93413540b20ebee9191375ddd8185ef22dc8c9e23cc3a4c015abaf7_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:d7609d62a801cf07ef639abcd4f193b2d68967fadebbfddf2349003d7e9eaa44_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:f61fe90362f793225591eb7e2a86d5cdc6fb35aa087e9b6a6218a42b1c1d945d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:1c4de9460688800b62bad6fb13653ef4b52bf215e4d41674291193e9b8e71b24_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:4f1e59610b2fbedc56f425b3fbd8f16c9ea6ea96025f18a404fe48f6a49bdc1e_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:ab0d28306dd6daa03af79bdc2ea650e59a50a03317987c4cdd0d1ee70f95b597_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:b700a8bb7ea6e4253afb8bcf94e5ad086349980ca0716a87817724d3da3fdce1_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4015f46d2172db26a348635e2e8cbd4bbcdbbaa56a4b12c232676a3d0f5bbee2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4169252c61ec70b91b10c750d5f9ecd53f5c3c906766bba9103afbac3c3f9edf_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4ab72a192553c21de76754f06fe38cf443e686e4b4edc2aa2ceb2b6b9d95bb6c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:579ef0925c6f56ed48f22121767189431bef6c4eaa72b2648a1b91488357a51d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:1868e2ea03d063b4cd64601cb0aaf5c9ea7f55e83eba2e2d4dcf6f830efeafc7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:4bfbf0bdc882979bc94d85a4aeff8caa0ec7887aec7412e32ae1442811325d06_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:844e3d69d3c26914e02612466021592a876e6e2dd6cf77084723a70f567ba0e2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:bbe04eb8fd197f15875f498e3c18b9a7a445380efb5f696422d79df99a34a881_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:2c9f9b47c01c5e5e017c583c6a09c5c52f40ef88acf789689265cb31ef328fb8_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:7b5e883efde312c1571c4825b523ff04ab57af6a9f4162a36b80b973f9602c46_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:d896dd89fb924da246fc729041d9debc019d8a4210cfd3de8883834e429cca10_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:ede3e22d4e4de49789622149dec23beaa7e0569a3715ac2262929df543e05bc3_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:273a393b8c62fbc4edb4bf4033c47d8b52bda56fc9cafa289d9513210840815b_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:71f1b590785ce7f4577ecd687dbab9bc3c5931c568a3108eb84279c7aa892046_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:d1e1b4310eb64891c9456be7c34547bf36b0aafdeb471a49f0892d7eaf8f41f4_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:e0a7514406c7ffae080db6d4db3bbf7b77a606ea4632bf09f8301ce1d3739bb5_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:2a4c6c061d154ed9c74707a7a2e2390fde2a150f36197386c3e49c0612d345b2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:6ffcc051c955e198c6d96b59bda0ef26b5124ebbdef5357d36a84534f2c7097c_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:c9258bf58373f9c6859789c8ec272cd7d702c37e063fc2ee53c66d296e7ee3d0_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:d83c6bb4f2a91d2c4de3ffbf4aa8ceecb695f8491ba7586d55275c62cd1931e6_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:67637c5cba3eca1597885823c6e44c13db445d0ef38751eb8364b69dbf07caac_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:68fb5c2a3c8a0d5e6bbcf2c5568969f6b13e72006d4d54bc5c57cd9a032d1bf6_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:9f5fa40c88b0f5d1ae3634632240817a91f4575f8eae9c005b8e35a55cf38003_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:fcbcee9fc7e0bbf5775a33ae9b7e3d7e48a90e2aa1cb85605e05612b6e4d4e30_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:0c165bb93ce933c7f9998a615908bfcca0b4eb38e32e24a1c823e63791b7604b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:42aa392f82bdc45a3b857d1ed44e224ddfd14db1e3dcbb74dcc850ac0540e964_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:9dcd0c0ecf1523bf05bd296edbecd85841b2753dee7a5c9df32437f9a8e31471_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:c5505c462e6b2c04a6e14bc1e22dfc42dc8adea8f6eaf0615cd58b1973b7d62e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:1a93df314c31f10da7b1345fab07b15b846e28865764178e34124f84dc967152_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:34343f81973c3fbdd8630c32d0fad597745ea10f960ea64236408e58e0f10e14_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:7b3635784ebfb6343a73c9fa6de7bea57b3aacce1c49a0f7f250a471f7b897e3_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:f0a7fade2853193429bab16922b2e3bbe426e14632423d6550ff7dfb66d42827_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:94950d339fa382d6911f12fc23dcaf2cdb2854c4cab654f6058f5bf0df1bb371_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:bcfbd2284cbeeba5a835aaf5a5590ddd8156bd881ca24fd0fe1465fade1f84c2_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:bd739ced163053224e5b0ea2f3cd577481c6b6c1162cc0fbc186f1716b4a1fbd_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:d40496f114898985cde3860b9664c34d8c32de85e4d3d846df91a6ba27a2e99c_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:3f7cbe7605595d712e14d9a17717fafc6c6e334f2ad3e821c34947ec78411046_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:96775900ea90e57487da6afe59d058b33cb977a0247a1bbeb1bd07bed2816398_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:caa6b121538e074312314d9888d9b423bd225aefa4f25eb145893b9fc548c0ad_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:e59c90cfe8160b28f9d2aa9e59b1d04d742df44d2195210ebc1946ee3cb78b6f_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:10c95e5c55ccc1a04e8d2ac28bd1afd3b9bb9a7e9e2a5e3e8efb301421539980_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:60a310d4464b4817845703d14e95729321b883fbfc79fbf2dd8d514bb3c675e9_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:70e6c14d72f14d25a90f44043932fbd3f824b30e8ad4b36307100726b24d9c06_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:784129cf69b3bf77a907fe909fd73a2a4d0fbd947fe0037e47aa1d62c6ffcf0b_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:26e58654cdd092cb812207cb4473f5f5988ebd708d95c34152c2e8c124f7297d_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:40e5d9634aa7469df8247758961d486cfac3e7d7f0b59184e11ed5571b46bf40_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:5b59faed336de07965755c893cb9d0ffc52ec90f61cc8c54487f6c0cac53322e_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:b59aea0c9e859025988b0f0c9b6e7748c4acf6d0b4cee35f3fabb7b84feb598b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:2368703206d833e4cb73b7e8750efb9997633a6f9accbf032426bcfcae4c00d9_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:80b543b207e724e880ff932c514fe9c6a3925bfede1c31863531e4e69d050d40_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:82405a9a5715db5442dfa3d3f594888bd7b2f9c778d68357a7d8884f5ea46915_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:8fd2bda7b8d94ededf7973f76a159dd61105776a05d961ac9cfd9bee0a988213_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:4def845360282dad99181b96bcd834b4863eab39e246fda2476234c561c652ec_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:b67aec868b6366cf04f3980b15588e1a0af5c88b2248958bc3884261ad390ca0_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:ceacf3491ebec6f5613011fe8d36b66d00f8b3697832615a4d7024e23125085e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:d9f6a520b818dcccbedb94720b5979ef1cdec2e02491c76e3decb3ee18f2085d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:3e6519c0c789b946eb1b811867c41c4f204440bad5734760c0aca4e3fc602e5a_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:95684cfaf4d5d91bc9fe8cfbf64a6f113e944e3f0c102d27851be5232eca0dbb_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:9cb20990af88287dd8a27de4e4ef12eb244577a1844482d26107359c6efe8efa_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:a69ebb0c7e817d44cfabd86ad13ef4cc94a8bf5b6e8a607d17b197603d64a224_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:0eea35a3af36d08db945a70c387cc38eb326f75b4ed322f09d8c91863cfe5d02_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:22c48db227cd6f2ecec746674e31ac7f5a983a418679fc91678a0aa0ebb49496_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:8e8d249c39d562f819d347f12610dda7f5c01215c41101bfd5dca008e04edf6e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:f8adb8dd40a204bacb51cd423803097a514ec8e8e9f52209e02ecf14cad622bb_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:03adc6277e2bf409391941c6f4508154abc38a0c043139978754f6d4fd32c5a8_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:7e100af30ed11325cb2cbee02af09306e53df5db5847f2a4b733cd307e3cd623_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:91b474b4808b18c279c9f8eb3be8e6d1e1e47cf2b5f9553acd901c74b20bddbc_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:d56f884a9700a4f193d6f3db1895bd54745ec77e02ead3d43bd6e4fe04a2969e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:1f7ed606f69a74943aedb0a956e5a71019f8a1ab53cd3f8166be0f55a69809b9_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:4841076eb82f1f1748345556ff6c4e02a17f1f63c661e375eaba720291cbaf6a_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:a79ac7dcae109aa526e2a218327dd8c5dba2b924fc27447a07199b3b2f2f67b3_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:dee022821852f2d5ebdbbd9f09c9b97997a905061dadb3f78433291d462d49a7_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:1a746b16f362a83f399255d925b322b3440b3d89ae4d64ab7962db3d82ee91a1_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:417a31bec11c3ffb70f40fa955069d5160dc12e2426b67e1d2e35ae3f7fa06df_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:89a3cb77fdb3dcbddfe96785a9ba3fa2b6132098fce028f859663b31fcf77a34_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:b1ba0b4cd8f515895af7b9f797f6ea5b661f7254ce019ce5115375639dcd06e9_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:0827c96b922ca185b7a7321a4f504e8a5dc01aadafcfd20443060546981339a8_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:b5b732dfc0ce3d740781eda9a72e1542c7a30b28b39d2be6e0ba470af06a9680_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:f74081e5eb03227ccff5717a7d139ceee6c5b610625ff7b99e639a2652bf7663_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:f80976ae4fc332600e1d8e1d70b42c038ea05d76ac2c5b1d7d0cbaddbe89140a_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:4029ece83812237ce8b1d394252e9561012e8cd94af40680a90284fbea1bc32a_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:63a3465a7539a8a286c846a84d63e3feca9a11758e4c0d697889b0bdeb26a25c_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:81c227d7c7599b0d4357ccdc3b567f31b67bbd1198c9e7ddba1864c299bad11b_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:f392bde8ce22aca058d77132cc709440442931679dbe725c52516f1cdc97b38d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:4825fab15300bc911e0b2b5c4ae342004bfcff95fa64af0fdb1085fadd132aa2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:68f879679911c2ca828551b900eca1c2f4e8caec7312fbba502fabc4778d1832_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:b4188ac728c746769ef6586663dd6d7d07db984b083397d2c76fe847ef22ea60_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:f2805fc1e6f37bc8acc3187ea8712d38f32151d584c10d5996c0ad7076cd638b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:1c943edcf23df14f254e4aabb93cbc1665bbc7902076b3f04bd80edd2fe324db_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:84c5d2b24caf68c3a6a6d078bd9f66de9fb88e769f6c09c11a248693d463ac21_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:907d6e24922d6d372bceb21ad830c254c6a9c9d6be0ac4f4edf22c236437a09d_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:923a3ee0e3d5b7341b96826e465e6856855f2801dbaf381d139a632c77bda1c5_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:285d2e2d103b458f0603435aedb4d779d85e48fed2267845b798f4a04a0df4c7_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:44981f5fcbc9086470143fae6e21a5de3baad2258d9f8c81accecb2faad6b2a2_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:5ba248d0bc8fcde70e210319bb962f4043e5e8ab8a5625c8f8f30ec96d47c6b7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:f681cdac28ee9ff6375fb39d7b7d12917a06043db44c16e8f84bdb9e09e7b5e7_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:2057531884d897574fc0648e5d3cf21c4549738ac5f35d8095f400cdb80049cc_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:8be0e50a132a2c974893f36b51f3f40b6d6e1f913ae0f9ee6319ef0d5ec455b7_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:a2edc5d233d1547fa2e1d01f29d8a914930735f7098289892430ba9a17d20ab7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:c81c7aeb3dd05801e279a9fcc8d6c3baf00a2ccc08eab53f8acc8bd4d2d129c4_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:25e17bf203568420587cf5907e84e4167afab84dfce549c91bea99e70290b742_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:277f4e8ac5fc292b9f0f2d123f924c6b5cbc0a2eeba3c87a0e61c5ee2399aaa9_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:76766b77ed53513cd254195b25d205ab6964522816e1e3662800e38a105abdf2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:c7ace45f7cb86055e2ba18e27a660f6aa6cb4eff497204294875d5dd1d63cce3_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:3780b1bc80ab7ebc3cfed06ce69346d589dc07b53cea65ad3ed92cc912284300_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:681b356709778083448892513b4559f693e002bfda897a57e2d065f736a902b5_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:d110b52ce8ea022b3d35e7c4b0ce3b646f30513cf8abb55327132565ea4a6a87_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:f076ab59f3abe061e4553a61f98a144a472297dba5ed924ca887f130e9372da9_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2498122"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in js-yaml, a JavaScript YAML parser and dumper. A remote attacker could exploit this vulnerability by providing a specially crafted YAML document containing a chain of mappings with merge keys. This could cause the parser to consume excessive CPU resources, leading to a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "js-yaml: js-yaml: Denial of Service via crafted YAML documents",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated as Important. Red Hat products utilizing `js-yaml` to process untrusted YAML input are susceptible to a denial of service, as a remote attacker can provide a crafted document that consumes excessive CPU resources. This is considered Important due to the potential for service disruption without requiring authentication or complex attack vectors.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:2b796bf55ecf7a14d1c87d829a2b20d998fc2943686373105b0a50f5053ef836_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:7e960b59f64547f7e9602b7c066a51ab52aba929726aec2bacdf486a9d4d28fd_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:a43e430a2ec0b86fb6ade361677be298b4e27444388a9bca35ddafbf9c77277c_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:d2394b121256985e5ca322aea77bb0bf999ba2d7a6f1627e62bbc125c475dbbd_amd64"
],
"known_not_affected": [
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:31bd91156f49687d2efffd3be971d9ee0e16abb420b8e8b958caa88b97770020_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:a6315866c67ba350665f5a92f960a5a44e427ca37ae7505e2072af4e02c42f76_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:b3ad6fa1de658f3a40c8b183ab501ebc66b359d8cc01439d4215aa52769df213_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:bfde9ebea1fcd27b6d104d5f67db62e870878f9517ccbec2f649dd2c1af4a073_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:08fed161d59299881ff7a54db859feaf8ed7bdb8238d6cf12628ccb73575665e_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:09436fe2649ca384b1bc1fd8f736fb1d71392733310e66758ed9f289e00471f9_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:3b83670e1c0e9d1f5b76bd7b75d77072bc6208646bc2201bd0bd200dbc59e34a_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:927146f966e4c5c2908d29d8ab45a8f3071dbd5ebd9cf0424460a23f814a72a7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:38a3bc59511133cae56827eba879e7c82c5a974bf1f16b6e8d95e1f79821e669_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:3fa04db82e3ce6169270db0ce29107b69d8e044e0a1ab13a2bf1050b8c26d087_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:6041a918713d4464c73560b68c294a12d33f297a980d2f9d0e0cc8c300a96f24_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:98bd72ba69bdfb3070d87b3edcbd7050579a514b72cfd67c2926541ba52dbaf7_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:938abc970731c2eeda8e2b7b73e96d4dfcbf7587330c7b7e52117a577700e426_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:a0876a25ce85d7d4616212813f012422826f152b8d71065e75cd9c3e23034d8a_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:c77077a0cca835a503a6529c89ab19c4027f949d361afdf8a5a259e1e87b0d55_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:d5bbf3fe886f27cdc27363dcb175e004487d9c8f36de4f1f8516fbeda3a95224_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:0f5d8cae3ba4ea4fcdc5fb9d08f797d576bc225b92af66f193bd4b1324cda4b9_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:2d3588825f8a714fa59b1648d0934d064165e333f322f7f31f01f07b940d42d9_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:68aa571827f5331f1d5a3bd0c60ad441a18877ba11921aff2633940236bafcd4_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:9b80c9c61d4befefa7f6a65ae8c001ce7e343a1e4f251e5ebe025625d9511730_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:9b2c24401a91903f023096d2b641aa977acff423eb6770a8e4c4a81aecfd4e62_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:9d74585acc098c13f3e9dac5ae7f5ef337fa82bd7119d7f1849c5f8a50e84907_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:a6ee95d0ed82bddef084684d11fa770bd646d9be9bc65b3bc386d7c58b33975c_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:f7b8654eb8bf675c8c26f0ad395d790f990308d3ad6683bb61b484c92073bbac_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:2a598e7fd07db27100d9a53a328ac9a0535865883bddd1373f4f1f2705068d2f_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:4f8f0b02d0969753e156226a998d442746c238a2a50ea606a49ca0cf695b8925_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:63c02348faa7d4e26e35c69aef5453613dd607a26116823b931b89fe5311e181_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:ae224866f0085d2c00ab18a28d2aed076e455731903989a49a544abf49950d1f_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:0a90a13f006ef0b271079b728ef6d54081f36ae19b6d0e9ab4dc24ea52a30fad_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:3a53629645832974a883002e53198df7c28e59dd6d1df99bf321b52d0ef84b61_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:879315f438ca43abb607d6c97f8fbd4ca2d38209b142e2d97cc0598740273252_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:c6c4d01f5fcee6cad3fc870cace92f45000624760e6e93654bb5e814afeed7bb_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:50f7647620c78fd6b445379c8762f5e978113fe3552906376a24459263f27459_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:53e641f48ddc05c63da2e6bc24e9e4636a10de2c3599d8f5f78622bdebca07ca_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:57114b7a386c406715e342637558fab57afeef2e193517f99173a441f39401d5_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:dcdcaa90f292f2d7ad3f10acbedfab9f7f22f3432c3156055f34760d9bf9429c_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:3723b1d5c74f37cba219e203fd2026a718d4821595cb505ec6626684695da65b_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:562291f52b6bce98ec8795856b808545c4fe30047b54544c7f6c2ab4678480ff_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:e6dfac9bc3e467e141a425944782f5087ed967ac4d02d8d47442e3d61ba5b882_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:f683186c2cc8be9ec09b8efdec66d6b8b1f991c7f7b9fd398dc7c3f9ab8b3079_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:2471edd63a94473c68cf37ee50de643e40003f2c5bba84063c154e4888a7f0bd_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:7cef49d68df5d8efe52061a18920e07e6c7efa3016c0cea7d1747e67851f254a_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:d912383405599032acffbad22bc154f63a87dd429ba882fd7a94cb82fe650d8e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:f3034211e16de48af540efe4ee460395dba0a4a544fa4f277a12840a25df1730_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:181d1decb2f16fcf6f5938027ed346aca29126687bbe6cdcc601c25087f70d11_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:ab5e4d27e23448d99a37b8c05442bb1254083cdc4ff325e721d97d80ec27346c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:ac172243d158e126594f28317e0cfb37dc1790c9f2121e95fe52506b5e05fc91_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:fd96b6284d270effa0f838d960ea4218b72b54c4718513eb523658f2f4972682_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:c59d9cd479c62730eda5d482fb2f4e9fbc17a90a5a2861b130aafe1f3a27a333_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:e547f672b14b6e8fc2ffd300b150aedbd3f6b6b36ddcad612f7c992a936a7c82_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:ead1263d538974c48790c65e44cd9cab07a62c2893b2eeb250174e7cf58d7f9d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:ed0457a57c7b39b79fb308176f45ffe678938b25fbb8c15de2cedbe54b916f64_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:9847a5752ec77e17861dcdac5546ee5c53679c80c3569609b21d9080ee3b7ef3_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:d3c823e61a0682ddc85e576e86234e580992886de471035630f9c89bbad6ebb7_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:ded425ed0af88a1411a06e5191aee25c4c59f1de85b041eba95c9997686cf09e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:ee63f59942f9df04e95fc4266f0d194cd62a7ca08dd5478283884d0ab6003da7_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:724377cabaa284a5197e7505a7150c89631c2f2bcc629e074c7c0be18abd8e6f_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:cbf797c9e93413540b20ebee9191375ddd8185ef22dc8c9e23cc3a4c015abaf7_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:d7609d62a801cf07ef639abcd4f193b2d68967fadebbfddf2349003d7e9eaa44_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:f61fe90362f793225591eb7e2a86d5cdc6fb35aa087e9b6a6218a42b1c1d945d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:1c4de9460688800b62bad6fb13653ef4b52bf215e4d41674291193e9b8e71b24_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:4f1e59610b2fbedc56f425b3fbd8f16c9ea6ea96025f18a404fe48f6a49bdc1e_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:ab0d28306dd6daa03af79bdc2ea650e59a50a03317987c4cdd0d1ee70f95b597_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:b700a8bb7ea6e4253afb8bcf94e5ad086349980ca0716a87817724d3da3fdce1_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4015f46d2172db26a348635e2e8cbd4bbcdbbaa56a4b12c232676a3d0f5bbee2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4169252c61ec70b91b10c750d5f9ecd53f5c3c906766bba9103afbac3c3f9edf_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4ab72a192553c21de76754f06fe38cf443e686e4b4edc2aa2ceb2b6b9d95bb6c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:579ef0925c6f56ed48f22121767189431bef6c4eaa72b2648a1b91488357a51d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:1868e2ea03d063b4cd64601cb0aaf5c9ea7f55e83eba2e2d4dcf6f830efeafc7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:4bfbf0bdc882979bc94d85a4aeff8caa0ec7887aec7412e32ae1442811325d06_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:844e3d69d3c26914e02612466021592a876e6e2dd6cf77084723a70f567ba0e2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:bbe04eb8fd197f15875f498e3c18b9a7a445380efb5f696422d79df99a34a881_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:2c9f9b47c01c5e5e017c583c6a09c5c52f40ef88acf789689265cb31ef328fb8_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:7b5e883efde312c1571c4825b523ff04ab57af6a9f4162a36b80b973f9602c46_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:d896dd89fb924da246fc729041d9debc019d8a4210cfd3de8883834e429cca10_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:ede3e22d4e4de49789622149dec23beaa7e0569a3715ac2262929df543e05bc3_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:273a393b8c62fbc4edb4bf4033c47d8b52bda56fc9cafa289d9513210840815b_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:71f1b590785ce7f4577ecd687dbab9bc3c5931c568a3108eb84279c7aa892046_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:d1e1b4310eb64891c9456be7c34547bf36b0aafdeb471a49f0892d7eaf8f41f4_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:e0a7514406c7ffae080db6d4db3bbf7b77a606ea4632bf09f8301ce1d3739bb5_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:2a4c6c061d154ed9c74707a7a2e2390fde2a150f36197386c3e49c0612d345b2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:6ffcc051c955e198c6d96b59bda0ef26b5124ebbdef5357d36a84534f2c7097c_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:c9258bf58373f9c6859789c8ec272cd7d702c37e063fc2ee53c66d296e7ee3d0_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:d83c6bb4f2a91d2c4de3ffbf4aa8ceecb695f8491ba7586d55275c62cd1931e6_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:67637c5cba3eca1597885823c6e44c13db445d0ef38751eb8364b69dbf07caac_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:68fb5c2a3c8a0d5e6bbcf2c5568969f6b13e72006d4d54bc5c57cd9a032d1bf6_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:9f5fa40c88b0f5d1ae3634632240817a91f4575f8eae9c005b8e35a55cf38003_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:fcbcee9fc7e0bbf5775a33ae9b7e3d7e48a90e2aa1cb85605e05612b6e4d4e30_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:0c165bb93ce933c7f9998a615908bfcca0b4eb38e32e24a1c823e63791b7604b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:42aa392f82bdc45a3b857d1ed44e224ddfd14db1e3dcbb74dcc850ac0540e964_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:9dcd0c0ecf1523bf05bd296edbecd85841b2753dee7a5c9df32437f9a8e31471_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:c5505c462e6b2c04a6e14bc1e22dfc42dc8adea8f6eaf0615cd58b1973b7d62e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:1a93df314c31f10da7b1345fab07b15b846e28865764178e34124f84dc967152_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:34343f81973c3fbdd8630c32d0fad597745ea10f960ea64236408e58e0f10e14_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:7b3635784ebfb6343a73c9fa6de7bea57b3aacce1c49a0f7f250a471f7b897e3_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:f0a7fade2853193429bab16922b2e3bbe426e14632423d6550ff7dfb66d42827_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:94950d339fa382d6911f12fc23dcaf2cdb2854c4cab654f6058f5bf0df1bb371_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:bcfbd2284cbeeba5a835aaf5a5590ddd8156bd881ca24fd0fe1465fade1f84c2_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:bd739ced163053224e5b0ea2f3cd577481c6b6c1162cc0fbc186f1716b4a1fbd_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:d40496f114898985cde3860b9664c34d8c32de85e4d3d846df91a6ba27a2e99c_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:3f7cbe7605595d712e14d9a17717fafc6c6e334f2ad3e821c34947ec78411046_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:96775900ea90e57487da6afe59d058b33cb977a0247a1bbeb1bd07bed2816398_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:caa6b121538e074312314d9888d9b423bd225aefa4f25eb145893b9fc548c0ad_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:e59c90cfe8160b28f9d2aa9e59b1d04d742df44d2195210ebc1946ee3cb78b6f_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:10c95e5c55ccc1a04e8d2ac28bd1afd3b9bb9a7e9e2a5e3e8efb301421539980_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:60a310d4464b4817845703d14e95729321b883fbfc79fbf2dd8d514bb3c675e9_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:70e6c14d72f14d25a90f44043932fbd3f824b30e8ad4b36307100726b24d9c06_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:784129cf69b3bf77a907fe909fd73a2a4d0fbd947fe0037e47aa1d62c6ffcf0b_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:26e58654cdd092cb812207cb4473f5f5988ebd708d95c34152c2e8c124f7297d_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:40e5d9634aa7469df8247758961d486cfac3e7d7f0b59184e11ed5571b46bf40_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:5b59faed336de07965755c893cb9d0ffc52ec90f61cc8c54487f6c0cac53322e_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:b59aea0c9e859025988b0f0c9b6e7748c4acf6d0b4cee35f3fabb7b84feb598b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:2368703206d833e4cb73b7e8750efb9997633a6f9accbf032426bcfcae4c00d9_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:80b543b207e724e880ff932c514fe9c6a3925bfede1c31863531e4e69d050d40_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:82405a9a5715db5442dfa3d3f594888bd7b2f9c778d68357a7d8884f5ea46915_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:8fd2bda7b8d94ededf7973f76a159dd61105776a05d961ac9cfd9bee0a988213_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:4def845360282dad99181b96bcd834b4863eab39e246fda2476234c561c652ec_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:b67aec868b6366cf04f3980b15588e1a0af5c88b2248958bc3884261ad390ca0_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:ceacf3491ebec6f5613011fe8d36b66d00f8b3697832615a4d7024e23125085e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:d9f6a520b818dcccbedb94720b5979ef1cdec2e02491c76e3decb3ee18f2085d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:3e6519c0c789b946eb1b811867c41c4f204440bad5734760c0aca4e3fc602e5a_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:95684cfaf4d5d91bc9fe8cfbf64a6f113e944e3f0c102d27851be5232eca0dbb_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:9cb20990af88287dd8a27de4e4ef12eb244577a1844482d26107359c6efe8efa_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:a69ebb0c7e817d44cfabd86ad13ef4cc94a8bf5b6e8a607d17b197603d64a224_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:0eea35a3af36d08db945a70c387cc38eb326f75b4ed322f09d8c91863cfe5d02_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:22c48db227cd6f2ecec746674e31ac7f5a983a418679fc91678a0aa0ebb49496_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:8e8d249c39d562f819d347f12610dda7f5c01215c41101bfd5dca008e04edf6e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:f8adb8dd40a204bacb51cd423803097a514ec8e8e9f52209e02ecf14cad622bb_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:03adc6277e2bf409391941c6f4508154abc38a0c043139978754f6d4fd32c5a8_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:7e100af30ed11325cb2cbee02af09306e53df5db5847f2a4b733cd307e3cd623_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:91b474b4808b18c279c9f8eb3be8e6d1e1e47cf2b5f9553acd901c74b20bddbc_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:d56f884a9700a4f193d6f3db1895bd54745ec77e02ead3d43bd6e4fe04a2969e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:1f7ed606f69a74943aedb0a956e5a71019f8a1ab53cd3f8166be0f55a69809b9_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:4841076eb82f1f1748345556ff6c4e02a17f1f63c661e375eaba720291cbaf6a_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:a79ac7dcae109aa526e2a218327dd8c5dba2b924fc27447a07199b3b2f2f67b3_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:dee022821852f2d5ebdbbd9f09c9b97997a905061dadb3f78433291d462d49a7_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:1a746b16f362a83f399255d925b322b3440b3d89ae4d64ab7962db3d82ee91a1_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:417a31bec11c3ffb70f40fa955069d5160dc12e2426b67e1d2e35ae3f7fa06df_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:89a3cb77fdb3dcbddfe96785a9ba3fa2b6132098fce028f859663b31fcf77a34_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:b1ba0b4cd8f515895af7b9f797f6ea5b661f7254ce019ce5115375639dcd06e9_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:0827c96b922ca185b7a7321a4f504e8a5dc01aadafcfd20443060546981339a8_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:b5b732dfc0ce3d740781eda9a72e1542c7a30b28b39d2be6e0ba470af06a9680_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:f74081e5eb03227ccff5717a7d139ceee6c5b610625ff7b99e639a2652bf7663_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:f80976ae4fc332600e1d8e1d70b42c038ea05d76ac2c5b1d7d0cbaddbe89140a_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:4029ece83812237ce8b1d394252e9561012e8cd94af40680a90284fbea1bc32a_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:63a3465a7539a8a286c846a84d63e3feca9a11758e4c0d697889b0bdeb26a25c_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:81c227d7c7599b0d4357ccdc3b567f31b67bbd1198c9e7ddba1864c299bad11b_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:f392bde8ce22aca058d77132cc709440442931679dbe725c52516f1cdc97b38d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:4825fab15300bc911e0b2b5c4ae342004bfcff95fa64af0fdb1085fadd132aa2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:68f879679911c2ca828551b900eca1c2f4e8caec7312fbba502fabc4778d1832_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:b4188ac728c746769ef6586663dd6d7d07db984b083397d2c76fe847ef22ea60_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:f2805fc1e6f37bc8acc3187ea8712d38f32151d584c10d5996c0ad7076cd638b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:1c943edcf23df14f254e4aabb93cbc1665bbc7902076b3f04bd80edd2fe324db_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:84c5d2b24caf68c3a6a6d078bd9f66de9fb88e769f6c09c11a248693d463ac21_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:907d6e24922d6d372bceb21ad830c254c6a9c9d6be0ac4f4edf22c236437a09d_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:923a3ee0e3d5b7341b96826e465e6856855f2801dbaf381d139a632c77bda1c5_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:285d2e2d103b458f0603435aedb4d779d85e48fed2267845b798f4a04a0df4c7_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:44981f5fcbc9086470143fae6e21a5de3baad2258d9f8c81accecb2faad6b2a2_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:5ba248d0bc8fcde70e210319bb962f4043e5e8ab8a5625c8f8f30ec96d47c6b7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:f681cdac28ee9ff6375fb39d7b7d12917a06043db44c16e8f84bdb9e09e7b5e7_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:2057531884d897574fc0648e5d3cf21c4549738ac5f35d8095f400cdb80049cc_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:8be0e50a132a2c974893f36b51f3f40b6d6e1f913ae0f9ee6319ef0d5ec455b7_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:a2edc5d233d1547fa2e1d01f29d8a914930735f7098289892430ba9a17d20ab7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:c81c7aeb3dd05801e279a9fcc8d6c3baf00a2ccc08eab53f8acc8bd4d2d129c4_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:25e17bf203568420587cf5907e84e4167afab84dfce549c91bea99e70290b742_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:277f4e8ac5fc292b9f0f2d123f924c6b5cbc0a2eeba3c87a0e61c5ee2399aaa9_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:76766b77ed53513cd254195b25d205ab6964522816e1e3662800e38a105abdf2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:c7ace45f7cb86055e2ba18e27a660f6aa6cb4eff497204294875d5dd1d63cce3_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:3780b1bc80ab7ebc3cfed06ce69346d589dc07b53cea65ad3ed92cc912284300_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:681b356709778083448892513b4559f693e002bfda897a57e2d065f736a902b5_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:d110b52ce8ea022b3d35e7c4b0ce3b646f30513cf8abb55327132565ea4a6a87_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:f076ab59f3abe061e4553a61f98a144a472297dba5ed924ca887f130e9372da9_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-59869"
},
{
"category": "external",
"summary": "RHBZ#2498122",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2498122"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-59869",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-59869"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-59869",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59869"
},
{
"category": "external",
"summary": "https://github.com/nodeca/js-yaml/commit/24f13e79ee1343a7e30bd6f6c9d9cdbf0ac9b2b7",
"url": "https://github.com/nodeca/js-yaml/commit/24f13e79ee1343a7e30bd6f6c9d9cdbf0ac9b2b7"
},
{
"category": "external",
"summary": "https://github.com/nodeca/js-yaml/commit/59423c6f8cdc78742ac00e25a4dd39ef16b702e4",
"url": "https://github.com/nodeca/js-yaml/commit/59423c6f8cdc78742ac00e25a4dd39ef16b702e4"
},
{
"category": "external",
"summary": "https://github.com/nodeca/js-yaml/releases/tag/3.15.0",
"url": "https://github.com/nodeca/js-yaml/releases/tag/3.15.0"
},
{
"category": "external",
"summary": "https://github.com/nodeca/js-yaml/releases/tag/4.3.0",
"url": "https://github.com/nodeca/js-yaml/releases/tag/4.3.0"
},
{
"category": "external",
"summary": "https://github.com/nodeca/js-yaml/security/advisories/GHSA-52cp-r559-cp3m",
"url": "https://github.com/nodeca/js-yaml/security/advisories/GHSA-52cp-r559-cp3m"
}
],
"release_date": "2026-07-08T15:15:54.675000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T07:47:11+00:00",
"details": "Before you apply this update, make sure all previously released errata\nthat are relevant to your system are applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:2b796bf55ecf7a14d1c87d829a2b20d998fc2943686373105b0a50f5053ef836_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:7e960b59f64547f7e9602b7c066a51ab52aba929726aec2bacdf486a9d4d28fd_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:a43e430a2ec0b86fb6ade361677be298b4e27444388a9bca35ddafbf9c77277c_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:d2394b121256985e5ca322aea77bb0bf999ba2d7a6f1627e62bbc125c475dbbd_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:47737"
},
{
"category": "workaround",
"details": "To reduce exposure, restrict the processing of untrusted YAML documents by applications that rely on `js-yaml`. Implement robust input validation and sanitization for all YAML data originating from external or untrusted sources. Consider limiting network access to services that parse YAML content to trusted networks or clients through appropriate firewall configurations.",
"product_ids": [
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:31bd91156f49687d2efffd3be971d9ee0e16abb420b8e8b958caa88b97770020_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:a6315866c67ba350665f5a92f960a5a44e427ca37ae7505e2072af4e02c42f76_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:b3ad6fa1de658f3a40c8b183ab501ebc66b359d8cc01439d4215aa52769df213_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:bfde9ebea1fcd27b6d104d5f67db62e870878f9517ccbec2f649dd2c1af4a073_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:08fed161d59299881ff7a54db859feaf8ed7bdb8238d6cf12628ccb73575665e_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:09436fe2649ca384b1bc1fd8f736fb1d71392733310e66758ed9f289e00471f9_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:3b83670e1c0e9d1f5b76bd7b75d77072bc6208646bc2201bd0bd200dbc59e34a_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:927146f966e4c5c2908d29d8ab45a8f3071dbd5ebd9cf0424460a23f814a72a7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:38a3bc59511133cae56827eba879e7c82c5a974bf1f16b6e8d95e1f79821e669_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:3fa04db82e3ce6169270db0ce29107b69d8e044e0a1ab13a2bf1050b8c26d087_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:6041a918713d4464c73560b68c294a12d33f297a980d2f9d0e0cc8c300a96f24_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:98bd72ba69bdfb3070d87b3edcbd7050579a514b72cfd67c2926541ba52dbaf7_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:938abc970731c2eeda8e2b7b73e96d4dfcbf7587330c7b7e52117a577700e426_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:a0876a25ce85d7d4616212813f012422826f152b8d71065e75cd9c3e23034d8a_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:c77077a0cca835a503a6529c89ab19c4027f949d361afdf8a5a259e1e87b0d55_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:d5bbf3fe886f27cdc27363dcb175e004487d9c8f36de4f1f8516fbeda3a95224_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:0f5d8cae3ba4ea4fcdc5fb9d08f797d576bc225b92af66f193bd4b1324cda4b9_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:2d3588825f8a714fa59b1648d0934d064165e333f322f7f31f01f07b940d42d9_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:68aa571827f5331f1d5a3bd0c60ad441a18877ba11921aff2633940236bafcd4_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:9b80c9c61d4befefa7f6a65ae8c001ce7e343a1e4f251e5ebe025625d9511730_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:9b2c24401a91903f023096d2b641aa977acff423eb6770a8e4c4a81aecfd4e62_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:9d74585acc098c13f3e9dac5ae7f5ef337fa82bd7119d7f1849c5f8a50e84907_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:a6ee95d0ed82bddef084684d11fa770bd646d9be9bc65b3bc386d7c58b33975c_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:f7b8654eb8bf675c8c26f0ad395d790f990308d3ad6683bb61b484c92073bbac_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:2a598e7fd07db27100d9a53a328ac9a0535865883bddd1373f4f1f2705068d2f_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:4f8f0b02d0969753e156226a998d442746c238a2a50ea606a49ca0cf695b8925_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:63c02348faa7d4e26e35c69aef5453613dd607a26116823b931b89fe5311e181_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:ae224866f0085d2c00ab18a28d2aed076e455731903989a49a544abf49950d1f_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:0a90a13f006ef0b271079b728ef6d54081f36ae19b6d0e9ab4dc24ea52a30fad_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:3a53629645832974a883002e53198df7c28e59dd6d1df99bf321b52d0ef84b61_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:879315f438ca43abb607d6c97f8fbd4ca2d38209b142e2d97cc0598740273252_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:c6c4d01f5fcee6cad3fc870cace92f45000624760e6e93654bb5e814afeed7bb_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:50f7647620c78fd6b445379c8762f5e978113fe3552906376a24459263f27459_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:53e641f48ddc05c63da2e6bc24e9e4636a10de2c3599d8f5f78622bdebca07ca_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:57114b7a386c406715e342637558fab57afeef2e193517f99173a441f39401d5_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:dcdcaa90f292f2d7ad3f10acbedfab9f7f22f3432c3156055f34760d9bf9429c_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:3723b1d5c74f37cba219e203fd2026a718d4821595cb505ec6626684695da65b_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:562291f52b6bce98ec8795856b808545c4fe30047b54544c7f6c2ab4678480ff_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:e6dfac9bc3e467e141a425944782f5087ed967ac4d02d8d47442e3d61ba5b882_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:f683186c2cc8be9ec09b8efdec66d6b8b1f991c7f7b9fd398dc7c3f9ab8b3079_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:2471edd63a94473c68cf37ee50de643e40003f2c5bba84063c154e4888a7f0bd_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:7cef49d68df5d8efe52061a18920e07e6c7efa3016c0cea7d1747e67851f254a_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:d912383405599032acffbad22bc154f63a87dd429ba882fd7a94cb82fe650d8e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:f3034211e16de48af540efe4ee460395dba0a4a544fa4f277a12840a25df1730_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:181d1decb2f16fcf6f5938027ed346aca29126687bbe6cdcc601c25087f70d11_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:ab5e4d27e23448d99a37b8c05442bb1254083cdc4ff325e721d97d80ec27346c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:ac172243d158e126594f28317e0cfb37dc1790c9f2121e95fe52506b5e05fc91_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:fd96b6284d270effa0f838d960ea4218b72b54c4718513eb523658f2f4972682_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:c59d9cd479c62730eda5d482fb2f4e9fbc17a90a5a2861b130aafe1f3a27a333_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:e547f672b14b6e8fc2ffd300b150aedbd3f6b6b36ddcad612f7c992a936a7c82_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:ead1263d538974c48790c65e44cd9cab07a62c2893b2eeb250174e7cf58d7f9d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:ed0457a57c7b39b79fb308176f45ffe678938b25fbb8c15de2cedbe54b916f64_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:9847a5752ec77e17861dcdac5546ee5c53679c80c3569609b21d9080ee3b7ef3_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:d3c823e61a0682ddc85e576e86234e580992886de471035630f9c89bbad6ebb7_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:ded425ed0af88a1411a06e5191aee25c4c59f1de85b041eba95c9997686cf09e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:ee63f59942f9df04e95fc4266f0d194cd62a7ca08dd5478283884d0ab6003da7_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:724377cabaa284a5197e7505a7150c89631c2f2bcc629e074c7c0be18abd8e6f_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:cbf797c9e93413540b20ebee9191375ddd8185ef22dc8c9e23cc3a4c015abaf7_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:d7609d62a801cf07ef639abcd4f193b2d68967fadebbfddf2349003d7e9eaa44_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:f61fe90362f793225591eb7e2a86d5cdc6fb35aa087e9b6a6218a42b1c1d945d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:1c4de9460688800b62bad6fb13653ef4b52bf215e4d41674291193e9b8e71b24_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:4f1e59610b2fbedc56f425b3fbd8f16c9ea6ea96025f18a404fe48f6a49bdc1e_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:ab0d28306dd6daa03af79bdc2ea650e59a50a03317987c4cdd0d1ee70f95b597_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:b700a8bb7ea6e4253afb8bcf94e5ad086349980ca0716a87817724d3da3fdce1_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4015f46d2172db26a348635e2e8cbd4bbcdbbaa56a4b12c232676a3d0f5bbee2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4169252c61ec70b91b10c750d5f9ecd53f5c3c906766bba9103afbac3c3f9edf_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4ab72a192553c21de76754f06fe38cf443e686e4b4edc2aa2ceb2b6b9d95bb6c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:579ef0925c6f56ed48f22121767189431bef6c4eaa72b2648a1b91488357a51d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:2b796bf55ecf7a14d1c87d829a2b20d998fc2943686373105b0a50f5053ef836_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:7e960b59f64547f7e9602b7c066a51ab52aba929726aec2bacdf486a9d4d28fd_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:a43e430a2ec0b86fb6ade361677be298b4e27444388a9bca35ddafbf9c77277c_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:d2394b121256985e5ca322aea77bb0bf999ba2d7a6f1627e62bbc125c475dbbd_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:1868e2ea03d063b4cd64601cb0aaf5c9ea7f55e83eba2e2d4dcf6f830efeafc7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:4bfbf0bdc882979bc94d85a4aeff8caa0ec7887aec7412e32ae1442811325d06_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:844e3d69d3c26914e02612466021592a876e6e2dd6cf77084723a70f567ba0e2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:bbe04eb8fd197f15875f498e3c18b9a7a445380efb5f696422d79df99a34a881_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:2c9f9b47c01c5e5e017c583c6a09c5c52f40ef88acf789689265cb31ef328fb8_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:7b5e883efde312c1571c4825b523ff04ab57af6a9f4162a36b80b973f9602c46_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:d896dd89fb924da246fc729041d9debc019d8a4210cfd3de8883834e429cca10_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:ede3e22d4e4de49789622149dec23beaa7e0569a3715ac2262929df543e05bc3_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:273a393b8c62fbc4edb4bf4033c47d8b52bda56fc9cafa289d9513210840815b_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:71f1b590785ce7f4577ecd687dbab9bc3c5931c568a3108eb84279c7aa892046_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:d1e1b4310eb64891c9456be7c34547bf36b0aafdeb471a49f0892d7eaf8f41f4_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:e0a7514406c7ffae080db6d4db3bbf7b77a606ea4632bf09f8301ce1d3739bb5_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:2a4c6c061d154ed9c74707a7a2e2390fde2a150f36197386c3e49c0612d345b2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:6ffcc051c955e198c6d96b59bda0ef26b5124ebbdef5357d36a84534f2c7097c_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:c9258bf58373f9c6859789c8ec272cd7d702c37e063fc2ee53c66d296e7ee3d0_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:d83c6bb4f2a91d2c4de3ffbf4aa8ceecb695f8491ba7586d55275c62cd1931e6_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:67637c5cba3eca1597885823c6e44c13db445d0ef38751eb8364b69dbf07caac_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:68fb5c2a3c8a0d5e6bbcf2c5568969f6b13e72006d4d54bc5c57cd9a032d1bf6_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:9f5fa40c88b0f5d1ae3634632240817a91f4575f8eae9c005b8e35a55cf38003_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:fcbcee9fc7e0bbf5775a33ae9b7e3d7e48a90e2aa1cb85605e05612b6e4d4e30_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:0c165bb93ce933c7f9998a615908bfcca0b4eb38e32e24a1c823e63791b7604b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:42aa392f82bdc45a3b857d1ed44e224ddfd14db1e3dcbb74dcc850ac0540e964_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:9dcd0c0ecf1523bf05bd296edbecd85841b2753dee7a5c9df32437f9a8e31471_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:c5505c462e6b2c04a6e14bc1e22dfc42dc8adea8f6eaf0615cd58b1973b7d62e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:1a93df314c31f10da7b1345fab07b15b846e28865764178e34124f84dc967152_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:34343f81973c3fbdd8630c32d0fad597745ea10f960ea64236408e58e0f10e14_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:7b3635784ebfb6343a73c9fa6de7bea57b3aacce1c49a0f7f250a471f7b897e3_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:f0a7fade2853193429bab16922b2e3bbe426e14632423d6550ff7dfb66d42827_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:94950d339fa382d6911f12fc23dcaf2cdb2854c4cab654f6058f5bf0df1bb371_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:bcfbd2284cbeeba5a835aaf5a5590ddd8156bd881ca24fd0fe1465fade1f84c2_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:bd739ced163053224e5b0ea2f3cd577481c6b6c1162cc0fbc186f1716b4a1fbd_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:d40496f114898985cde3860b9664c34d8c32de85e4d3d846df91a6ba27a2e99c_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:3f7cbe7605595d712e14d9a17717fafc6c6e334f2ad3e821c34947ec78411046_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:96775900ea90e57487da6afe59d058b33cb977a0247a1bbeb1bd07bed2816398_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:caa6b121538e074312314d9888d9b423bd225aefa4f25eb145893b9fc548c0ad_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:e59c90cfe8160b28f9d2aa9e59b1d04d742df44d2195210ebc1946ee3cb78b6f_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:10c95e5c55ccc1a04e8d2ac28bd1afd3b9bb9a7e9e2a5e3e8efb301421539980_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:60a310d4464b4817845703d14e95729321b883fbfc79fbf2dd8d514bb3c675e9_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:70e6c14d72f14d25a90f44043932fbd3f824b30e8ad4b36307100726b24d9c06_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:784129cf69b3bf77a907fe909fd73a2a4d0fbd947fe0037e47aa1d62c6ffcf0b_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:26e58654cdd092cb812207cb4473f5f5988ebd708d95c34152c2e8c124f7297d_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:40e5d9634aa7469df8247758961d486cfac3e7d7f0b59184e11ed5571b46bf40_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:5b59faed336de07965755c893cb9d0ffc52ec90f61cc8c54487f6c0cac53322e_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:b59aea0c9e859025988b0f0c9b6e7748c4acf6d0b4cee35f3fabb7b84feb598b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:2368703206d833e4cb73b7e8750efb9997633a6f9accbf032426bcfcae4c00d9_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:80b543b207e724e880ff932c514fe9c6a3925bfede1c31863531e4e69d050d40_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:82405a9a5715db5442dfa3d3f594888bd7b2f9c778d68357a7d8884f5ea46915_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:8fd2bda7b8d94ededf7973f76a159dd61105776a05d961ac9cfd9bee0a988213_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:4def845360282dad99181b96bcd834b4863eab39e246fda2476234c561c652ec_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:b67aec868b6366cf04f3980b15588e1a0af5c88b2248958bc3884261ad390ca0_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:ceacf3491ebec6f5613011fe8d36b66d00f8b3697832615a4d7024e23125085e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:d9f6a520b818dcccbedb94720b5979ef1cdec2e02491c76e3decb3ee18f2085d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:3e6519c0c789b946eb1b811867c41c4f204440bad5734760c0aca4e3fc602e5a_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:95684cfaf4d5d91bc9fe8cfbf64a6f113e944e3f0c102d27851be5232eca0dbb_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:9cb20990af88287dd8a27de4e4ef12eb244577a1844482d26107359c6efe8efa_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:a69ebb0c7e817d44cfabd86ad13ef4cc94a8bf5b6e8a607d17b197603d64a224_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:0eea35a3af36d08db945a70c387cc38eb326f75b4ed322f09d8c91863cfe5d02_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:22c48db227cd6f2ecec746674e31ac7f5a983a418679fc91678a0aa0ebb49496_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:8e8d249c39d562f819d347f12610dda7f5c01215c41101bfd5dca008e04edf6e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:f8adb8dd40a204bacb51cd423803097a514ec8e8e9f52209e02ecf14cad622bb_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:03adc6277e2bf409391941c6f4508154abc38a0c043139978754f6d4fd32c5a8_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:7e100af30ed11325cb2cbee02af09306e53df5db5847f2a4b733cd307e3cd623_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:91b474b4808b18c279c9f8eb3be8e6d1e1e47cf2b5f9553acd901c74b20bddbc_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:d56f884a9700a4f193d6f3db1895bd54745ec77e02ead3d43bd6e4fe04a2969e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:1f7ed606f69a74943aedb0a956e5a71019f8a1ab53cd3f8166be0f55a69809b9_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:4841076eb82f1f1748345556ff6c4e02a17f1f63c661e375eaba720291cbaf6a_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:a79ac7dcae109aa526e2a218327dd8c5dba2b924fc27447a07199b3b2f2f67b3_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:dee022821852f2d5ebdbbd9f09c9b97997a905061dadb3f78433291d462d49a7_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:1a746b16f362a83f399255d925b322b3440b3d89ae4d64ab7962db3d82ee91a1_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:417a31bec11c3ffb70f40fa955069d5160dc12e2426b67e1d2e35ae3f7fa06df_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:89a3cb77fdb3dcbddfe96785a9ba3fa2b6132098fce028f859663b31fcf77a34_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:b1ba0b4cd8f515895af7b9f797f6ea5b661f7254ce019ce5115375639dcd06e9_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:0827c96b922ca185b7a7321a4f504e8a5dc01aadafcfd20443060546981339a8_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:b5b732dfc0ce3d740781eda9a72e1542c7a30b28b39d2be6e0ba470af06a9680_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:f74081e5eb03227ccff5717a7d139ceee6c5b610625ff7b99e639a2652bf7663_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:f80976ae4fc332600e1d8e1d70b42c038ea05d76ac2c5b1d7d0cbaddbe89140a_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:4029ece83812237ce8b1d394252e9561012e8cd94af40680a90284fbea1bc32a_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:63a3465a7539a8a286c846a84d63e3feca9a11758e4c0d697889b0bdeb26a25c_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:81c227d7c7599b0d4357ccdc3b567f31b67bbd1198c9e7ddba1864c299bad11b_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:f392bde8ce22aca058d77132cc709440442931679dbe725c52516f1cdc97b38d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:4825fab15300bc911e0b2b5c4ae342004bfcff95fa64af0fdb1085fadd132aa2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:68f879679911c2ca828551b900eca1c2f4e8caec7312fbba502fabc4778d1832_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:b4188ac728c746769ef6586663dd6d7d07db984b083397d2c76fe847ef22ea60_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:f2805fc1e6f37bc8acc3187ea8712d38f32151d584c10d5996c0ad7076cd638b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:1c943edcf23df14f254e4aabb93cbc1665bbc7902076b3f04bd80edd2fe324db_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:84c5d2b24caf68c3a6a6d078bd9f66de9fb88e769f6c09c11a248693d463ac21_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:907d6e24922d6d372bceb21ad830c254c6a9c9d6be0ac4f4edf22c236437a09d_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:923a3ee0e3d5b7341b96826e465e6856855f2801dbaf381d139a632c77bda1c5_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:285d2e2d103b458f0603435aedb4d779d85e48fed2267845b798f4a04a0df4c7_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:44981f5fcbc9086470143fae6e21a5de3baad2258d9f8c81accecb2faad6b2a2_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:5ba248d0bc8fcde70e210319bb962f4043e5e8ab8a5625c8f8f30ec96d47c6b7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:f681cdac28ee9ff6375fb39d7b7d12917a06043db44c16e8f84bdb9e09e7b5e7_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:2057531884d897574fc0648e5d3cf21c4549738ac5f35d8095f400cdb80049cc_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:8be0e50a132a2c974893f36b51f3f40b6d6e1f913ae0f9ee6319ef0d5ec455b7_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:a2edc5d233d1547fa2e1d01f29d8a914930735f7098289892430ba9a17d20ab7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:c81c7aeb3dd05801e279a9fcc8d6c3baf00a2ccc08eab53f8acc8bd4d2d129c4_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:25e17bf203568420587cf5907e84e4167afab84dfce549c91bea99e70290b742_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:277f4e8ac5fc292b9f0f2d123f924c6b5cbc0a2eeba3c87a0e61c5ee2399aaa9_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:76766b77ed53513cd254195b25d205ab6964522816e1e3662800e38a105abdf2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:c7ace45f7cb86055e2ba18e27a660f6aa6cb4eff497204294875d5dd1d63cce3_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:3780b1bc80ab7ebc3cfed06ce69346d589dc07b53cea65ad3ed92cc912284300_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:681b356709778083448892513b4559f693e002bfda897a57e2d065f736a902b5_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:d110b52ce8ea022b3d35e7c4b0ce3b646f30513cf8abb55327132565ea4a6a87_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:f076ab59f3abe061e4553a61f98a144a472297dba5ed924ca887f130e9372da9_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:31bd91156f49687d2efffd3be971d9ee0e16abb420b8e8b958caa88b97770020_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:a6315866c67ba350665f5a92f960a5a44e427ca37ae7505e2072af4e02c42f76_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:b3ad6fa1de658f3a40c8b183ab501ebc66b359d8cc01439d4215aa52769df213_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cli-rhel9@sha256:bfde9ebea1fcd27b6d104d5f67db62e870878f9517ccbec2f649dd2c1af4a073_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:08fed161d59299881ff7a54db859feaf8ed7bdb8238d6cf12628ccb73575665e_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:09436fe2649ca384b1bc1fd8f736fb1d71392733310e66758ed9f289e00471f9_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:3b83670e1c0e9d1f5b76bd7b75d77072bc6208646bc2201bd0bd200dbc59e34a_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-cluster-permission-rhel9@sha256:927146f966e4c5c2908d29d8ab45a8f3071dbd5ebd9cf0424460a23f814a72a7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:38a3bc59511133cae56827eba879e7c82c5a974bf1f16b6e8d95e1f79821e669_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:3fa04db82e3ce6169270db0ce29107b69d8e044e0a1ab13a2bf1050b8c26d087_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:6041a918713d4464c73560b68c294a12d33f297a980d2f9d0e0cc8c300a96f24_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-addon-controller-rhel9@sha256:98bd72ba69bdfb3070d87b3edcbd7050579a514b72cfd67c2926541ba52dbaf7_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:938abc970731c2eeda8e2b7b73e96d4dfcbf7587330c7b7e52117a577700e426_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:a0876a25ce85d7d4616212813f012422826f152b8d71065e75cd9c3e23034d8a_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:c77077a0cca835a503a6529c89ab19c4027f949d361afdf8a5a259e1e87b0d55_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-governance-policy-framework-addon-rhel9@sha256:d5bbf3fe886f27cdc27363dcb175e004487d9c8f36de4f1f8516fbeda3a95224_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:0f5d8cae3ba4ea4fcdc5fb9d08f797d576bc225b92af66f193bd4b1324cda4b9_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:2d3588825f8a714fa59b1648d0934d064165e333f322f7f31f01f07b940d42d9_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:68aa571827f5331f1d5a3bd0c60ad441a18877ba11921aff2633940236bafcd4_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-grafana-rhel9@sha256:9b80c9c61d4befefa7f6a65ae8c001ce7e343a1e4f251e5ebe025625d9511730_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:9b2c24401a91903f023096d2b641aa977acff423eb6770a8e4c4a81aecfd4e62_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:9d74585acc098c13f3e9dac5ae7f5ef337fa82bd7119d7f1849c5f8a50e84907_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:a6ee95d0ed82bddef084684d11fa770bd646d9be9bc65b3bc386d7c58b33975c_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-multicluster-observability-addon-rhel9@sha256:f7b8654eb8bf675c8c26f0ad395d790f990308d3ad6683bb61b484c92073bbac_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:2a598e7fd07db27100d9a53a328ac9a0535865883bddd1373f4f1f2705068d2f_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:4f8f0b02d0969753e156226a998d442746c238a2a50ea606a49ca0cf695b8925_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:63c02348faa7d4e26e35c69aef5453613dd607a26116823b931b89fe5311e181_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-must-gather-rhel9@sha256:ae224866f0085d2c00ab18a28d2aed076e455731903989a49a544abf49950d1f_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:0a90a13f006ef0b271079b728ef6d54081f36ae19b6d0e9ab4dc24ea52a30fad_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:3a53629645832974a883002e53198df7c28e59dd6d1df99bf321b52d0ef84b61_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:879315f438ca43abb607d6c97f8fbd4ca2d38209b142e2d97cc0598740273252_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-config-reloader-rhel9@sha256:c6c4d01f5fcee6cad3fc870cace92f45000624760e6e93654bb5e814afeed7bb_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:50f7647620c78fd6b445379c8762f5e978113fe3552906376a24459263f27459_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:53e641f48ddc05c63da2e6bc24e9e4636a10de2c3599d8f5f78622bdebca07ca_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:57114b7a386c406715e342637558fab57afeef2e193517f99173a441f39401d5_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-prometheus-rhel9@sha256:dcdcaa90f292f2d7ad3f10acbedfab9f7f22f3432c3156055f34760d9bf9429c_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:3723b1d5c74f37cba219e203fd2026a718d4821595cb505ec6626684695da65b_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:562291f52b6bce98ec8795856b808545c4fe30047b54544c7f6c2ab4678480ff_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:e6dfac9bc3e467e141a425944782f5087ed967ac4d02d8d47442e3d61ba5b882_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-indexer-rhel9@sha256:f683186c2cc8be9ec09b8efdec66d6b8b1f991c7f7b9fd398dc7c3f9ab8b3079_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:2471edd63a94473c68cf37ee50de643e40003f2c5bba84063c154e4888a7f0bd_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:7cef49d68df5d8efe52061a18920e07e6c7efa3016c0cea7d1747e67851f254a_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:d912383405599032acffbad22bc154f63a87dd429ba882fd7a94cb82fe650d8e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-api-rhel9@sha256:f3034211e16de48af540efe4ee460395dba0a4a544fa4f277a12840a25df1730_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:181d1decb2f16fcf6f5938027ed346aca29126687bbe6cdcc601c25087f70d11_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:ab5e4d27e23448d99a37b8c05442bb1254083cdc4ff325e721d97d80ec27346c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:ac172243d158e126594f28317e0cfb37dc1790c9f2121e95fe52506b5e05fc91_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-search-v2-rhel9@sha256:fd96b6284d270effa0f838d960ea4218b72b54c4718513eb523658f2f4972682_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:c59d9cd479c62730eda5d482fb2f4e9fbc17a90a5a2861b130aafe1f3a27a333_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:e547f672b14b6e8fc2ffd300b150aedbd3f6b6b36ddcad612f7c992a936a7c82_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:ead1263d538974c48790c65e44cd9cab07a62c2893b2eeb250174e7cf58d7f9d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-siteconfig-rhel9@sha256:ed0457a57c7b39b79fb308176f45ffe678938b25fbb8c15de2cedbe54b916f64_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:9847a5752ec77e17861dcdac5546ee5c53679c80c3569609b21d9080ee3b7ef3_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:d3c823e61a0682ddc85e576e86234e580992886de471035630f9c89bbad6ebb7_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:ded425ed0af88a1411a06e5191aee25c4c59f1de85b041eba95c9997686cf09e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/acm-volsync-addon-controller-rhel9@sha256:ee63f59942f9df04e95fc4266f0d194cd62a7ca08dd5478283884d0ab6003da7_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:724377cabaa284a5197e7505a7150c89631c2f2bcc629e074c7c0be18abd8e6f_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:cbf797c9e93413540b20ebee9191375ddd8185ef22dc8c9e23cc3a4c015abaf7_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:d7609d62a801cf07ef639abcd4f193b2d68967fadebbfddf2349003d7e9eaa44_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cert-policy-controller-rhel9@sha256:f61fe90362f793225591eb7e2a86d5cdc6fb35aa087e9b6a6218a42b1c1d945d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:1c4de9460688800b62bad6fb13653ef4b52bf215e4d41674291193e9b8e71b24_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:4f1e59610b2fbedc56f425b3fbd8f16c9ea6ea96025f18a404fe48f6a49bdc1e_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:ab0d28306dd6daa03af79bdc2ea650e59a50a03317987c4cdd0d1ee70f95b597_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/cluster-backup-rhel9-operator@sha256:b700a8bb7ea6e4253afb8bcf94e5ad086349980ca0716a87817724d3da3fdce1_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4015f46d2172db26a348635e2e8cbd4bbcdbbaa56a4b12c232676a3d0f5bbee2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4169252c61ec70b91b10c750d5f9ecd53f5c3c906766bba9103afbac3c3f9edf_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:4ab72a192553c21de76754f06fe38cf443e686e4b4edc2aa2ceb2b6b9d95bb6c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/config-policy-controller-rhel9@sha256:579ef0925c6f56ed48f22121767189431bef6c4eaa72b2648a1b91488357a51d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:2b796bf55ecf7a14d1c87d829a2b20d998fc2943686373105b0a50f5053ef836_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:7e960b59f64547f7e9602b7c066a51ab52aba929726aec2bacdf486a9d4d28fd_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:a43e430a2ec0b86fb6ade361677be298b4e27444388a9bca35ddafbf9c77277c_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/console-rhel9@sha256:d2394b121256985e5ca322aea77bb0bf999ba2d7a6f1627e62bbc125c475dbbd_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:1868e2ea03d063b4cd64601cb0aaf5c9ea7f55e83eba2e2d4dcf6f830efeafc7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:4bfbf0bdc882979bc94d85a4aeff8caa0ec7887aec7412e32ae1442811325d06_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:844e3d69d3c26914e02612466021592a876e6e2dd6cf77084723a70f567ba0e2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/endpoint-monitoring-rhel9-operator@sha256:bbe04eb8fd197f15875f498e3c18b9a7a445380efb5f696422d79df99a34a881_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:2c9f9b47c01c5e5e017c583c6a09c5c52f40ef88acf789689265cb31ef328fb8_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:7b5e883efde312c1571c4825b523ff04ab57af6a9f4162a36b80b973f9602c46_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:d896dd89fb924da246fc729041d9debc019d8a4210cfd3de8883834e429cca10_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/governance-policy-propagator-rhel9@sha256:ede3e22d4e4de49789622149dec23beaa7e0569a3715ac2262929df543e05bc3_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:273a393b8c62fbc4edb4bf4033c47d8b52bda56fc9cafa289d9513210840815b_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:71f1b590785ce7f4577ecd687dbab9bc3c5931c568a3108eb84279c7aa892046_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:d1e1b4310eb64891c9456be7c34547bf36b0aafdeb471a49f0892d7eaf8f41f4_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/grafana-dashboard-loader-rhel9@sha256:e0a7514406c7ffae080db6d4db3bbf7b77a606ea4632bf09f8301ce1d3739bb5_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:2a4c6c061d154ed9c74707a7a2e2390fde2a150f36197386c3e49c0612d345b2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:6ffcc051c955e198c6d96b59bda0ef26b5124ebbdef5357d36a84534f2c7097c_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:c9258bf58373f9c6859789c8ec272cd7d702c37e063fc2ee53c66d296e7ee3d0_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-client-rhel9@sha256:d83c6bb4f2a91d2c4de3ffbf4aa8ceecb695f8491ba7586d55275c62cd1931e6_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:67637c5cba3eca1597885823c6e44c13db445d0ef38751eb8364b69dbf07caac_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:68fb5c2a3c8a0d5e6bbcf2c5568969f6b13e72006d4d54bc5c57cd9a032d1bf6_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:9f5fa40c88b0f5d1ae3634632240817a91f4575f8eae9c005b8e35a55cf38003_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/insights-metrics-rhel9@sha256:fcbcee9fc7e0bbf5775a33ae9b7e3d7e48a90e2aa1cb85605e05612b6e4d4e30_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:0c165bb93ce933c7f9998a615908bfcca0b4eb38e32e24a1c823e63791b7604b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:42aa392f82bdc45a3b857d1ed44e224ddfd14db1e3dcbb74dcc850ac0540e964_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:9dcd0c0ecf1523bf05bd296edbecd85841b2753dee7a5c9df32437f9a8e31471_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/klusterlet-addon-controller-rhel9@sha256:c5505c462e6b2c04a6e14bc1e22dfc42dc8adea8f6eaf0615cd58b1973b7d62e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:1a93df314c31f10da7b1345fab07b15b846e28865764178e34124f84dc967152_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:34343f81973c3fbdd8630c32d0fad597745ea10f960ea64236408e58e0f10e14_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:7b3635784ebfb6343a73c9fa6de7bea57b3aacce1c49a0f7f250a471f7b897e3_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-rbac-proxy-rhel9@sha256:f0a7fade2853193429bab16922b2e3bbe426e14632423d6550ff7dfb66d42827_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:94950d339fa382d6911f12fc23dcaf2cdb2854c4cab654f6058f5bf0df1bb371_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:bcfbd2284cbeeba5a835aaf5a5590ddd8156bd881ca24fd0fe1465fade1f84c2_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:bd739ced163053224e5b0ea2f3cd577481c6b6c1162cc0fbc186f1716b4a1fbd_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/kube-state-metrics-rhel9@sha256:d40496f114898985cde3860b9664c34d8c32de85e4d3d846df91a6ba27a2e99c_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:3f7cbe7605595d712e14d9a17717fafc6c6e334f2ad3e821c34947ec78411046_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:96775900ea90e57487da6afe59d058b33cb977a0247a1bbeb1bd07bed2816398_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:caa6b121538e074312314d9888d9b423bd225aefa4f25eb145893b9fc548c0ad_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/memcached-exporter-rhel9@sha256:e59c90cfe8160b28f9d2aa9e59b1d04d742df44d2195210ebc1946ee3cb78b6f_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:10c95e5c55ccc1a04e8d2ac28bd1afd3b9bb9a7e9e2a5e3e8efb301421539980_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:60a310d4464b4817845703d14e95729321b883fbfc79fbf2dd8d514bb3c675e9_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:70e6c14d72f14d25a90f44043932fbd3f824b30e8ad4b36307100726b24d9c06_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/metrics-collector-rhel9@sha256:784129cf69b3bf77a907fe909fd73a2a4d0fbd947fe0037e47aa1d62c6ffcf0b_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:26e58654cdd092cb812207cb4473f5f5988ebd708d95c34152c2e8c124f7297d_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:40e5d9634aa7469df8247758961d486cfac3e7d7f0b59184e11ed5571b46bf40_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:5b59faed336de07965755c893cb9d0ffc52ec90f61cc8c54487f6c0cac53322e_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicloud-integrations-rhel9@sha256:b59aea0c9e859025988b0f0c9b6e7748c4acf6d0b4cee35f3fabb7b84feb598b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:2368703206d833e4cb73b7e8750efb9997633a6f9accbf032426bcfcae4c00d9_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:80b543b207e724e880ff932c514fe9c6a3925bfede1c31863531e4e69d050d40_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:82405a9a5715db5442dfa3d3f594888bd7b2f9c778d68357a7d8884f5ea46915_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-observability-rhel9-operator@sha256:8fd2bda7b8d94ededf7973f76a159dd61105776a05d961ac9cfd9bee0a988213_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:4def845360282dad99181b96bcd834b4863eab39e246fda2476234c561c652ec_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:b67aec868b6366cf04f3980b15588e1a0af5c88b2248958bc3884261ad390ca0_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:ceacf3491ebec6f5613011fe8d36b66d00f8b3697832615a4d7024e23125085e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-application-rhel9@sha256:d9f6a520b818dcccbedb94720b5979ef1cdec2e02491c76e3decb3ee18f2085d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:3e6519c0c789b946eb1b811867c41c4f204440bad5734760c0aca4e3fc602e5a_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:95684cfaf4d5d91bc9fe8cfbf64a6f113e944e3f0c102d27851be5232eca0dbb_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:9cb20990af88287dd8a27de4e4ef12eb244577a1844482d26107359c6efe8efa_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-channel-rhel9@sha256:a69ebb0c7e817d44cfabd86ad13ef4cc94a8bf5b6e8a607d17b197603d64a224_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:0eea35a3af36d08db945a70c387cc38eb326f75b4ed322f09d8c91863cfe5d02_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:22c48db227cd6f2ecec746674e31ac7f5a983a418679fc91678a0aa0ebb49496_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:8e8d249c39d562f819d347f12610dda7f5c01215c41101bfd5dca008e04edf6e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multicluster-operators-subscription-rhel9@sha256:f8adb8dd40a204bacb51cd423803097a514ec8e8e9f52209e02ecf14cad622bb_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:03adc6277e2bf409391941c6f4508154abc38a0c043139978754f6d4fd32c5a8_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:7e100af30ed11325cb2cbee02af09306e53df5db5847f2a4b733cd307e3cd623_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:91b474b4808b18c279c9f8eb3be8e6d1e1e47cf2b5f9553acd901c74b20bddbc_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/multiclusterhub-rhel9@sha256:d56f884a9700a4f193d6f3db1895bd54745ec77e02ead3d43bd6e4fe04a2969e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:1f7ed606f69a74943aedb0a956e5a71019f8a1ab53cd3f8166be0f55a69809b9_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:4841076eb82f1f1748345556ff6c4e02a17f1f63c661e375eaba720291cbaf6a_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:a79ac7dcae109aa526e2a218327dd8c5dba2b924fc27447a07199b3b2f2f67b3_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/node-exporter-rhel9@sha256:dee022821852f2d5ebdbbd9f09c9b97997a905061dadb3f78433291d462d49a7_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:1a746b16f362a83f399255d925b322b3440b3d89ae4d64ab7962db3d82ee91a1_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:417a31bec11c3ffb70f40fa955069d5160dc12e2426b67e1d2e35ae3f7fa06df_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:89a3cb77fdb3dcbddfe96785a9ba3fa2b6132098fce028f859663b31fcf77a34_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9-operator@sha256:b1ba0b4cd8f515895af7b9f797f6ea5b661f7254ce019ce5115375639dcd06e9_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:0827c96b922ca185b7a7321a4f504e8a5dc01aadafcfd20443060546981339a8_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:b5b732dfc0ce3d740781eda9a72e1542c7a30b28b39d2be6e0ba470af06a9680_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:f74081e5eb03227ccff5717a7d139ceee6c5b610625ff7b99e639a2652bf7663_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/observatorium-rhel9@sha256:f80976ae4fc332600e1d8e1d70b42c038ea05d76ac2c5b1d7d0cbaddbe89140a_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:4029ece83812237ce8b1d394252e9561012e8cd94af40680a90284fbea1bc32a_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:63a3465a7539a8a286c846a84d63e3feca9a11758e4c0d697889b0bdeb26a25c_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:81c227d7c7599b0d4357ccdc3b567f31b67bbd1198c9e7ddba1864c299bad11b_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-alertmanager-rhel9@sha256:f392bde8ce22aca058d77132cc709440442931679dbe725c52516f1cdc97b38d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:4825fab15300bc911e0b2b5c4ae342004bfcff95fa64af0fdb1085fadd132aa2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:68f879679911c2ca828551b900eca1c2f4e8caec7312fbba502fabc4778d1832_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:b4188ac728c746769ef6586663dd6d7d07db984b083397d2c76fe847ef22ea60_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/prometheus-rhel9@sha256:f2805fc1e6f37bc8acc3187ea8712d38f32151d584c10d5996c0ad7076cd638b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:1c943edcf23df14f254e4aabb93cbc1665bbc7902076b3f04bd80edd2fe324db_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:84c5d2b24caf68c3a6a6d078bd9f66de9fb88e769f6c09c11a248693d463ac21_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:907d6e24922d6d372bceb21ad830c254c6a9c9d6be0ac4f4edf22c236437a09d_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/rbac-query-proxy-rhel9@sha256:923a3ee0e3d5b7341b96826e465e6856855f2801dbaf381d139a632c77bda1c5_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:285d2e2d103b458f0603435aedb4d779d85e48fed2267845b798f4a04a0df4c7_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:44981f5fcbc9086470143fae6e21a5de3baad2258d9f8c81accecb2faad6b2a2_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:5ba248d0bc8fcde70e210319bb962f4043e5e8ab8a5625c8f8f30ec96d47c6b7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/search-collector-rhel9@sha256:f681cdac28ee9ff6375fb39d7b7d12917a06043db44c16e8f84bdb9e09e7b5e7_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:2057531884d897574fc0648e5d3cf21c4549738ac5f35d8095f400cdb80049cc_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:8be0e50a132a2c974893f36b51f3f40b6d6e1f913ae0f9ee6319ef0d5ec455b7_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:a2edc5d233d1547fa2e1d01f29d8a914930735f7098289892430ba9a17d20ab7_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/submariner-addon-rhel9@sha256:c81c7aeb3dd05801e279a9fcc8d6c3baf00a2ccc08eab53f8acc8bd4d2d129c4_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:25e17bf203568420587cf5907e84e4167afab84dfce549c91bea99e70290b742_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:277f4e8ac5fc292b9f0f2d123f924c6b5cbc0a2eeba3c87a0e61c5ee2399aaa9_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:76766b77ed53513cd254195b25d205ab6964522816e1e3662800e38a105abdf2_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-receive-controller-rhel9@sha256:c7ace45f7cb86055e2ba18e27a660f6aa6cb4eff497204294875d5dd1d63cce3_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:3780b1bc80ab7ebc3cfed06ce69346d589dc07b53cea65ad3ed92cc912284300_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:681b356709778083448892513b4559f693e002bfda897a57e2d065f736a902b5_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:d110b52ce8ea022b3d35e7c4b0ce3b646f30513cf8abb55327132565ea4a6a87_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.13:registry.redhat.io/rhacm2/thanos-rhel9@sha256:f076ab59f3abe061e4553a61f98a144a472297dba5ed924ca887f130e9372da9_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "js-yaml: js-yaml: Denial of Service via crafted YAML documents"
}
]
}
RHSA-2026:48151
Vulnerability from csaf_redhat - Published: 2026-07-29 19:53 - Updated: 2026-08-22 08:40Summary
Red Hat Security Advisory: Red Hat build of Cryostat security update
Severity
Important
Notes
Topic: An update is now available for the Red Hat build of Cryostat 4 on RHEL 9.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: An update is now available for the Red Hat build of Cryostat 4 on RHEL 9.
Security Fix(es):
* netty-handler: Denial of Service due to eager buffer allocation in TLS handshake (CVE-2026-45416)
* netty-resolver-dns: Information disclosure and data manipulation due to improper CNAME record validation (CVE-2026-45674)
* netty-handler: Improper trust manager handling leads to hostname verification bypass (CVE-2026-50010)
* io.netty/netty-resolver-dns: Netty has Insufficient Bailiwick Validation for NS Records (CVE-2026-47691)
* netty-codec-haproxy: Netty HAProxy PROXY protocol v2 codec: Denial of Service via memory leak from crafted PROXY protocol headers (CVE-2026-48059)
* netty-codec-http2: Denial of Service due to resource leak (CVE-2026-48043)
* netty-codec-haproxy: Denial of Service via malformed HAProxy message (CVE-2026-44893)
* netty-handler: IPv6 subnet rule bypass due to incorrect masking operation (CVE-2026-44249)
* io.quarkus/quarkus-vertx-http: Authorization bypass in HTTP path-based policies via encoded characters (CVE-2026-50559)
* jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass (CVE-2026-54512)
* jackson-databind: Security bypass allows arbitrary code execution (CVE-2026-54513)
* eclipse-vertx/vert.x: Denial of Service via TLS handshake with wildcard server name (CVE-2026-6860)
* golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation (CVE-2026-46595)
* golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters (CVE-2026-39829)
* golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions (CVE-2026-39828)
* golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate (CVE-2026-39835)
* golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses (CVE-2026-39830)
* golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass (CVE-2026-27136)
* golang.org/x/net/html: Cross-Site Scripting allowing arbitrary code execution (CVE-2026-25681)
* golang.org/x/image/tiff: Denial of Service via crafted PackBits-compressed data (CVE-2026-46599)
* github.com/hamba/avro/v2: github.com/linkedin/goavro/v2: Integer Overflow in Avro Decoder (CVE-2026-46384)
* github.com/hamba/avro/v2: github.com/linkedin/goavro/v2: CPU Exhaustion in Avro Decoder via Unbounded Block-Count Iteration (CVE-2026-46385)
* net: golang: Denial of Service via long CNAME response in LookupCNAME (CVE-2026-33811)
* mime: golang: Denial of Service via maliciously-crafted MIME header (CVE-2026-42504)
* form-data: Form field override via CRLF injection (CVE-2026-12143)
* ws: Denial of Service via memory exhaustion from small WebSocket fragments (CVE-2026-48779)
* ws: Uninitialized memory disclosure via websocket.close() with TypedArray (CVE-2026-45736)
* undici: Denial of Service due to unbounded memory growth via WebSocket frames (CVE-2026-12151)
* undici: Man-in-the-Middle attack via ignored TLS options with SOCKS5 proxy (CVE-2026-9697)
* undici: Information disclosure and data integrity issues due to incorrect Socks5ProxyAgent connection routing (CVE-2026-6734)
* js-cookie: Cookie attribute manipulation via prototype pollution (CVE-2026-46625)
* brace-expansion: Denial of Service due to exponential-time complexity (CVE-2026-13149)
* protobufjs: Denial of Service via crafted schema (CVE-2026-44290)
* protobufjs: Data integrity impact due to prototype pollution (CVE-2026-44292)
* protobufjs: Denial of Service via crafted JSON descriptors (CVE-2026-45740)
* protobufjs: Arbitrary Code Execution via prototype pollution (CVE-2026-44291)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in undici. When using Socks5ProxyAgent, undici incorrectly reuses a single connection pool across different origins. This can lead to cross-origin request routing, where sensitive credentials and data intended for one destination are sent to another. Consequently, responses from unintended origins may be trusted, and secure HTTPS connections could be silently downgraded to unencrypted HTTP, resulting in information disclosure and data integrity issues.
7.5 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in eclipse-vertx/vert.x. A remote attacker can exploit this vulnerability by performing a Transport Layer Security (TLS) handshake and presenting a server name extension with a server wildcard name. This can lead to a denial of service (DoS) condition, impacting the availability of the affected system.
5.3 (Medium)
Affected products
Fixed
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
14 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in undici. When undici's ProxyAgent is configured with a SOCKS5 proxy Uniform Resource Identifier (URI), it silently ignores Transport Layer Security (TLS) options, such as custom Certificate Authorities (CAs). This allows a remote attacker to perform a Man-in-the-Middle (MITM) attack, intercepting and tampering with HTTPS communications. The connection falls back to Node.js's default trust store, bypassing intended security configurations and potentially leading to information disclosure or arbitrary code execution.
7.4 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in form-data, a library for creating readable multipart/form-data streams. A remote attacker can exploit this vulnerability by injecting carriage return (CR), line feed (LF), or double-quote (") characters into the `field` argument of `FormData#append` or the `filename` option. This allows the attacker to inject additional headers or smuggle entire additional multipart parts into requests, potentially enabling them to add or override form fields and compromise data integrity.
7.5 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in undici. A malicious WebSocket server can exploit this by streaming numerous small or empty continuation frames. This can bypass per-frame and cumulative-size validation, leading to unbounded memory growth in the client process. The primary consequence is memory exhaustion, resulting in a denial of service (DoS) for affected applications using the undici WebSocket client or WebSocketStream API.
7.5 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in brace-expansion. An attacker can exploit a vulnerability in the `expand()` function by providing a specially crafted string. This string, containing consecutive non-expanding brace groups, can trigger exponential-time complexity, leading to significant CPU consumption and event-loop blocking. This can result in a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/html. A remote attacker could exploit this vulnerability by providing specially crafted HTML. When this arbitrary HTML is parsed and rendered, it can result in an unexpected HTML tree, bypassing input sanitization. This can be leveraged to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution in applications that use the affected component.
8.1 (High)
Affected products
Fixed
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
14 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/html. When arbitrary HTML is parsed and then rendered, it can result in an unexpected HTML tree. This allows an attacker to bypass HTML sanitization mechanisms, leading to Cross-Site Scripting (XSS) attacks in applications. Such attacks can result in information disclosure or arbitrary code execution.
8.1 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.
7.5 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote attacker could exploit this vulnerability when an SSH server authentication callback returned a PartialSuccessError with non-nil permissions. This flaw caused these permissions to be silently discarded, potentially bypassing certificate restrictions, such as a force-command, after a second authentication factor succeeded. This could lead to unauthorized command execution or access.
8.8 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during public key authentication. Successful exploitation could lead to a denial of service (DoS) due to prolonged CPU consumption during signature verification.
7.5 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection's read loop. This prevents the associated resources from being released, leading to a resource leak per connection. The consequence is a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. SSH servers configured to use CertChecker as a public key callback, without explicitly setting IsUserAuthority or IsHostAuthority, are vulnerable. A remote attacker can exploit this by presenting a specially crafted certificate, causing the server to panic and resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the Golang MIME (Multipurpose Internet Mail Extensions) package. A remote attacker could exploit this vulnerability by sending a maliciously-crafted MIME header containing many invalid encoded-words. This could lead to excessive CPU consumption, resulting in a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in netty-handler, a component of the Netty network application framework. A remote attacker can exploit an incorrect masking operation in the IpSubnetFilterRule.compareTo() function to bypass configured IPv6 subnet rules. This allows valid public IP addresses to circumvent intended network restrictions, potentially leading to unauthorized access or exposure of services.
8.1 (High)
Affected products
Fixed
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
14 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in protobufjs. This vulnerability allows an attacker to craft a protobuf schema or JSON descriptor that, when processed, can traverse through inherited object properties. This can lead to writing to global JavaScript constructors, corrupting process-wide built-in functionality. The most significant impact is a denial of service (DoS).
7.5 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in protobufjs, a library that compiles protobuf definitions into JavaScript functions. This prototype pollution vulnerability occurs when `Object.prototype` is polluted, allowing attacker-controlled properties to be resolved as valid protobuf type information. This can lead to attacker-controlled strings being emitted into generated JavaScript code, potentially resulting in arbitrary code execution.
8.1 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in protobufjs, a library that compiles protobuf definitions into JavaScript functions. This vulnerability allows an attacker to manipulate the internal structure of message objects. By providing a specially crafted input, an attacker could alter the prototype of individual message instances, potentially leading to unauthorized modification of data or unexpected application behavior, thereby impacting data integrity.
7.5 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in netty-codec-haproxy, a component of the Netty network application framework. A remote attacker can exploit this vulnerability by sending a specially crafted HAProxy message with a malformed PP2_TYPE_SSL TLV (Type-Length-Value) header. This can lead to an IndexOutOfBoundsException and prevent the release of retained memory, ultimately causing a Denial of Service (DoS) condition for the affected application.
7.5 (High)
Affected products
Fixed
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
14 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Netty, a network application framework. A remote attacker can exploit this vulnerability by sending a crafted TLS (Transport Layer Security) ClientHello message. This can lead to an eager allocation of a large memory buffer, causing a Denial of Service (DoS) due to excessive memory consumption. The issue occurs in the `SslClientHelloHandler.decode()` method when processing the TLS handshake length.
7.5 (High)
Affected products
Fixed
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
14 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Netty's DnsResolveContext. This vulnerability allows a remote attacker to achieve information disclosure or data manipulation by crafting malicious DNS responses. The flaw occurs because the DnsResolveContext fails to validate the origin (bailiwick) of CNAME records in DNS responses, which could enable an attacker to redirect network traffic or intercept sensitive data from affected applications.
8.7 (High)
Affected products
Fixed
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
14 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in ws, an open source WebSocket client and server for Node.js. The `websocket.close()` implementation is vulnerable to uninitialized memory disclosure when a `TypedArray` is passed as the reason argument. This can lead to the disclosure of sensitive information from uninitialized memory.
7.5 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64 | — |
Vendor Fix
fix
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64 | — | ||
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64 | — | ||
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64 | — | ||
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64 | — | ||
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64 | — | ||
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64 | — | ||
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64 | — | ||
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64 | — | ||
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64 | — | ||
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64 | — | ||
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64 | — | ||
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64 | — | ||
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64 | — | ||
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64 | — | ||
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64 | — | ||
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64 | — | ||
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64 | — | ||
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64 | — |
Threats
Impact
Important
A flaw was found in protobufjs. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by providing a crafted JSON descriptor with deeply nested namespace definitions. This can lead to the exhaustion of the JavaScript call stack during descriptor loading, making the application unresponsive.
7.5 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64 | — |
Workaround
|
Threats
Impact
Important
An integer overflow flaw was found in Go Avro in decoding logic. Multiple decoder paths performs unsafe integer conversions and overflow-prone arithmetic operations on attacker-controlled values from Avro payloads. A remote attacker during Avro decoder operations could exploit this issue using specially crafted Avro data to consume excessive resources by bypassing memory limits and triggering crashes leading to a denial of service in affected applications.
7.5 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the Avro array and map decoding logic in Go Avro. The decoder failed to properly stop processing after encountering read errors while iterating over attacker-controlled block-count values, leading to excessive resource consumption. A remote unauthenticated attacker could exploit this issue using specially crafted Avro payloads causing denial of service, where the affected system's CPU is consumed indefinitely until the process is terminated.
7.5 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. Source-address validation can be skipped when an SSH server configuration uses an authentication callback type other than public key, allowing authorization bypass in misconfigured servers. This is a follow-on to incomplete coverage from the CVE-2024-45337 fix.
7.1 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64 | — |
Vendor Fix
fix
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64 | — | ||
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64 | — | ||
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64 | — | ||
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64 | — | ||
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64 | — | ||
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64 | — | ||
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64 | — | ||
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64 | — | ||
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64 | — | ||
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64 | — | ||
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64 | — | ||
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64 | — | ||
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64 | — | ||
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64 | — | ||
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64 | — | ||
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64 | — | ||
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64 | — | ||
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64 | — |
Threats
Impact
Important
A flaw was found in the `golang.org/x/image/tiff` package's TIFF decoder. This vulnerability occurs because the decoder does not properly limit the size of PackBits-compressed data. A remote attacker could exploit this by providing a maliciously-crafted image, leading to the decoder processing excessive amounts of data. This can result in a Denial of Service (DoS) due to resource exhaustion, even with a small input image.
6.5 (Medium)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in JavaScript Cookie (js-cookie). This vulnerability allows a remote attacker to manipulate cookie attributes by exploiting a prototype pollution issue within the `assign()` helper function. When processing specially crafted JSON input, the flaw enables an attacker to hijack the prototype of a cookie's attribute object. This allows the attacker to set sensitive cookie attributes such as `domain`, `secure`, `samesite`, `expires`, and `path`, potentially leading to security bypasses or session manipulation.
7.5 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Netty's `DnsResolveContext`. An attacker controlling an authoritative name server for a subdomain can exploit this vulnerability by providing crafted NS records that are insufficiently validated. This allows the attacker to poison the DNS cache for parent domains, bypassing standard bailiwick rules. Consequently, future DNS resolutions for the affected parent domain will use the poisoned cache, potentially redirecting users to malicious servers and leading to information disclosure or integrity compromise.
8.7 (High)
Affected products
Fixed
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
14 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in netty-codec-http2. A remote attacker could send specially crafted frames that cause a resource leak within the `DelegatingDecompressorFrameListener` class. This resource leak could lead to an Out Of Memory Error (OOME), potentially causing a Denial of Service (DoS) by taking down the entire Java Virtual Machine (JVM).
7.5 (High)
Affected products
Fixed
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
14 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the Netty HAProxy PROXY protocol v2 codec. A remote attacker can exploit this vulnerability by sending a specially crafted HAProxy PROXY protocol v2 header with nested `PP2_TYPE_SSL` type-length-value (TLV) records. This can lead to a memory leak, causing the underlying cumulation buffer to remain permanently pinned and potentially resulting in a Denial of Service (DoS) due to resource exhaustion.
7.5 (High)
Affected products
Fixed
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
14 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in ws, an open source WebSocket client and server. A remote attacker can exploit this memory exhaustion vulnerability by sending a high volume of exceptionally small fragments and data chunks. This action forces the affected component to allocate and hold structural wrappers that consume excessive memory. Consequently, this leads to process termination and a denial of service (DoS) for the remote peer.
7.5 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
18 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Netty, a network application framework. This vulnerability allows a remote attacker to bypass hostname verification due to improper handling of user-supplied trust managers. When a client is configured with a plain X.509 Trust Manager (X509TrustManager), it fails to perform necessary hostname checks, enabling an attacker to impersonate a legitimate server. This could lead to sensitive information disclosure or man-in-the-middle attacks.
7.5 (High)
Affected products
Fixed
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
14 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Quarkus. A remote attacker could bypass HTTP path-based authorization policies by using specially crafted encoded semicolons, slashes, or backslashes in HTTP requests. This could allow unauthorized access to protected static resources, leading to information disclosure.
7.5 (High)
Affected products
Fixed
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
14 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in jackson-databind. This vulnerability allows a remote attacker to bypass the PolymorphicTypeValidator (PTV) when polymorphic typing is enabled and a type identifier contains generic parameters. By crafting a malicious type ID, an attacker can place a denied class as a generic type parameter of an allowed container. This leads to the loading and instantiation of arbitrary classes, potentially resulting in arbitrary code execution.
8.1 (High)
Affected products
Fixed
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
14 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in jackson-databind, a library used for processing data. This vulnerability allows an attacker to bypass security controls designed to validate data types. By sending specially crafted input, an attacker can force the system to process untrusted data, which may lead to the execution of malicious code. This could result in a complete compromise of the affected system, impacting its confidentiality, integrity, and availability.
8.1 (High)
Affected products
Fixed
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
14 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64 | — |
Workaround
|
|
| Unresolved product id: 9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64 | — |
Workaround
|
Threats
Impact
Important
References
272 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update is now available for the Red Hat build of Cryostat 4 on RHEL 9.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "An update is now available for the Red Hat build of Cryostat 4 on RHEL 9.\n\nSecurity Fix(es):\n\n* netty-handler: Denial of Service due to eager buffer allocation in TLS handshake (CVE-2026-45416)\n* netty-resolver-dns: Information disclosure and data manipulation due to improper CNAME record validation (CVE-2026-45674)\n* netty-handler: Improper trust manager handling leads to hostname verification bypass (CVE-2026-50010)\n* io.netty/netty-resolver-dns: Netty has Insufficient Bailiwick Validation for NS Records (CVE-2026-47691)\n* netty-codec-haproxy: Netty HAProxy PROXY protocol v2 codec: Denial of Service via memory leak from crafted PROXY protocol headers (CVE-2026-48059)\n* netty-codec-http2: Denial of Service due to resource leak (CVE-2026-48043)\n* netty-codec-haproxy: Denial of Service via malformed HAProxy message (CVE-2026-44893)\n* netty-handler: IPv6 subnet rule bypass due to incorrect masking operation (CVE-2026-44249)\n* io.quarkus/quarkus-vertx-http: Authorization bypass in HTTP path-based policies via encoded characters (CVE-2026-50559)\n* jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass (CVE-2026-54512)\n* jackson-databind: Security bypass allows arbitrary code execution (CVE-2026-54513)\n* eclipse-vertx/vert.x: Denial of Service via TLS handshake with wildcard server name (CVE-2026-6860)\n* golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation (CVE-2026-46595)\n* golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters (CVE-2026-39829)\n* golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions (CVE-2026-39828)\n* golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate (CVE-2026-39835)\n* golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses (CVE-2026-39830)\n* golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass (CVE-2026-27136)\n* golang.org/x/net/html: Cross-Site Scripting allowing arbitrary code execution (CVE-2026-25681)\n* golang.org/x/image/tiff: Denial of Service via crafted PackBits-compressed data (CVE-2026-46599)\n* github.com/hamba/avro/v2: github.com/linkedin/goavro/v2: Integer Overflow in Avro Decoder (CVE-2026-46384)\n* github.com/hamba/avro/v2: github.com/linkedin/goavro/v2: CPU Exhaustion in Avro Decoder via Unbounded Block-Count Iteration (CVE-2026-46385)\n* net: golang: Denial of Service via long CNAME response in LookupCNAME (CVE-2026-33811)\n* mime: golang: Denial of Service via maliciously-crafted MIME header (CVE-2026-42504)\n* form-data: Form field override via CRLF injection (CVE-2026-12143)\n* ws: Denial of Service via memory exhaustion from small WebSocket fragments (CVE-2026-48779)\n* ws: Uninitialized memory disclosure via websocket.close() with TypedArray (CVE-2026-45736)\n* undici: Denial of Service due to unbounded memory growth via WebSocket frames (CVE-2026-12151)\n* undici: Man-in-the-Middle attack via ignored TLS options with SOCKS5 proxy (CVE-2026-9697)\n* undici: Information disclosure and data integrity issues due to incorrect Socks5ProxyAgent connection routing (CVE-2026-6734)\n* js-cookie: Cookie attribute manipulation via prototype pollution (CVE-2026-46625)\n* brace-expansion: Denial of Service due to exponential-time complexity (CVE-2026-13149)\n* protobufjs: Denial of Service via crafted schema (CVE-2026-44290)\n* protobufjs: Data integrity impact due to prototype pollution (CVE-2026-44292)\n* protobufjs: Denial of Service via crafted JSON descriptors (CVE-2026-45740)\n* protobufjs: Arbitrary Code Execution via prototype pollution (CVE-2026-44291)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:48151",
"url": "https://access.redhat.com/errata/RHSA-2026:48151"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2466990",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466990"
},
{
"category": "external",
"summary": "2467822",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467822"
},
{
"category": "external",
"summary": "2477081",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477081"
},
{
"category": "external",
"summary": "2477088",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477088"
},
{
"category": "external",
"summary": "2477100",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477100"
},
{
"category": "external",
"summary": "2477111",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477111"
},
{
"category": "external",
"summary": "2477914",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477914"
},
{
"category": "external",
"summary": "2480680",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480680"
},
{
"category": "external",
"summary": "2480681",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480681"
},
{
"category": "external",
"summary": "2480684",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480684"
},
{
"category": "external",
"summary": "2480687",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480687"
},
{
"category": "external",
"summary": "2480689",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480689"
},
{
"category": "external",
"summary": "2480757",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480757"
},
{
"category": "external",
"summary": "2480761",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480761"
},
{
"category": "external",
"summary": "2483473",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2483473"
},
{
"category": "external",
"summary": "2483475",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2483475"
},
{
"category": "external",
"summary": "2483482",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2483482"
},
{
"category": "external",
"summary": "2484204",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484204"
},
{
"category": "external",
"summary": "2486959",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2486959"
},
{
"category": "external",
"summary": "2487740",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487740"
},
{
"category": "external",
"summary": "2488081",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488081"
},
{
"category": "external",
"summary": "2488383",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488383"
},
{
"category": "external",
"summary": "2488391",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488391"
},
{
"category": "external",
"summary": "2488400",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488400"
},
{
"category": "external",
"summary": "2488429",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488429"
},
{
"category": "external",
"summary": "2488437",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488437"
},
{
"category": "external",
"summary": "2488439",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488439"
},
{
"category": "external",
"summary": "2488442",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488442"
},
{
"category": "external",
"summary": "2488480",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488480"
},
{
"category": "external",
"summary": "2489661",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2489661"
},
{
"category": "external",
"summary": "2489980",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2489980"
},
{
"category": "external",
"summary": "2490018",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2490018"
},
{
"category": "external",
"summary": "2490024",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2490024"
},
{
"category": "external",
"summary": "2492010",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2492010"
},
{
"category": "external",
"summary": "2492015",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2492015"
},
{
"category": "external",
"summary": "2494813",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2494813"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_48151.json"
}
],
"title": "Red Hat Security Advisory: Red Hat build of Cryostat security update",
"tracking": {
"current_release_date": "2026-08-22T08:40:48+00:00",
"generator": {
"date": "2026-08-22T08:40:48+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.16"
}
},
"id": "RHSA-2026:48151",
"initial_release_date": "2026-07-29T19:53:07+00:00",
"revision_history": [
{
"date": "2026-07-29T19:53:07+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-07-29T19:53:07+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-22T08:40:48+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Cryostat 4 on RHEL 9",
"product": {
"name": "Cryostat 4 on RHEL 9",
"product_id": "9Base-Cryostat-4",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:cryostat:4::el9"
}
}
}
],
"category": "product_family",
"name": "Cryostat"
},
{
"branches": [
{
"category": "product_version",
"name": "cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"product": {
"name": "cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"product_id": "cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"product_identification_helper": {
"purl": "pkg:oci/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1?arch=arm64\u0026repository_url=registry.redhat.io/cryostat/cryostat-agent-init-rhel9\u0026tag=0.7.0-11"
}
}
},
{
"category": "product_version",
"name": "cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"product": {
"name": "cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"product_id": "cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"product_identification_helper": {
"purl": "pkg:oci/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f?arch=arm64\u0026repository_url=registry.redhat.io/cryostat/cryostat-db-rhel9\u0026tag=4.2.0-19"
}
}
},
{
"category": "product_version",
"name": "cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"product": {
"name": "cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"product_id": "cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"product_identification_helper": {
"purl": "pkg:oci/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101?arch=arm64\u0026repository_url=registry.redhat.io/cryostat/cryostat-grafana-dashboard-rhel9\u0026tag=4.2.0-13"
}
}
},
{
"category": "product_version",
"name": "cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"product": {
"name": "cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"product_id": "cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"product_identification_helper": {
"purl": "pkg:oci/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663?arch=arm64\u0026repository_url=registry.redhat.io/cryostat/cryostat-openshift-console-plugin-rhel9\u0026tag=4.2.0-13"
}
}
},
{
"category": "product_version",
"name": "cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"product": {
"name": "cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"product_id": "cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"product_identification_helper": {
"purl": "pkg:oci/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6?arch=arm64\u0026repository_url=registry.redhat.io/cryostat/cryostat-reports-rhel9\u0026tag=4.2.0-13"
}
}
},
{
"category": "product_version",
"name": "cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"product": {
"name": "cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"product_id": "cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"product_identification_helper": {
"purl": "pkg:oci/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6?arch=arm64\u0026repository_url=registry.redhat.io/cryostat/cryostat-rhel9\u0026tag=4.2.0-13"
}
}
},
{
"category": "product_version",
"name": "cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"product": {
"name": "cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"product_id": "cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"product_identification_helper": {
"purl": "pkg:oci/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292?arch=arm64\u0026repository_url=registry.redhat.io/cryostat/cryostat-operator-bundle\u0026tag=4.2.0-11"
}
}
},
{
"category": "product_version",
"name": "cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"product": {
"name": "cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"product_id": "cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"product_identification_helper": {
"purl": "pkg:oci/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f?arch=arm64\u0026repository_url=registry.redhat.io/cryostat/cryostat-rhel9-operator\u0026tag=4.2.0-18"
}
}
},
{
"category": "product_version",
"name": "cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"product": {
"name": "cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"product_id": "cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"product_identification_helper": {
"purl": "pkg:oci/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850?arch=arm64\u0026repository_url=registry.redhat.io/cryostat/cryostat-storage-rhel9\u0026tag=4.2.0-19"
}
}
},
{
"category": "product_version",
"name": "cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64",
"product": {
"name": "cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64",
"product_id": "cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64",
"product_identification_helper": {
"purl": "pkg:oci/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a?arch=arm64\u0026repository_url=registry.redhat.io/cryostat/jfr-datasource-rhel9\u0026tag=4.2.0-13"
}
}
}
],
"category": "architecture",
"name": "arm64"
},
{
"branches": [
{
"category": "product_version",
"name": "cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"product": {
"name": "cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"product_id": "cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"product_identification_helper": {
"purl": "pkg:oci/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579?arch=amd64\u0026repository_url=registry.redhat.io/cryostat/cryostat-agent-init-rhel9\u0026tag=0.7.0-11"
}
}
},
{
"category": "product_version",
"name": "cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"product": {
"name": "cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"product_id": "cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"product_identification_helper": {
"purl": "pkg:oci/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3?arch=amd64\u0026repository_url=registry.redhat.io/cryostat/cryostat-db-rhel9\u0026tag=4.2.0-19"
}
}
},
{
"category": "product_version",
"name": "cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"product": {
"name": "cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"product_id": "cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"product_identification_helper": {
"purl": "pkg:oci/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f?arch=amd64\u0026repository_url=registry.redhat.io/cryostat/cryostat-grafana-dashboard-rhel9\u0026tag=4.2.0-13"
}
}
},
{
"category": "product_version",
"name": "cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"product": {
"name": "cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"product_id": "cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"product_identification_helper": {
"purl": "pkg:oci/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1?arch=amd64\u0026repository_url=registry.redhat.io/cryostat/cryostat-openshift-console-plugin-rhel9\u0026tag=4.2.0-13"
}
}
},
{
"category": "product_version",
"name": "cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"product": {
"name": "cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"product_id": "cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"product_identification_helper": {
"purl": "pkg:oci/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe?arch=amd64\u0026repository_url=registry.redhat.io/cryostat/cryostat-reports-rhel9\u0026tag=4.2.0-13"
}
}
},
{
"category": "product_version",
"name": "cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"product": {
"name": "cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"product_id": "cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"product_identification_helper": {
"purl": "pkg:oci/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc?arch=amd64\u0026repository_url=registry.redhat.io/cryostat/cryostat-rhel9\u0026tag=4.2.0-13"
}
}
},
{
"category": "product_version",
"name": "cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"product": {
"name": "cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"product_id": "cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"product_identification_helper": {
"purl": "pkg:oci/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6?arch=amd64\u0026repository_url=registry.redhat.io/cryostat/cryostat-operator-bundle\u0026tag=4.2.0-11"
}
}
},
{
"category": "product_version",
"name": "cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"product": {
"name": "cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"product_id": "cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"product_identification_helper": {
"purl": "pkg:oci/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45?arch=amd64\u0026repository_url=registry.redhat.io/cryostat/cryostat-rhel9-operator\u0026tag=4.2.0-18"
}
}
},
{
"category": "product_version",
"name": "cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"product": {
"name": "cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"product_id": "cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"product_identification_helper": {
"purl": "pkg:oci/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467?arch=amd64\u0026repository_url=registry.redhat.io/cryostat/cryostat-storage-rhel9\u0026tag=4.2.0-19"
}
}
},
{
"category": "product_version",
"name": "cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"product": {
"name": "cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"product_id": "cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"product_identification_helper": {
"purl": "pkg:oci/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134?arch=amd64\u0026repository_url=registry.redhat.io/cryostat/jfr-datasource-rhel9\u0026tag=4.2.0-13"
}
}
}
],
"category": "architecture",
"name": "amd64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64 as a component of Cryostat 4 on RHEL 9",
"product_id": "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64"
},
"product_reference": "cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"relates_to_product_reference": "9Base-Cryostat-4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64 as a component of Cryostat 4 on RHEL 9",
"product_id": "9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64"
},
"product_reference": "cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"relates_to_product_reference": "9Base-Cryostat-4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64 as a component of Cryostat 4 on RHEL 9",
"product_id": "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64"
},
"product_reference": "cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"relates_to_product_reference": "9Base-Cryostat-4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64 as a component of Cryostat 4 on RHEL 9",
"product_id": "9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64"
},
"product_reference": "cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"relates_to_product_reference": "9Base-Cryostat-4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64 as a component of Cryostat 4 on RHEL 9",
"product_id": "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64"
},
"product_reference": "cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"relates_to_product_reference": "9Base-Cryostat-4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64 as a component of Cryostat 4 on RHEL 9",
"product_id": "9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64"
},
"product_reference": "cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"relates_to_product_reference": "9Base-Cryostat-4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64 as a component of Cryostat 4 on RHEL 9",
"product_id": "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64"
},
"product_reference": "cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"relates_to_product_reference": "9Base-Cryostat-4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64 as a component of Cryostat 4 on RHEL 9",
"product_id": "9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64"
},
"product_reference": "cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"relates_to_product_reference": "9Base-Cryostat-4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64 as a component of Cryostat 4 on RHEL 9",
"product_id": "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64"
},
"product_reference": "cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"relates_to_product_reference": "9Base-Cryostat-4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64 as a component of Cryostat 4 on RHEL 9",
"product_id": "9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64"
},
"product_reference": "cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"relates_to_product_reference": "9Base-Cryostat-4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64 as a component of Cryostat 4 on RHEL 9",
"product_id": "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64"
},
"product_reference": "cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"relates_to_product_reference": "9Base-Cryostat-4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64 as a component of Cryostat 4 on RHEL 9",
"product_id": "9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64"
},
"product_reference": "cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"relates_to_product_reference": "9Base-Cryostat-4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64 as a component of Cryostat 4 on RHEL 9",
"product_id": "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64"
},
"product_reference": "cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"relates_to_product_reference": "9Base-Cryostat-4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64 as a component of Cryostat 4 on RHEL 9",
"product_id": "9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64"
},
"product_reference": "cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"relates_to_product_reference": "9Base-Cryostat-4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64 as a component of Cryostat 4 on RHEL 9",
"product_id": "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64"
},
"product_reference": "cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"relates_to_product_reference": "9Base-Cryostat-4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64 as a component of Cryostat 4 on RHEL 9",
"product_id": "9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64"
},
"product_reference": "cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"relates_to_product_reference": "9Base-Cryostat-4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64 as a component of Cryostat 4 on RHEL 9",
"product_id": "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64"
},
"product_reference": "cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"relates_to_product_reference": "9Base-Cryostat-4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64 as a component of Cryostat 4 on RHEL 9",
"product_id": "9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64"
},
"product_reference": "cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"relates_to_product_reference": "9Base-Cryostat-4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64 as a component of Cryostat 4 on RHEL 9",
"product_id": "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64"
},
"product_reference": "cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"relates_to_product_reference": "9Base-Cryostat-4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64 as a component of Cryostat 4 on RHEL 9",
"product_id": "9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
},
"product_reference": "cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64",
"relates_to_product_reference": "9Base-Cryostat-4"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-6734",
"cwe": {
"id": "CWE-940",
"name": "Improper Verification of Source of a Communication Channel"
},
"discovery_date": "2026-06-17T19:04:00.272340+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2490024"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in undici. When using Socks5ProxyAgent, undici incorrectly reuses a single connection pool across different origins. This can lead to cross-origin request routing, where sensitive credentials and data intended for one destination are sent to another. Consequently, responses from unintended origins may be trusted, and secure HTTPS connections could be silently downgraded to unencrypted HTTP, resulting in information disclosure and data integrity issues.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "undici: undici: Information disclosure and data integrity issues due to incorrect Socks5ProxyAgent connection routing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is rated as an Important security flaw. The `undici` library, when configured with `Socks5ProxyAgent` to handle requests for multiple origins, incorrectly reuses connection pools. This can lead to sensitive data and credentials being misrouted to unintended destinations, potentially downgrading HTTPS connections to HTTP and compromising data integrity and confidentiality. Red Hat products utilizing `undici` with `Socks5ProxyAgent` in multi-origin scenarios are affected.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64"
],
"known_not_affected": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-6734"
},
{
"category": "external",
"summary": "RHBZ#2490024",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2490024"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-6734",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6734"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-6734",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-6734"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/nodejs/undici/security/advisories/GHSA-hm92-r4w5-c3mj",
"url": "https://github.com/nodejs/undici/security/advisories/GHSA-hm92-r4w5-c3mj"
}
],
"release_date": "2026-06-17T16:36:55.439000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T19:53:07+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:48151"
},
{
"category": "workaround",
"details": "The single most impactful mitigation is applying network egress controls to restrict which external destinations affected applications can reach. Because the vulnerability causes requests to be misrouted to wrong origins, limiting the set of reachable origins directly reduces the attack surface. These controls collectively limit the blast radius of the connection pool misrouting \u2014 the attacker must compromise one of the explicitly allowed destinations rather than any arbitrary origin \u2014 but they do not fix the underlying logic bug.",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "undici: undici: Information disclosure and data integrity issues due to incorrect Socks5ProxyAgent connection routing"
},
{
"cve": "CVE-2026-6860",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-05-06T10:01:43.929832+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466990"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in eclipse-vertx/vert.x. A remote attacker can exploit this vulnerability by performing a Transport Layer Security (TLS) handshake and presenting a server name extension with a server wildcard name. This can lead to a denial of service (DoS) condition, impacting the availability of the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "eclipse-vertx/vert.x: eclipse-vertx/vert.x: Denial of Service via TLS handshake with wildcard server name",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw is rated as Moderate because a remote attacker can trigger a denial of service in Red Hat products that use `eclipse-vertx/vert.x` and are configured with TLS wildcard server names. Exploitation occurs during the TLS handshake, impacting service availability without affecting data confidentiality or integrity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
],
"known_not_affected": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-6860"
},
{
"category": "external",
"summary": "RHBZ#2466990",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466990"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-6860",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-6860"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-6860",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-6860"
},
{
"category": "external",
"summary": "https://github.com/eclipse-vertx/vert.x/pull/6102",
"url": "https://github.com/eclipse-vertx/vert.x/pull/6102"
},
{
"category": "external",
"summary": "https://github.com/eclipse-vertx/vert.x/security/advisories/GHSA-3g76-f9xq-8vp6",
"url": "https://github.com/eclipse-vertx/vert.x/security/advisories/GHSA-3g76-f9xq-8vp6"
},
{
"category": "external",
"summary": "https://gitlab.eclipse.org/security/vulnerability-reports/-/issues/381",
"url": "https://gitlab.eclipse.org/security/vulnerability-reports/-/issues/381"
}
],
"release_date": "2026-05-06T09:55:12.531000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T19:53:07+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:48151"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "eclipse-vertx/vert.x: eclipse-vertx/vert.x: Denial of Service via TLS handshake with wildcard server name"
},
{
"cve": "CVE-2026-9697",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-06-17T19:03:30.813843+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2490018"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in undici. When undici\u0027s ProxyAgent is configured with a SOCKS5 proxy Uniform Resource Identifier (URI), it silently ignores Transport Layer Security (TLS) options, such as custom Certificate Authorities (CAs). This allows a remote attacker to perform a Man-in-the-Middle (MITM) attack, intercepting and tampering with HTTPS communications. The connection falls back to Node.js\u0027s default trust store, bypassing intended security configurations and potentially leading to information disclosure or arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "undici: undici: Man-in-the-Middle attack via ignored TLS options with SOCKS5 proxy",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important vulnerability. Applications using `undici`\u0027s `ProxyAgent` with a SOCKS5 proxy URI will silently ignore user-configured TLS options, including custom Certificate Authorities. This bypasses intended security controls for HTTPS communication, enabling a remote attacker to perform Man-in-the-Middle attacks, potentially leading to information disclosure or arbitrary code execution in affected Red Hat products.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64"
],
"known_not_affected": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-9697"
},
{
"category": "external",
"summary": "RHBZ#2490018",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2490018"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-9697",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-9697"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-9697",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-9697"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/nodejs/undici/security/advisories/GHSA-vmh5-mc38-953g",
"url": "https://github.com/nodejs/undici/security/advisories/GHSA-vmh5-mc38-953g"
}
],
"release_date": "2026-06-17T16:46:42.706000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T19:53:07+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:48151"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "undici: undici: Man-in-the-Middle attack via ignored TLS options with SOCKS5 proxy"
},
{
"cve": "CVE-2026-12143",
"cwe": {
"id": "CWE-93",
"name": "Improper Neutralization of CRLF Sequences (\u0027CRLF Injection\u0027)"
},
"discovery_date": "2026-06-12T19:00:57.360953+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488480"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in form-data, a library for creating readable multipart/form-data streams. A remote attacker can exploit this vulnerability by injecting carriage return (CR), line feed (LF), or double-quote (\") characters into the `field` argument of `FormData#append` or the `filename` option. This allows the attacker to inject additional headers or smuggle entire additional multipart parts into requests, potentially enabling them to add or override form fields and compromise data integrity.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "form-data: form-data: Form field override via CRLF injection",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important impact flaw in the form-data library: a remote attacker can inject arbitrary headers or additional multipart parts via CRLF injection in field names or filenames, potentially overriding sensitive form fields and affecting data integrity.\n\nFor RHOAI and RHEL AI, severity is Moderate because affected versions appear only as a transitive npm dependency in RHOAI (dashboard, mod-arch plugins, MLflow UI) and RHEL AI 3.4 bootc images, and those products use fixed field names for uploads rather than passing untrusted user input as multipart field names or filenames. The documented exploit path is therefore not reachable in default deployments. Practical impact is limited to non-default or custom integrations that forward multipart requests using attacker-controlled field names.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64"
],
"known_not_affected": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-12143"
},
{
"category": "external",
"summary": "RHBZ#2488480",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488480"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-12143",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-12143"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-12143",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-12143"
},
{
"category": "external",
"summary": "https://cwe.mitre.org/data/definitions/93.html",
"url": "https://cwe.mitre.org/data/definitions/93.html"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/commit/64190db548c0179e37206858e39f27cf513e9435",
"url": "https://github.com/form-data/form-data/commit/64190db548c0179e37206858e39f27cf513e9435"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/commit/be3f3cf553978bac15a5182f1f3c3d2d38ccf229",
"url": "https://github.com/form-data/form-data/commit/be3f3cf553978bac15a5182f1f3c3d2d38ccf229"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/commit/c7133499c2ee1b80c678e411244f4442bf902045",
"url": "https://github.com/form-data/form-data/commit/c7133499c2ee1b80c678e411244f4442bf902045"
},
{
"category": "external",
"summary": "https://github.com/form-data/form-data/security/advisories/GHSA-hmw2-7cc7-3qxx",
"url": "https://github.com/form-data/form-data/security/advisories/GHSA-hmw2-7cc7-3qxx"
},
{
"category": "external",
"summary": "https://html.spec.whatwg.org/multipage/form-control-infrastructure.html#multipart-form-data",
"url": "https://html.spec.whatwg.org/multipage/form-control-infrastructure.html#multipart-form-data"
},
{
"category": "external",
"summary": "https://www.npmjs.com/package/form-data",
"url": "https://www.npmjs.com/package/form-data"
}
],
"release_date": "2026-06-12T18:01:30.362000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T19:53:07+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:48151"
},
{
"category": "workaround",
"details": "Applications using the `form-data` library should implement strict input validation and sanitization for all field names and filenames derived from untrusted sources. This prevents the injection of control characters (CR, LF, \") that could lead to header injection or form field overrides. Deployments that exclusively use fixed or trusted field names are not impacted.",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "form-data: form-data: Form field override via CRLF injection"
},
{
"cve": "CVE-2026-12151",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-06-17T17:01:45.297604+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2489980"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in undici. A malicious WebSocket server can exploit this by streaming numerous small or empty continuation frames. This can bypass per-frame and cumulative-size validation, leading to unbounded memory growth in the client process. The primary consequence is memory exhaustion, resulting in a denial of service (DoS) for affected applications using the undici WebSocket client or WebSocketStream API.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "undici: undici: Denial of Service due to unbounded memory growth via WebSocket frames",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important denial of service flaw in the `undici` WebSocket client allows a remote attacker to cause unbounded memory growth. By sending numerous small or empty WebSocket frames, an unauthenticated attacker can exhaust system memory, leading to a denial of service in Red Hat products that use the affected client.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64"
],
"known_not_affected": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-12151"
},
{
"category": "external",
"summary": "RHBZ#2489980",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2489980"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-12151",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-12151"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-12151",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-12151"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/nodejs/undici/security/advisories/GHSA-vxpw-j846-p89q",
"url": "https://github.com/nodejs/undici/security/advisories/GHSA-vxpw-j846-p89q"
}
],
"release_date": "2026-06-17T16:05:38.785000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T19:53:07+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:48151"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "undici: undici: Denial of Service due to unbounded memory growth via WebSocket frames"
},
{
"cve": "CVE-2026-13149",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2026-06-30T10:00:59.843854+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2494813"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in brace-expansion. An attacker can exploit a vulnerability in the `expand()` function by providing a specially crafted string. This string, containing consecutive non-expanding brace groups, can trigger exponential-time complexity, leading to significant CPU consumption and event-loop blocking. This can result in a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in brace-expansion, a widely-used npm package for expanding brace sequences. The expand() function exhibits exponential-time complexity when processing consecutive non-expanding brace groups. An attacker who can supply crafted input to expand(), directly or transitively via minimatch or glob, can cause significant CPU consumption and event-loop blocking, resulting in denial of service. The max option does not mitigate this issue, as it bounds the output size rather than the recursion work.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64"
],
"known_not_affected": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-13149"
},
{
"category": "external",
"summary": "RHBZ#2494813",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2494813"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-13149",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-13149"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-13149",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-13149"
},
{
"category": "external",
"summary": "https://github.com/juliangruber/brace-expansion/commit/c7e33ec13ac1a684c116720843ce24e208611754",
"url": "https://github.com/juliangruber/brace-expansion/commit/c7e33ec13ac1a684c116720843ce24e208611754"
},
{
"category": "external",
"summary": "https://www.npmjs.com/package/brace-expansion",
"url": "https://www.npmjs.com/package/brace-expansion"
}
],
"release_date": "2026-06-30T08:30:34.502000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T19:53:07+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:48151"
},
{
"category": "workaround",
"details": "There is no practical mitigation for this vulnerability. The brace-expansion package is typically a transitive dependency pulled in via minimatch and glob, making it difficult to isolate. Users should upgrade to a fixed version of brace-expansion when one becomes available.",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity"
},
{
"cve": "CVE-2026-25681",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-05-22T16:01:08.177603+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480761"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/html. A remote attacker could exploit this vulnerability by providing specially crafted HTML. When this arbitrary HTML is parsed and rendered, it can result in an unexpected HTML tree, bypassing input sanitization. This can be leveraged to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution in applications that use the affected component.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in `golang.org/x/net/html` could enable remote attackers to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution. The flaw allows specially crafted HTML to bypass input sanitization during parsing and rendering. Red Hat products are affected if they process untrusted HTML content using the vulnerable component without additional output encoding or robust content security policies.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64"
],
"known_not_affected": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-25681"
},
{
"category": "external",
"summary": "RHBZ#2480761",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480761"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-25681",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25681"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25681",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25681"
},
{
"category": "external",
"summary": "https://go.dev/cl/781703",
"url": "https://go.dev/cl/781703"
},
{
"category": "external",
"summary": "https://go.dev/issue/79574",
"url": "https://go.dev/issue/79574"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5029",
"url": "https://pkg.go.dev/vuln/GO-2026-5029"
}
],
"release_date": "2026-05-22T15:01:21.975000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T19:53:07+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:48151"
},
{
"category": "workaround",
"details": "To mitigate this flaw, applications processing untrusted HTML input must implement strict input sanitization and ensure all output is properly encoded before rendering. Deploying a comprehensive Content Security Policy (CSP) can restrict script execution, further reducing the attack surface. Administrators should review application configurations to ensure adequate protection against XSS.",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting"
},
{
"cve": "CVE-2026-27136",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-05-22T16:00:56.609820+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480757"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/html. When arbitrary HTML is parsed and then rendered, it can result in an unexpected HTML tree. This allows an attacker to bypass HTML sanitization mechanisms, leading to Cross-Site Scripting (XSS) attacks in applications. Such attacks can result in information disclosure or arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in `golang.org/x/net/html` is rated as Important. It allows for Cross-Site Scripting (XSS) attacks by enabling an attacker to bypass HTML sanitization mechanisms when arbitrary HTML is parsed and rendered. This can lead to information disclosure or arbitrary code execution in affected applications. Exploitation typically requires user interaction, where a user processes specially crafted malicious HTML content.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64"
],
"known_not_affected": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27136"
},
{
"category": "external",
"summary": "RHBZ#2480757",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480757"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27136",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27136"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27136",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27136"
},
{
"category": "external",
"summary": "https://go.dev/cl/781685",
"url": "https://go.dev/cl/781685"
},
{
"category": "external",
"summary": "https://go.dev/issue/79575",
"url": "https://go.dev/issue/79575"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5030",
"url": "https://pkg.go.dev/vuln/GO-2026-5030"
}
],
"release_date": "2026-05-22T15:01:22.111000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T19:53:07+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:48151"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass"
},
{
"cve": "CVE-2026-33811",
"cwe": {
"id": "CWE-1341",
"name": "Multiple Releases of Same Resource or Handle"
},
"discovery_date": "2026-05-07T20:01:34.913869+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467822"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net` package, affecting applications configured to use the `cgo` DNS resolver. A remote attacker could trigger a double-free memory error by providing a very long CNAME response, leading to a crash of the vulnerable application and impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64"
],
"known_not_affected": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "RHBZ#2467822",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467822"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33811",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33811"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://go.dev/cl/767860",
"url": "https://go.dev/cl/767860"
},
{
"category": "external",
"summary": "https://go.dev/issue/78803",
"url": "https://go.dev/issue/78803"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4981",
"url": "https://pkg.go.dev/vuln/GO-2026-4981"
}
],
"release_date": "2026-05-07T19:41:19.285000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T19:53:07+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:48151"
},
{
"category": "workaround",
"details": "To mitigate this issue, applications can be configured to use the pure Go DNS resolver instead of the `cgo` DNS resolver. This can be achieved by setting the `GODEBUG` environment variable to `netdns=go`. For example, to run a Go application with this mitigation: `GODEBUG=netdns=go /path/to/your/go/application`. This change may require restarting affected applications or services to take effect. Users should verify that this change does not negatively impact DNS resolution for their specific application environment.",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME"
},
{
"cve": "CVE-2026-39828",
"cwe": {
"id": "CWE-281",
"name": "Improper Preservation of Permissions"
},
"discovery_date": "2026-05-22T04:01:46.775641+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480687"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote attacker could exploit this vulnerability when an SSH server authentication callback returned a PartialSuccessError with non-nil permissions. This flaw caused these permissions to be silently discarded, potentially bypassing certificate restrictions, such as a force-command, after a second authentication factor succeeded. This could lead to unauthorized command execution or access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important security flaw in the `golang.org/x/crypto/ssh` library. When an SSH server utilizing this library is configured with specific authentication callbacks that return a `PartialSuccessError` with non-nil permissions, an attacker could bypass intended certificate restrictions, such as `force-command`. This bypass could lead to unauthorized command execution or access on affected Red Hat systems configured with multi-factor authentication and certificate-based access controls.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64"
],
"known_not_affected": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39828"
},
{
"category": "external",
"summary": "RHBZ#2480687",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480687"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39828",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39828"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39828",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39828"
},
{
"category": "external",
"summary": "https://go.dev/cl/781621",
"url": "https://go.dev/cl/781621"
},
{
"category": "external",
"summary": "https://go.dev/issue/79562",
"url": "https://go.dev/issue/79562"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5014",
"url": "https://pkg.go.dev/vuln/GO-2026-5014"
}
],
"release_date": "2026-05-22T02:31:26.883000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T19:53:07+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:48151"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions"
},
{
"cve": "CVE-2026-39829",
"cwe": {
"id": "CWE-1284",
"name": "Improper Validation of Specified Quantity in Input"
},
"discovery_date": "2026-05-22T04:01:30.092249+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480681"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during public key authentication. Successful exploitation could lead to a denial of service (DoS) due to prolonged CPU consumption during signature verification.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in golang.org/x/crypto/ssh is rated as Important. An unauthenticated remote attacker could trigger a denial of service by providing a specially crafted public key with excessively large parameters during SSH public key authentication. This could lead to prolonged CPU consumption on the server, impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64"
],
"known_not_affected": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39829"
},
{
"category": "external",
"summary": "RHBZ#2480681",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480681"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39829",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39829"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39829",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39829"
},
{
"category": "external",
"summary": "https://go.dev/cl/781641",
"url": "https://go.dev/cl/781641"
},
{
"category": "external",
"summary": "https://go.dev/cl/781661",
"url": "https://go.dev/cl/781661"
},
{
"category": "external",
"summary": "https://go.dev/issue/79565",
"url": "https://go.dev/issue/79565"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5018",
"url": "https://pkg.go.dev/vuln/GO-2026-5018"
}
],
"release_date": "2026-05-22T02:31:27.324000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T19:53:07+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:48151"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters"
},
{
"cve": "CVE-2026-39830",
"cwe": {
"id": "CWE-772",
"name": "Missing Release of Resource after Effective Lifetime"
},
"discovery_date": "2026-05-22T04:01:38.517202+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480684"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection\u0027s read loop. This prevents the associated resources from being released, leading to a resource leak per connection. The consequence is a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in `golang.org/x/crypto/ssh`. A remote, unauthenticated attacker can exploit this vulnerability by sending unsolicited global request responses to an affected SSH server, leading to resource exhaustion and a denial of service. The impact is considered Important due to the potential for unauthenticated remote disruption of services utilizing the vulnerable SSH library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64"
],
"known_not_affected": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39830"
},
{
"category": "external",
"summary": "RHBZ#2480684",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480684"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39830",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39830"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39830",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39830"
},
{
"category": "external",
"summary": "https://go.dev/cl/781640",
"url": "https://go.dev/cl/781640"
},
{
"category": "external",
"summary": "https://go.dev/cl/781664",
"url": "https://go.dev/cl/781664"
},
{
"category": "external",
"summary": "https://go.dev/issue/79564",
"url": "https://go.dev/issue/79564"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5017",
"url": "https://pkg.go.dev/vuln/GO-2026-5017"
}
],
"release_date": "2026-05-22T02:31:27.208000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T19:53:07+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:48151"
},
{
"category": "workaround",
"details": "To mitigate this denial of service vulnerability, restrict network access to any service that utilizes the `golang.org/x/crypto/ssh` library and is exposed to untrusted networks. Implement firewall rules to allow connections only from trusted hosts or networks. This action limits the ability of malicious peers to send unsolicited global request responses. A restart of the affected service may be necessary for the new network rules to be applied effectively.",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses"
},
{
"cve": "CVE-2026-39835",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"discovery_date": "2026-05-22T04:01:27.279943+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480680"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. SSH servers configured to use CertChecker as a public key callback, without explicitly setting IsUserAuthority or IsHostAuthority, are vulnerable. A remote attacker can exploit this by presenting a specially crafted certificate, causing the server to panic and resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in `golang.org/x/crypto/ssh` affecting SSH servers that utilize `CertChecker` as a public key callback without explicitly configuring `IsUserAuthority` or `IsHostAuthority`. A remote, unauthenticated attacker can trigger a server panic by presenting a specially crafted certificate, leading to service disruption. Exploitation requires a specific, non-default configuration of the `CertChecker`.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64"
],
"known_not_affected": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39835"
},
{
"category": "external",
"summary": "RHBZ#2480680",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480680"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39835",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39835"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39835",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39835"
},
{
"category": "external",
"summary": "https://go.dev/cl/781660",
"url": "https://go.dev/cl/781660"
},
{
"category": "external",
"summary": "https://go.dev/issue/79563",
"url": "https://go.dev/issue/79563"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5015",
"url": "https://pkg.go.dev/vuln/GO-2026-5015"
}
],
"release_date": "2026-05-22T02:31:26.982000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T19:53:07+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:48151"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate"
},
{
"cve": "CVE-2026-42504",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-06-02T23:01:00.320527+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2484204"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Golang MIME (Multipurpose Internet Mail Extensions) package. A remote attacker could exploit this vulnerability by sending a maliciously-crafted MIME header containing many invalid encoded-words. This could lead to excessive CPU consumption, resulting in a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is rated as an Important severity flaw. A remote attacker could trigger a Denial of Service by sending a crafted MIME header with numerous invalid encoded-words to an application utilizing the affected Golang MIME package. This could lead to excessive CPU consumption on the system processing the malformed header, impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64"
],
"known_not_affected": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42504"
},
{
"category": "external",
"summary": "RHBZ#2484204",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484204"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42504",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42504"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42504",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42504"
},
{
"category": "external",
"summary": "https://go.dev/cl/774481",
"url": "https://go.dev/cl/774481"
},
{
"category": "external",
"summary": "https://go.dev/issue/79217",
"url": "https://go.dev/issue/79217"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw",
"url": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5038",
"url": "https://pkg.go.dev/vuln/GO-2026-5038"
}
],
"release_date": "2026-06-02T22:01:37.219000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T19:53:07+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:48151"
},
{
"category": "workaround",
"details": "To mitigate this issue, restrict network access to services that process MIME headers from untrusted sources. Implement input validation and sanitization for all incoming data, especially MIME headers, to prevent maliciously crafted content from being processed by applications utilizing the vulnerable Golang MIME package.",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header"
},
{
"cve": "CVE-2026-44249",
"cwe": {
"id": "CWE-1287",
"name": "Improper Validation of Specified Type of Input"
},
"discovery_date": "2026-06-11T22:02:05.327173+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488081"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in netty-handler, a component of the Netty network application framework. A remote attacker can exploit an incorrect masking operation in the IpSubnetFilterRule.compareTo() function to bypass configured IPv6 subnet rules. This allows valid public IP addresses to circumvent intended network restrictions, potentially leading to unauthorized access or exposure of services.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "netty-handler: netty-handler: IPv6 subnet rule bypass due to incorrect masking operation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in netty-handler is rated as Important because a remote attacker can bypass configured IPv6 subnet filtering rules. This flaw, stemming from an incorrect masking operation, could allow unauthorized access to or exposure of services that are intended to be network-restricted within Red Hat products utilizing the affected Netty component.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
],
"known_not_affected": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44249"
},
{
"category": "external",
"summary": "RHBZ#2488081",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488081"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44249",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44249"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44249",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44249"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/releases/tag/netty-4.1.135.Final",
"url": "https://github.com/netty/netty/releases/tag/netty-4.1.135.Final"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/releases/tag/netty-4.2.15.Final",
"url": "https://github.com/netty/netty/releases/tag/netty-4.2.15.Final"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/security/advisories/GHSA-3qp7-7mw8-wx86",
"url": "https://github.com/netty/netty/security/advisories/GHSA-3qp7-7mw8-wx86"
}
],
"release_date": "2026-06-11T20:46:14.110000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T19:53:07+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:48151"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "netty-handler: netty-handler: IPv6 subnet rule bypass due to incorrect masking operation"
},
{
"cve": "CVE-2026-44290",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-05-13T16:03:39.540492+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2477100"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in protobufjs. This vulnerability allows an attacker to craft a protobuf schema or JSON descriptor that, when processed, can traverse through inherited object properties. This can lead to writing to global JavaScript constructors, corrupting process-wide built-in functionality. The most significant impact is a denial of service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "protobufjs: protobufjs: Denial of Service via crafted schema",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in protobufjs. A remote attacker could provide a specially crafted protobuf schema or JSON descriptor, which, when processed by an application using protobufjs, could corrupt process-wide built-in functionality, leading to a persistent denial of service. This impact is contingent on the application parsing untrusted schemas or descriptors.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64"
],
"known_not_affected": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44290"
},
{
"category": "external",
"summary": "RHBZ#2477100",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477100"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44290",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44290"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44290",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44290"
},
{
"category": "external",
"summary": "https://github.com/protobufjs/protobuf.js/security/advisories/GHSA-jvwf-75h9-cwgg",
"url": "https://github.com/protobufjs/protobuf.js/security/advisories/GHSA-jvwf-75h9-cwgg"
}
],
"release_date": "2026-05-13T14:41:15.312000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T19:53:07+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:48151"
},
{
"category": "workaround",
"details": "To mitigate this issue, Red Hat recommends configuring applications to avoid parsing or loading protobuf schemas or JSON descriptors from untrusted sources. If processing untrusted schemas is unavoidable, implement strict validation to reject option names containing unsafe property path components before loading them. Additionally, consider running schema processing in an isolated environment to limit the blast radius of potential corruption.",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "protobufjs: protobufjs: Denial of Service via crafted schema"
},
{
"cve": "CVE-2026-44291",
"cwe": {
"id": "CWE-94",
"name": "Improper Control of Generation of Code (\u0027Code Injection\u0027)"
},
"discovery_date": "2026-05-13T16:04:13.828371+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2477111"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in protobufjs, a library that compiles protobuf definitions into JavaScript functions. This prototype pollution vulnerability occurs when `Object.prototype` is polluted, allowing attacker-controlled properties to be resolved as valid protobuf type information. This can lead to attacker-controlled strings being emitted into generated JavaScript code, potentially resulting in arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "protobufjs: protobufjs: Arbitrary Code Execution via prototype pollution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in protobufjs, a JavaScript library, potentially enables arbitrary code execution when a separate prototype pollution vulnerability is present in an application. Exploitation requires an attacker to first pollute `Object.prototype` and then trigger protobufjs functionality that generates encode or decode code for affected types. Red Hat products utilizing `protobufjs` may be impacted if they are vulnerable to prototype pollution.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64"
],
"known_not_affected": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44291"
},
{
"category": "external",
"summary": "RHBZ#2477111",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477111"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44291",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44291"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44291",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44291"
},
{
"category": "external",
"summary": "https://github.com/protobufjs/protobuf.js/security/advisories/GHSA-75px-5xx7-5xc7",
"url": "https://github.com/protobufjs/protobuf.js/security/advisories/GHSA-75px-5xx7-5xc7"
}
],
"release_date": "2026-05-13T14:42:13.984000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T19:53:07+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:48151"
},
{
"category": "workaround",
"details": "Mitigation involves preventing prototype pollution within applications that utilize protobufjs. Administrators should ensure that untrusted input cannot pollute `Object.prototype` in the application or its dependencies. Additionally, isolating schema and message processing from untrusted application states can prevent attacker-controlled properties from being resolved as valid protobuf type information.",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "protobufjs: protobufjs: Arbitrary Code Execution via prototype pollution"
},
{
"cve": "CVE-2026-44292",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-05-13T16:03:03.431568+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2477088"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in protobufjs, a library that compiles protobuf definitions into JavaScript functions. This vulnerability allows an attacker to manipulate the internal structure of message objects. By providing a specially crafted input, an attacker could alter the prototype of individual message instances, potentially leading to unauthorized modification of data or unexpected application behavior, thereby impacting data integrity.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "protobufjs: protobufjs: Data integrity impact due to prototype pollution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important vulnerability where `protobufjs` can be exploited for prototype pollution on individual message instances. Applications that construct `protobufjs` messages from attacker-controlled plain objects, particularly those parsing untrusted JSON input, are susceptible to data integrity issues through manipulation of the object\u0027s prototype chain. This does not affect global prototypes but can lead to unexpected application behavior.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64"
],
"known_not_affected": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44292"
},
{
"category": "external",
"summary": "RHBZ#2477088",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477088"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44292",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44292"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44292",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44292"
},
{
"category": "external",
"summary": "https://github.com/protobufjs/protobuf.js/security/advisories/GHSA-fx83-v9x8-x52w",
"url": "https://github.com/protobufjs/protobuf.js/security/advisories/GHSA-fx83-v9x8-x52w"
}
],
"release_date": "2026-05-13T14:42:55.155000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T19:53:07+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:48151"
},
{
"category": "workaround",
"details": "To mitigate this issue, applications should avoid directly passing attacker-controlled plain objects to protobufjs message constructors. If processing untrusted JSON input, it is crucial to validate or sanitize object keys and explicitly reject any `__proto__` properties before constructing protobuf messages. This operational control prevents the manipulation of message instance prototypes.",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "protobufjs: protobufjs: Data integrity impact due to prototype pollution"
},
{
"cve": "CVE-2026-44893",
"cwe": {
"id": "CWE-805",
"name": "Buffer Access with Incorrect Length Value"
},
"discovery_date": "2026-06-12T15:01:18.066312+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488383"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in netty-codec-haproxy, a component of the Netty network application framework. A remote attacker can exploit this vulnerability by sending a specially crafted HAProxy message with a malformed PP2_TYPE_SSL TLV (Type-Length-Value) header. This can lead to an IndexOutOfBoundsException and prevent the release of retained memory, ultimately causing a Denial of Service (DoS) condition for the affected application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "netty-codec-haproxy: Netty-codec-haproxy: Denial of Service via malformed HAProxy message",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw is rated as Important because a remote, unauthenticated attacker can trigger a denial of service in applications utilizing `netty-codec-haproxy`. By sending a specially crafted HAProxy message with a malformed SSL TLV header, an attacker can cause an `IndexOutOfBoundsException`, leading to unreleased memory and resource exhaustion. This can render the affected application unresponsive.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
],
"known_not_affected": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44893"
},
{
"category": "external",
"summary": "RHBZ#2488383",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488383"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44893",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44893"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44893",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44893"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/releases/tag/netty-4.1.135.Final",
"url": "https://github.com/netty/netty/releases/tag/netty-4.1.135.Final"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/releases/tag/netty-4.2.15.Final",
"url": "https://github.com/netty/netty/releases/tag/netty-4.2.15.Final"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/security/advisories/GHSA-cc37-9q2j-3hfv",
"url": "https://github.com/netty/netty/security/advisories/GHSA-cc37-9q2j-3hfv"
}
],
"release_date": "2026-06-12T14:00:25.801000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T19:53:07+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:48151"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "netty-codec-haproxy: Netty-codec-haproxy: Denial of Service via malformed HAProxy message"
},
{
"cve": "CVE-2026-45416",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-06-12T15:01:45.671884+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488391"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Netty, a network application framework. A remote attacker can exploit this vulnerability by sending a crafted TLS (Transport Layer Security) ClientHello message. This can lead to an eager allocation of a large memory buffer, causing a Denial of Service (DoS) due to excessive memory consumption. The issue occurs in the `SslClientHelloHandler.decode()` method when processing the TLS handshake length.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "netty-handler: Netty: Denial of Service due to eager buffer allocation in TLS handshake",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in Netty is rated as Important. It allows a remote attacker to trigger a denial of service by sending a specially crafted TLS ClientHello message. The flaw arises from an eager, unbounded memory allocation during the TLS handshake, particularly when default configurations disable the maximum client hello length guard, leading to excessive resource consumption in affected Red Hat products utilizing Netty.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
],
"known_not_affected": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-45416"
},
{
"category": "external",
"summary": "RHBZ#2488391",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488391"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-45416",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-45416"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-45416",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45416"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/releases/tag/netty-4.1.135.Final",
"url": "https://github.com/netty/netty/releases/tag/netty-4.1.135.Final"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/releases/tag/netty-4.2.15.Final",
"url": "https://github.com/netty/netty/releases/tag/netty-4.2.15.Final"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/security/advisories/GHSA-x4gw-5cx5-pgmh",
"url": "https://github.com/netty/netty/security/advisories/GHSA-x4gw-5cx5-pgmh"
}
],
"release_date": "2026-06-12T14:10:05.585000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T19:53:07+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:48151"
},
{
"category": "workaround",
"details": "To mitigate this issue, configure applications utilizing Netty\u0027s `SslClientHelloHandler` to specify a non-zero value for the `maxClientHelloLength` parameter. This will enable the internal length validation, preventing the eager allocation of large memory buffers when processing crafted TLS ClientHello messages. Refer to your specific application\u0027s documentation for details on configuring Netty\u0027s TLS handler. A restart of the affected application or service is required for the configuration changes to take effect.",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "netty-handler: Netty: Denial of Service due to eager buffer allocation in TLS handshake"
},
{
"cve": "CVE-2026-45674",
"cwe": {
"id": "CWE-346",
"name": "Origin Validation Error"
},
"discovery_date": "2026-06-12T15:02:15.565158+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488400"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Netty\u0027s DnsResolveContext. This vulnerability allows a remote attacker to achieve information disclosure or data manipulation by crafting malicious DNS responses. The flaw occurs because the DnsResolveContext fails to validate the origin (bailiwick) of CNAME records in DNS responses, which could enable an attacker to redirect network traffic or intercept sensitive data from affected applications.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "netty-resolver-dns: Netty: Information disclosure and data manipulation due to improper CNAME record validation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important severity flaw in Netty\u0027s DnsResolveContext allows a remote attacker to achieve information disclosure or data manipulation. By crafting malicious DNS responses, an attacker could redirect network traffic or intercept sensitive data, impacting applications utilizing Netty for DNS resolution in Red Hat products.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
],
"known_not_affected": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-45674"
},
{
"category": "external",
"summary": "RHBZ#2488400",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488400"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-45674",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-45674"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-45674",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45674"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/releases/tag/netty-4.1.135.Final",
"url": "https://github.com/netty/netty/releases/tag/netty-4.1.135.Final"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/releases/tag/netty-4.2.15.Final",
"url": "https://github.com/netty/netty/releases/tag/netty-4.2.15.Final"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/security/advisories/GHSA-676x-f7gg-47vc",
"url": "https://github.com/netty/netty/security/advisories/GHSA-676x-f7gg-47vc"
}
],
"release_date": "2026-06-12T14:17:50.203000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T19:53:07+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:48151"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "netty-resolver-dns: Netty: Information disclosure and data manipulation due to improper CNAME record validation"
},
{
"cve": "CVE-2026-45736",
"cwe": {
"id": "CWE-824",
"name": "Access of Uninitialized Pointer"
},
"discovery_date": "2026-05-15T16:00:55.786944+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2477914"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in ws, an open source WebSocket client and server for Node.js. The `websocket.close()` implementation is vulnerable to uninitialized memory disclosure when a `TypedArray` is passed as the reason argument. This can lead to the disclosure of sensitive information from uninitialized memory.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "ws: ws: Uninitialized memory disclosure via `websocket.close()` with `TypedArray`",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in the `ws` WebSocket library for Node.js could lead to sensitive information disclosure. The flaw occurs when a `TypedArray` is specifically provided as the `reason` argument to the `websocket.close()` function, potentially exposing uninitialized memory. Red Hat products utilizing this library may be affected if their implementations allow for such a crafted `close()` call.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64"
],
"known_not_affected": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-45736"
},
{
"category": "external",
"summary": "RHBZ#2477914",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477914"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-45736",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-45736"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-45736",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45736"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/commit/c0327ec15a54d701eb6ccefaa8bef328cfc03086",
"url": "https://github.com/websockets/ws/commit/c0327ec15a54d701eb6ccefaa8bef328cfc03086"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/security/advisories/GHSA-58qx-3vcg-4xpx",
"url": "https://github.com/websockets/ws/security/advisories/GHSA-58qx-3vcg-4xpx"
}
],
"release_date": "2026-05-15T14:53:57.263000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T19:53:07+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:48151"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "ws: ws: Uninitialized memory disclosure via `websocket.close()` with `TypedArray`"
},
{
"cve": "CVE-2026-45740",
"cwe": {
"id": "CWE-776",
"name": "Improper Restriction of Recursive Entity References in DTDs (\u0027XML Entity Expansion\u0027)"
},
"discovery_date": "2026-05-13T16:02:41.729478+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2477081"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in protobufjs. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by providing a crafted JSON descriptor with deeply nested namespace definitions. This can lead to the exhaustion of the JavaScript call stack during descriptor loading, making the application unresponsive.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "protobufjs: protobufjs: Denial of Service via crafted JSON descriptors",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in protobufjs, which could allow a remote attacker to exhaust the JavaScript call stack by providing a specially crafted JSON descriptor with deeply nested namespace definitions. This vulnerability impacts Red Hat products that utilize protobufjs for processing protobuf definitions potentially leading to application unresponsiveness.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64"
],
"known_not_affected": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-45740"
},
{
"category": "external",
"summary": "RHBZ#2477081",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477081"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-45740",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-45740"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-45740",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-45740"
},
{
"category": "external",
"summary": "https://github.com/protobufjs/protobuf.js/security/advisories/GHSA-jggg-4jg4-v7c6",
"url": "https://github.com/protobufjs/protobuf.js/security/advisories/GHSA-jggg-4jg4-v7c6"
}
],
"release_date": "2026-05-13T14:46:02.689000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T19:53:07+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:48151"
},
{
"category": "workaround",
"details": "To mitigate this issue, avoid loading untrusted protobuf JSON descriptors in applications utilizing protobufjs. If untrusted descriptors must be processed, implement validation at an outer boundary to reject excessively nested structures. Alternatively, isolate the descriptor loading process in an environment that can be safely restarted in case of a denial of service.",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "protobufjs: protobufjs: Denial of Service via crafted JSON descriptors"
},
{
"cve": "CVE-2026-46384",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"discovery_date": "2026-05-29T21:02:03.061736+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2483482"
}
],
"notes": [
{
"category": "description",
"text": "An integer overflow flaw was found in Go Avro in decoding logic. Multiple decoder paths performs unsafe integer conversions and overflow-prone arithmetic operations on attacker-controlled values from Avro payloads. A remote attacker during Avro decoder operations could exploit this issue using specially crafted Avro data to consume excessive resources by bypassing memory limits and triggering crashes leading to a denial of service in affected applications.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/hamba/avro/v2: github.com/linkedin/goavro/v2: Integer Overflow in Avro Decoder",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability affects multiple Avro decoder code paths in affected Go Avro libraries. Red Hat Product Security has assessed this issue as an Important severity vulnerability.\n\nA remote unauthenticated attacker may supply specially crafted Avro payloads containing malformed or excessively large integer values that trigger unsafe integer truncation, arithmetic overflow conditions, or invalid memory allocation operations during decoding.\n\nThe vulnerability affects both 32-bit specific integer narrowing paths and several cross-platform arithmetic overflow conditions. There is only a denial-of-service impact but not confidentiality or integrity impact. Therefore, Red Hat assessed the impact as limited to Availability (A:H).",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64"
],
"known_not_affected": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-46384"
},
{
"category": "external",
"summary": "RHBZ#2483482",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2483482"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-46384",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46384"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46384",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46384"
},
{
"category": "external",
"summary": "https://github.com/iskorotkov/avro/security/advisories/GHSA-mc57-h6j3-3hmv",
"url": "https://github.com/iskorotkov/avro/security/advisories/GHSA-mc57-h6j3-3hmv"
}
],
"release_date": "2026-05-29T19:58:21.535000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T19:53:07+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:48151"
},
{
"category": "workaround",
"details": "Red Hat is not aware of a practical temporary workaround that fully mitigates this issue or meets Red Hat Product Security\u0027s standards for usability, deployment, applicability, or stability. Customers are advised to apply the relevant security updates when they become available.",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/hamba/avro/v2: github.com/linkedin/goavro/v2: Integer Overflow in Avro Decoder"
},
{
"cve": "CVE-2026-46385",
"cwe": {
"id": "CWE-835",
"name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
},
"discovery_date": "2026-05-29T21:01:37.087371+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2483475"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Avro array and map decoding logic in Go Avro. The decoder failed to properly stop processing after encountering read errors while iterating over attacker-controlled block-count values, leading to excessive resource consumption. A remote unauthenticated attacker could exploit this issue using specially crafted Avro payloads causing denial of service, where the affected system\u0027s CPU is consumed indefinitely until the process is terminated.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/hamba/avro/v2: github.com/linkedin/goavro/v2: CPU Exhaustion in Avro Decoder via Unbounded Block-Count Iteration",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability affects Avro array and map decoding functionality in affected Go Avro libraries. Red Hat Product Security has assessed this issue as an Important severity vulnerability.\n\nA remote unauthenticated attacker may supply specially crafted Avro payloads containing excessively large block-count values followed by truncated or invalid data. Because the decoder continued iterating after the underlying reader entered an error state, affected applications may consume excessive CPU resources for extended periods of time, potentially leading to denial of service.\n\nThe currently available analysis demonstrates CPU exhaustion and service disruption but does not demonstrate confidentiality or integrity impact. Therefore, Red Hat assessed the impact as limited to Availability (A:H).",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64"
],
"known_not_affected": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-46385"
},
{
"category": "external",
"summary": "RHBZ#2483475",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2483475"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-46385",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46385"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46385",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46385"
},
{
"category": "external",
"summary": "https://github.com/iskorotkov/avro/security/advisories/GHSA-w8j3-pq8g-8m7w",
"url": "https://github.com/iskorotkov/avro/security/advisories/GHSA-w8j3-pq8g-8m7w"
}
],
"release_date": "2026-05-29T19:58:59.667000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T19:53:07+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:48151"
},
{
"category": "workaround",
"details": "Red Hat is not aware of a practical temporary workaround that fully mitigates this issue or meets Red Hat Product Security\u0027s standards for usability, deployment, applicability, or stability. Customers are advised to apply the relevant security updates when they become available.",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/hamba/avro/v2: github.com/linkedin/goavro/v2: CPU Exhaustion in Avro Decoder via Unbounded Block-Count Iteration"
},
{
"cve": "CVE-2026-46595",
"cwe": {
"id": "CWE-303",
"name": "Incorrect Implementation of Authentication Algorithm"
},
"discovery_date": "2026-05-22T04:01:52.215134+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480689"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. Source-address validation can be skipped when an SSH server configuration uses an authentication callback type other than public key, allowing authorization bypass in misconfigured servers. This is a follow-on to incomplete coverage from the CVE-2024-45337 fix.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/crypto/ssh is vulnerable to authorization bypass when SSH server configurations rely on source-address validation alongside non-public-key authentication callbacks. An attacker with low privileges who can authenticate through such a callback path may bypass intended source-address restrictions and gain unauthorized SSH access. Red Hat impact sits in services built with affected x/crypto/ssh, including RHEL golang streams, hummingbird Go toolchains, RHACM/MCE agents, and OpenShift or Ceph components that embed Go SSH servers with mixed callback types.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64"
],
"known_not_affected": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-46595"
},
{
"category": "external",
"summary": "RHBZ#2480689",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480689"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-46595",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46595"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46595",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46595"
},
{
"category": "external",
"summary": "https://go.dev/cl/781642",
"url": "https://go.dev/cl/781642"
},
{
"category": "external",
"summary": "https://go.dev/issue/79570",
"url": "https://go.dev/issue/79570"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5023",
"url": "https://pkg.go.dev/vuln/GO-2026-5023"
}
],
"release_date": "2026-05-22T02:31:27.894000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T19:53:07+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:48151"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L",
"version": "3.1"
},
"products": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation"
},
{
"cve": "CVE-2026-46599",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-05-29T21:01:31.259450+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2483473"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `golang.org/x/image/tiff` package\u0027s TIFF decoder. This vulnerability occurs because the decoder does not properly limit the size of PackBits-compressed data. A remote attacker could exploit this by providing a maliciously-crafted image, leading to the decoder processing excessive amounts of data. This can result in a Denial of Service (DoS) due to resource exhaustion, even with a small input image.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/image/tiff: golang.org/x/image/tiff: Denial of Service via crafted PackBits-compressed data",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat rates this issue as Moderate with RH CVSS 6.5 (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H). A flaw was found in golang.org/x/image/tiff where the TIFF decoder does not limit the size of PackBits-compressed data. A maliciously crafted TIFF image with small declared dimensions can cause the decoder to process disproportionately large amounts of compressed data, leading to resource exhaustion. Exploitation requires user interaction (opening a crafted TIFF file). Most Red Hat products that bundle golang.org/x/image do not process untrusted TIFF input in their supported execution paths.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64"
],
"known_not_affected": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-46599"
},
{
"category": "external",
"summary": "RHBZ#2483473",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2483473"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-46599",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46599"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46599",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46599"
},
{
"category": "external",
"summary": "https://go.dev/cl/759960",
"url": "https://go.dev/cl/759960"
},
{
"category": "external",
"summary": "https://go.dev/issue/79577",
"url": "https://go.dev/issue/79577"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/uhYX90BlBvI",
"url": "https://groups.google.com/g/golang-announce/c/uhYX90BlBvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5032",
"url": "https://pkg.go.dev/vuln/GO-2026-5032"
}
],
"release_date": "2026-05-29T19:35:33.539000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T19:53:07+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:48151"
},
{
"category": "workaround",
"details": "Update affected Go applications to use golang.org/x/image version 0.41.0 or later, which limits the amount of compressed data the decoder will process. As a workaround, restrict accepted image formats at the application edge and reject TIFF input where it is not a required format. Applications that do not decode untrusted TIFF images are not affected.",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang.org/x/image/tiff: golang.org/x/image/tiff: Denial of Service via crafted PackBits-compressed data"
},
{
"cve": "CVE-2026-46625",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-06-10T22:01:17.685570+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2487740"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in JavaScript Cookie (js-cookie). This vulnerability allows a remote attacker to manipulate cookie attributes by exploiting a prototype pollution issue within the `assign()` helper function. When processing specially crafted JSON input, the flaw enables an attacker to hijack the prototype of a cookie\u0027s attribute object. This allows the attacker to set sensitive cookie attributes such as `domain`, `secure`, `samesite`, `expires`, and `path`, potentially leading to security bypasses or session manipulation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "js-cookie: JavaScript Cookie: Cookie attribute manipulation via prototype pollution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: This flaw in the `js-cookie` JavaScript library allows for cookie attribute manipulation via prototype pollution. When applications process untrusted JSON data with affected versions of `js-cookie`, an attacker could control sensitive cookie properties such as `domain` or `secure`, potentially leading to session fixation or other client-side security bypasses.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64"
],
"known_not_affected": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-46625"
},
{
"category": "external",
"summary": "RHBZ#2487740",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487740"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-46625",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46625"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46625",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46625"
},
{
"category": "external",
"summary": "https://github.com/js-cookie/js-cookie/commit/eb3c40e89731e99b8970faaf35ddad249c6c0020",
"url": "https://github.com/js-cookie/js-cookie/commit/eb3c40e89731e99b8970faaf35ddad249c6c0020"
},
{
"category": "external",
"summary": "https://github.com/js-cookie/js-cookie/releases/tag/v3.0.7",
"url": "https://github.com/js-cookie/js-cookie/releases/tag/v3.0.7"
},
{
"category": "external",
"summary": "https://github.com/js-cookie/js-cookie/security/advisories/GHSA-qjx8-664m-686j",
"url": "https://github.com/js-cookie/js-cookie/security/advisories/GHSA-qjx8-664m-686j"
}
],
"release_date": "2026-06-10T21:18:05.372000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T19:53:07+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:48151"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "js-cookie: JavaScript Cookie: Cookie attribute manipulation via prototype pollution"
},
{
"cve": "CVE-2026-47691",
"cwe": {
"id": "CWE-346",
"name": "Origin Validation Error"
},
"discovery_date": "2026-06-12T16:02:45.855856+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488439"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Netty\u0027s `DnsResolveContext`. An attacker controlling an authoritative name server for a subdomain can exploit this vulnerability by providing crafted NS records that are insufficiently validated. This allows the attacker to poison the DNS cache for parent domains, bypassing standard bailiwick rules. Consequently, future DNS resolutions for the affected parent domain will use the poisoned cache, potentially redirecting users to malicious servers and leading to information disclosure or integrity compromise.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "io.netty/netty-resolver-dns: Netty has Insufficient Bailiwick Validation for NS Records",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in Netty\u0027s DNS resolution component, `netty-resolver-dns`, allows for DNS cache poisoning. An attacker with control over an authoritative name server for a subdomain could exploit this vulnerability to inject malicious DNS records into the cache of parent domains. This could lead to redirection of network traffic, impacting the integrity and availability of services relying on DNS resolution within affected Red Hat products.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
],
"known_not_affected": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-47691"
},
{
"category": "external",
"summary": "RHBZ#2488439",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488439"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-47691",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47691"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-47691",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-47691"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/releases/tag/netty-4.1.135.Final",
"url": "https://github.com/netty/netty/releases/tag/netty-4.1.135.Final"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/releases/tag/netty-4.2.15.Final",
"url": "https://github.com/netty/netty/releases/tag/netty-4.2.15.Final"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/security/advisories/GHSA-5pvg-856g-cp85",
"url": "https://github.com/netty/netty/security/advisories/GHSA-5pvg-856g-cp85"
}
],
"release_date": "2026-06-12T14:33:16.595000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T19:53:07+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:48151"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "io.netty/netty-resolver-dns: Netty has Insufficient Bailiwick Validation for NS Records"
},
{
"cve": "CVE-2026-48043",
"cwe": {
"id": "CWE-772",
"name": "Missing Release of Resource after Effective Lifetime"
},
"discovery_date": "2026-06-12T16:02:56.371830+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488442"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in netty-codec-http2. A remote attacker could send specially crafted frames that cause a resource leak within the `DelegatingDecompressorFrameListener` class. This resource leak could lead to an Out Of Memory Error (OOME), potentially causing a Denial of Service (DoS) by taking down the entire Java Virtual Machine (JVM).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "netty-codec-http2: netty-codec-http2: Denial of Service due to resource leak",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in netty-codec-http2, affecting Red Hat products that utilize HTTP/2 communication with decompression. A remote attacker can exploit a resource leak in the `DelegatingDecompressorFrameListener` by sending malformed HTTP/2 frames, potentially leading to an Out Of Memory Error and causing the Java Virtual Machine to terminate. This could disrupt service availability in affected deployments.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
],
"known_not_affected": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-48043"
},
{
"category": "external",
"summary": "RHBZ#2488442",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488442"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-48043",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-48043"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-48043",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-48043"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/releases/tag/netty-4.1.135.Final",
"url": "https://github.com/netty/netty/releases/tag/netty-4.1.135.Final"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/releases/tag/netty-4.2.15.Final",
"url": "https://github.com/netty/netty/releases/tag/netty-4.2.15.Final"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/security/advisories/GHSA-c2gf-v879-257j",
"url": "https://github.com/netty/netty/security/advisories/GHSA-c2gf-v879-257j"
}
],
"release_date": "2026-06-12T14:39:52.498000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T19:53:07+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:48151"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "netty-codec-http2: netty-codec-http2: Denial of Service due to resource leak"
},
{
"cve": "CVE-2026-48059",
"cwe": {
"id": "CWE-1286",
"name": "Improper Validation of Syntactic Correctness of Input"
},
"discovery_date": "2026-06-12T16:02:40.032749+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488437"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Netty HAProxy PROXY protocol v2 codec. A remote attacker can exploit this vulnerability by sending a specially crafted HAProxy PROXY protocol v2 header with nested `PP2_TYPE_SSL` type-length-value (TLV) records. This can lead to a memory leak, causing the underlying cumulation buffer to remain permanently pinned and potentially resulting in a Denial of Service (DoS) due to resource exhaustion.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "netty-codec-haproxy: Netty HAProxy PROXY protocol v2 codec: Denial of Service via memory leak from crafted PROXY protocol headers",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in the Netty HAProxy PROXY protocol v2 codec, which can lead to a denial of service. A remote attacker can trigger a memory leak by sending a specially crafted HAProxy PROXY protocol v2 header with deeply nested SSL TLV records, causing resource exhaustion in affected Red Hat products that utilize this codec.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
],
"known_not_affected": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-48059"
},
{
"category": "external",
"summary": "RHBZ#2488437",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488437"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-48059",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-48059"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-48059",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-48059"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/releases/tag/netty-4.1.135.Final",
"url": "https://github.com/netty/netty/releases/tag/netty-4.1.135.Final"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/releases/tag/netty-4.2.15.Final",
"url": "https://github.com/netty/netty/releases/tag/netty-4.2.15.Final"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/security/advisories/GHSA-h2qv-fj59-j46j",
"url": "https://github.com/netty/netty/security/advisories/GHSA-h2qv-fj59-j46j"
}
],
"release_date": "2026-06-12T14:42:44.677000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T19:53:07+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:48151"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "netty-codec-haproxy: Netty HAProxy PROXY protocol v2 codec: Denial of Service via memory leak from crafted PROXY protocol headers"
},
{
"cve": "CVE-2026-48779",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-06-16T22:01:24.571224+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2489661"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in ws, an open source WebSocket client and server. A remote attacker can exploit this memory exhaustion vulnerability by sending a high volume of exceptionally small fragments and data chunks. This action forces the affected component to allocate and hold structural wrappers that consume excessive memory. Consequently, this leads to process termination and a denial of service (DoS) for the remote peer.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "ws: ws: Denial of Service via memory exhaustion from small WebSocket fragments",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the `ws` WebSocket library. A remote attacker can exploit this flaw by sending a high volume of small, fragmented data, leading to excessive memory consumption and subsequent process termination. This can result in service disruption for Red Hat products that utilize `ws` for WebSocket communication.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64"
],
"known_not_affected": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-48779"
},
{
"category": "external",
"summary": "RHBZ#2489661",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2489661"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-48779",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-48779"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-48779",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-48779"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/commit/86d3e8a5fb0246ed373860c5fbb0de88824a27f7",
"url": "https://github.com/websockets/ws/commit/86d3e8a5fb0246ed373860c5fbb0de88824a27f7"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/commit/b5372ac67bb97a773727b8e9f5035a8123556d53",
"url": "https://github.com/websockets/ws/commit/b5372ac67bb97a773727b8e9f5035a8123556d53"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/commit/bca91adf15677e47dbe4f959653452727be28b94",
"url": "https://github.com/websockets/ws/commit/bca91adf15677e47dbe4f959653452727be28b94"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/commit/fd36cd864fcdf62a08273a99e19a7d975401fee8",
"url": "https://github.com/websockets/ws/commit/fd36cd864fcdf62a08273a99e19a7d975401fee8"
},
{
"category": "external",
"summary": "https://github.com/websockets/ws/security/advisories/GHSA-96hv-2xvq-fx4p",
"url": "https://github.com/websockets/ws/security/advisories/GHSA-96hv-2xvq-fx4p"
}
],
"release_date": "2026-06-16T21:26:22.537000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T19:53:07+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:48151"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "ws: ws: Denial of Service via memory exhaustion from small WebSocket fragments"
},
{
"cve": "CVE-2026-50010",
"cwe": {
"id": "CWE-347",
"name": "Improper Verification of Cryptographic Signature"
},
"discovery_date": "2026-06-12T16:02:13.735675+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488429"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Netty, a network application framework. This vulnerability allows a remote attacker to bypass hostname verification due to improper handling of user-supplied trust managers. When a client is configured with a plain X.509 Trust Manager (X509TrustManager), it fails to perform necessary hostname checks, enabling an attacker to impersonate a legitimate server. This could lead to sensitive information disclosure or man-in-the-middle attacks.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "netty-handler: Netty: Improper trust manager handling leads to hostname verification bypass",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in Netty that affects Red Hat products utilizing the `netty-handler` component, including various Red Hat AMQ, Enterprise Application Platform, and OpenShift offerings. The vulnerability arises when a Netty client is configured with a plain X.509 Trust Manager, leading to a bypass of hostname verification. This oversight allows a remote attacker to perform man-in-the-middle attacks by impersonating a legitimate server, potentially compromising sensitive data.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
],
"known_not_affected": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-50010"
},
{
"category": "external",
"summary": "RHBZ#2488429",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488429"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-50010",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50010"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-50010",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-50010"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/releases/tag/netty-4.1.135.Final",
"url": "https://github.com/netty/netty/releases/tag/netty-4.1.135.Final"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/releases/tag/netty-4.2.15.Final",
"url": "https://github.com/netty/netty/releases/tag/netty-4.2.15.Final"
},
{
"category": "external",
"summary": "https://github.com/netty/netty/security/advisories/GHSA-c653-97m9-rcg9",
"url": "https://github.com/netty/netty/security/advisories/GHSA-c653-97m9-rcg9"
}
],
"release_date": "2026-06-12T14:50:43.151000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T19:53:07+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:48151"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "netty-handler: Netty: Improper trust manager handling leads to hostname verification bypass"
},
{
"cve": "CVE-2026-50559",
"cwe": {
"id": "CWE-551",
"name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization"
},
"discovery_date": "2026-06-09T10:55:32.426000+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2486959"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Quarkus. A remote attacker could bypass HTTP path-based authorization policies by using specially crafted encoded semicolons, slashes, or backslashes in HTTP requests. This could allow unauthorized access to protected static resources, leading to information disclosure.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "io.quarkus/quarkus-vertx-http: Quarkus: Authorization bypass in HTTP path-based policies via encoded characters",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in Quarkus where HTTP path-based authorization policies can be bypassed by a remote attacker. Specially crafted HTTP requests containing encoded semicolons, slashes, or backslashes can circumvent security controls, allowing unauthorized access to protected static resources and leading to information disclosure. This is critical in deployments where Quarkus applications serve sensitive static content and rely solely on path-based authorization.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
],
"known_not_affected": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-50559"
},
{
"category": "external",
"summary": "RHBZ#2486959",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2486959"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-50559",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-50559"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-50559",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-50559"
},
{
"category": "external",
"summary": "https://github.com/quarkusio/quarkus/security/advisories/GHSA-qcxp-gm7m-4j5v",
"url": "https://github.com/quarkusio/quarkus/security/advisories/GHSA-qcxp-gm7m-4j5v"
}
],
"release_date": "2026-06-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T19:53:07+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:48151"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "io.quarkus/quarkus-vertx-http: Quarkus: Authorization bypass in HTTP path-based policies via encoded characters"
},
{
"cve": "CVE-2026-54512",
"cwe": {
"id": "CWE-502",
"name": "Deserialization of Untrusted Data"
},
"discovery_date": "2026-06-23T22:01:49.821346+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2492015"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in jackson-databind. This vulnerability allows a remote attacker to bypass the PolymorphicTypeValidator (PTV) when polymorphic typing is enabled and a type identifier contains generic parameters. By crafting a malicious type ID, an attacker can place a denied class as a generic type parameter of an allowed container. This leads to the loading and instantiation of arbitrary classes, potentially resulting in arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "jackson-databind: jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in `jackson-databind` is rated as Important. While it describes a potential bypass of the PolymorphicTypeValidator leading to arbitrary code execution, exploitation requires an attacker to already possess administrative privileges, specifically the `manage-realm` role. This flaw does not enable privilege escalation, as it does not grant additional capabilities beyond those inherently available to an existing administrator.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
],
"known_not_affected": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-54512"
},
{
"category": "external",
"summary": "RHBZ#2492015",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2492015"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-54512",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-54512"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-54512",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-54512"
},
{
"category": "external",
"summary": "https://github.com/FasterXML/jackson-databind/commit/434d6c511de7fdd9872f29157aafb6162d12d8d5",
"url": "https://github.com/FasterXML/jackson-databind/commit/434d6c511de7fdd9872f29157aafb6162d12d8d5"
},
{
"category": "external",
"summary": "https://github.com/FasterXML/jackson-databind/issues/5988",
"url": "https://github.com/FasterXML/jackson-databind/issues/5988"
},
{
"category": "external",
"summary": "https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-j3rv-43j4-c7qm",
"url": "https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-j3rv-43j4-c7qm"
}
],
"release_date": "2026-06-23T20:56:36.646000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T19:53:07+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:48151"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "jackson-databind: jackson-databind: Arbitrary code execution via PolymorphicTypeValidator bypass"
},
{
"cve": "CVE-2026-54513",
"cwe": {
"id": "CWE-184",
"name": "Incomplete List of Disallowed Inputs"
},
"discovery_date": "2026-06-23T22:01:34.437620+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2492010"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in jackson-databind, a library used for processing data. This vulnerability allows an attacker to bypass security controls designed to validate data types. By sending specially crafted input, an attacker can force the system to process untrusted data, which may lead to the execution of malicious code. This could result in a complete compromise of the affected system, impacting its confidentiality, integrity, and availability.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "jackson-databind: Jackson-databind: Security bypass allows arbitrary code execution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in `jackson-databind` allows for a security bypass, enabling arbitrary code execution. The vulnerability arises from insufficient validation of array component types by `BasicPolymorphicTypeValidator`, which permits deserialization of unallowlisted types when processing untrusted input. This bypass of type validation can lead to a complete system compromise, affecting confidentiality, integrity, and availability in Red Hat products utilizing `jackson-databind` for data processing.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
],
"known_not_affected": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-54513"
},
{
"category": "external",
"summary": "RHBZ#2492010",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2492010"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-54513",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-54513"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-54513",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-54513"
},
{
"category": "external",
"summary": "https://github.com/FasterXML/jackson-databind/commit/01d1692c8d0ed03e51a0e3c4f8a9e6908e4931e5",
"url": "https://github.com/FasterXML/jackson-databind/commit/01d1692c8d0ed03e51a0e3c4f8a9e6908e4931e5"
},
{
"category": "external",
"summary": "https://github.com/FasterXML/jackson-databind/commit/24529da29fdf46ff94ca38de9ebf31cd188f5e8e",
"url": "https://github.com/FasterXML/jackson-databind/commit/24529da29fdf46ff94ca38de9ebf31cd188f5e8e"
},
{
"category": "external",
"summary": "https://github.com/FasterXML/jackson-databind/issues/5981",
"url": "https://github.com/FasterXML/jackson-databind/issues/5981"
},
{
"category": "external",
"summary": "https://github.com/FasterXML/jackson-databind/issues/5983",
"url": "https://github.com/FasterXML/jackson-databind/issues/5983"
},
{
"category": "external",
"summary": "https://github.com/FasterXML/jackson-databind/pull/5984",
"url": "https://github.com/FasterXML/jackson-databind/pull/5984"
},
{
"category": "external",
"summary": "https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-rmj7-2vxq-3g9f",
"url": "https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-rmj7-2vxq-3g9f"
}
],
"release_date": "2026-06-23T20:53:52.543000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-29T19:53:07+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:48151"
},
{
"category": "workaround",
"details": "Upgrade to version 2.18.8, 2.21.4, or 3.1.4 or later to address this vulnerability. If upgrading is not immediately possible, remove BasicPolymorphicTypeValidator.Builder.allowIfSubTypeIsArray() from the application\u2019s ObjectMapper configuration to eliminate the affected deserialization path. Rebuild and restart the application to apply the configuration change.\n\nAs an additional mitigation, disable polymorphic deserialization of untrusted data where possible by avoiding or removing default typing features such as activateDefaultTyping() or enableDefaultTyping(). When polymorphic deserialization is required, restrict allowed subtypes using a strict whitelist of trusted application packages and avoid broad or permissive type validation rules.",
"product_ids": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:56a21c05b7e6face6abbb05a1165d02640779cda3dc829e21237840e7cbac579_amd64",
"9Base-Cryostat-4:cryostat/cryostat-agent-init-rhel9@sha256:a9a7a4aff8961cea3f5a4cd5b3370c5f13105e9461f4fb0de70bcfa7b5facab1_arm64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:1dadbcd03e36720ff1bccd2fa77cdb7096e94322794f5ad3b8a511d08c0c30d3_amd64",
"9Base-Cryostat-4:cryostat/cryostat-db-rhel9@sha256:c1d344fddcfb7ff4ca4bc3a2ba88917c918879b8411aef0dc1c252e151e7df5f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:681a38cf4bd5f892dd76e634d754106d55c1dc78ed1a59c6003fd75d8e285101_arm64",
"9Base-Cryostat-4:cryostat/cryostat-grafana-dashboard-rhel9@sha256:ea227ce33a7d948d284c10f3f590ddfdc5058459a52b87c46ce882ac32a82a0f_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:c8915feceaaf08a0f3a05df8a61f44b8cfca2b23872219828a694cee047252a1_amd64",
"9Base-Cryostat-4:cryostat/cryostat-openshift-console-plugin-rhel9@sha256:f226753fa98b6492d7fffc0d669d1e003f5146c6214d3cbad96d0e3fd8f03663_arm64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:8aba4092e4ca595ee8df8f878754f698059c72d956022a1fe9e123d6ed7a7fa6_amd64",
"9Base-Cryostat-4:cryostat/cryostat-operator-bundle@sha256:f6f18f4a84f0a0381e5d03893d2968050537f7e20b08b61b54e922c4d9359292_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:a93361b346844f7ec4108a9658cb5fdd61c8963e90ee15e52fb213b1bb4d01c6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-reports-rhel9@sha256:b34a578607642a41719d12a902df7b4549606f37e773f6b20ed047b94c1739fe_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:98849e3734fbdeb2252a6d4863f999ebba93155c5c650e42711c76c82b6c6b45_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9-operator@sha256:bd3419415c6e31e2c5269b371d8097e69cad1ff84cea5b98b4892ffad05a501f_arm64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:c0b028b465d8e6f3b262659195c01deee13538c1e34a823bffb7624bbb5252fc_amd64",
"9Base-Cryostat-4:cryostat/cryostat-rhel9@sha256:cb6b42fb943940abf1e5c7c9f6050a7f950066497c89dd1306051697d7d207a6_arm64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:51b54fe0f6d011cd59eaa810f62d4d8b8dde5c0ebd75684cbc2eac104466c467_amd64",
"9Base-Cryostat-4:cryostat/cryostat-storage-rhel9@sha256:a6ab21c3097a8268cba87c6eeb1f512454da0c68410031c4160c7d7378920850_arm64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:2d9c9f1cd1ff98721ea2ee56e86319bc6bc403f9b444e0fbe802ecb89b589134_amd64",
"9Base-Cryostat-4:cryostat/jfr-datasource-rhel9@sha256:89b841456cfe46bf4d3b6bd32dea131c51241d2b1bd266d408eac78ed79c395a_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "jackson-databind: Jackson-databind: Security bypass allows arbitrary code execution"
}
]
}
RHSA-2026:48771
Vulnerability from csaf_redhat - Published: 2026-07-30 13:15 - Updated: 2026-08-22 02:17Summary
Red Hat Security Advisory: RHTAS 1.4.3 - CLI Stack Release
Severity
Important
Notes
Topic: The 1.4.3 release of the RHTAS CLIs.
For more details please visit the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4
Details: The RHTAS CLI Stack images for RHTAS 1.4.3
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in the `crypto/x509` package of `golang`. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name (SAN) entries. The certificate verification process, specifically the `VerifyHostname` function, incurs excessive computational overhead due to repeated string operations when processing these entries. This can lead to a significant performance degradation or unresponsiveness of systems validating such certificates.
7.5 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.
7.5 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.
7.5 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.
8.2 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote attacker could exploit this vulnerability when an SSH server authentication callback returned a PartialSuccessError with non-nil permissions. This flaw caused these permissions to be silently discarded, potentially bypassing certificate restrictions, such as a force-command, after a second authentication factor succeeded. This could lead to unauthorized command execution or access.
8.8 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during public key authentication. Successful exploitation could lead to a denial of service (DoS) due to prolonged CPU consumption during signature verification.
7.5 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection's read loop. This prevents the associated resources from being released, leading to a resource leak per connection. The consequence is a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh/agent. When a key was added to a remote agent, security restrictions, known as constraint extensions, were not properly processed during the request. This allowed these restrictions to be silently removed when keys were forwarded, leading to the unrestricted use of the key on the remote host. This vulnerability could enable an attacker to bypass intended security controls and perform unauthorized actions.
8.7 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh/agent. The NewKeyring() function, which creates an in-memory keyring, failed to enforce the ConfirmBeforeUse constraint on keys. This allowed keys configured to require user confirmation before use to perform signing operations without any prompt or indication to the user. Consequently, an attacker could potentially bypass intended security controls, leading to unauthorized cryptographic signing actions.
5.5 (Medium)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in golang.org/x/crypto/ssh. SSH servers configured to use CertChecker as a public key callback, without explicitly setting IsUserAuthority or IsHostAuthority, are vulnerable. A remote attacker can exploit this by presenting a specially crafted certificate, causing the server to panic and resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Prometheus, an open-source monitoring system. The `client_secret` field within the Azure Active Directory (AD) remote write OAuth configuration was incorrectly handled as a plain string instead of a secure Secret type. This misconfiguration allowed any user or process with access to the `/-/config` HTTP API endpoint to view the Azure OAuth client secret in plaintext. This vulnerability leads to information disclosure, potentially compromising the security of integrated Azure AD services.
7.5 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Threats
Impact
Important
A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.
7.5 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh/knownhosts. This vulnerability occurs because the system did not correctly check for the revocation status of a SignatureKey belonging to a Certificate Authority (CA). A remote attacker could potentially exploit this by presenting a revoked key, leading to the system accepting it as valid. This could allow an attacker to bypass security checks and potentially gain unauthorized access or spoof legitimate entities.
7.4 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. Source-address validation can be skipped when an SSH server configuration uses an authentication callback type other than public key, allowing authorization bypass in misconfigured servers. This is a follow-on to incomplete coverage from the CVE-2024-45337 fix.
7.1 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Threats
Impact
Important
References
126 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "The 1.4.3 release of the RHTAS CLIs.\nFor more details please visit the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4",
"title": "Topic"
},
{
"category": "general",
"text": "The RHTAS CLI Stack images for RHTAS 1.4.3",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:48771",
"url": "https://access.redhat.com/errata/RHSA-2026:48771"
},
{
"category": "external",
"summary": "https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4",
"url": "https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4"
},
{
"category": "external",
"summary": "https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"url": "https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-27145",
"url": "https://access.redhat.com/security/cve/CVE-2026-27145"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33811",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39820",
"url": "https://access.redhat.com/security/cve/CVE-2026-39820"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39821",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39828",
"url": "https://access.redhat.com/security/cve/CVE-2026-39828"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39829",
"url": "https://access.redhat.com/security/cve/CVE-2026-39829"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39830",
"url": "https://access.redhat.com/security/cve/CVE-2026-39830"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39832",
"url": "https://access.redhat.com/security/cve/CVE-2026-39832"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39833",
"url": "https://access.redhat.com/security/cve/CVE-2026-39833"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39835",
"url": "https://access.redhat.com/security/cve/CVE-2026-39835"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42151",
"url": "https://access.redhat.com/security/cve/CVE-2026-42151"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42499",
"url": "https://access.redhat.com/security/cve/CVE-2026-42499"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42508",
"url": "https://access.redhat.com/security/cve/CVE-2026-42508"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-46595",
"url": "https://access.redhat.com/security/cve/CVE-2026-46595"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_48771.json"
}
],
"title": "Red Hat Security Advisory: RHTAS 1.4.3 - CLI Stack Release",
"tracking": {
"current_release_date": "2026-08-22T02:17:02+00:00",
"generator": {
"date": "2026-08-22T02:17:02+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.16"
}
},
"id": "RHSA-2026:48771",
"initial_release_date": "2026-07-30T13:15:29+00:00",
"revision_history": [
{
"date": "2026-07-30T13:15:29+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-15T05:55:47+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-22T02:17:02+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Trusted Artifact Signer 1.4",
"product": {
"name": "Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:trusted_artifact_signer:1.4::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat Trusted Artifact Signer"
},
{
"branches": [
{
"category": "product_version",
"name": "conforma-cli-stack-v1-4@amd64_darwin",
"product": {
"name": "conforma-cli-stack-v1-4@amd64_darwin",
"product_id": "conforma-cli-stack-v1-4@amd64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/conforma-cli-stack-v1-4@1.4.3?filename=ec_darwin_amd64.tar.gz\u0026checksum=sha256:ba0319fcf14ce9af09aea60ac6ded7493fcc3805d657ab3cafcccce258cdbc24\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "cosign-cli-stack-v1-4@amd64_darwin",
"product": {
"name": "cosign-cli-stack-v1-4@amd64_darwin",
"product_id": "cosign-cli-stack-v1-4@amd64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/cosign-cli-stack-v1-4@1.4.3?filename=cosign_darwin_amd64.tar.gz\u0026checksum=sha256:89fe2f185b14bb9cf8cd5fdc2997b11b6a3d6e344c29d9bfb0c6678fc4e789d2\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"product": {
"name": "fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"product_id": "fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/fetch-tsa-certs-cli-stack-v1-4@1.4.3?filename=fetch_tsa_certs_darwin_amd64.tar.gz\u0026checksum=sha256:8e144593f7988904a732c9b2984b426a5a0656d054ae2bc4d990721814437c6a\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "gitsign-cli-stack-v1-4@amd64_darwin",
"product": {
"name": "gitsign-cli-stack-v1-4@amd64_darwin",
"product_id": "gitsign-cli-stack-v1-4@amd64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/gitsign-cli-stack-v1-4@1.4.3?filename=gitsign_cli_darwin_amd64.tar.gz\u0026checksum=sha256:ddbb1fe6762a246b031d1ad6684adb4fa6ebada079242d439c4d0bb564426d09\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "model-transparency-cli-stack-v1-4@amd64_darwin",
"product": {
"name": "model-transparency-cli-stack-v1-4@amd64_darwin",
"product_id": "model-transparency-cli-stack-v1-4@amd64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/model-transparency-cli-stack-v1-4@1.4.3?filename=model_transparency_cli_darwin_amd64.tar.gz\u0026checksum=sha256:56ecfb9f0a96bf7e8912d4c7b80ff7da1bb783eb68466b38dca7206434441acb\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "rekor-cli-stack-v1-4@amd64_darwin",
"product": {
"name": "rekor-cli-stack-v1-4@amd64_darwin",
"product_id": "rekor-cli-stack-v1-4@amd64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/rekor-cli-stack-v1-4@1.4.3?filename=rekor_cli_darwin_amd64.tar.gz\u0026checksum=sha256:55c0c62a6c54e8737b2cc6cbd37a1a49be5807da1097124ed5d39173731d610e\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "trillian-cli-stack-v1-4@amd64_darwin",
"product": {
"name": "trillian-cli-stack-v1-4@amd64_darwin",
"product_id": "trillian-cli-stack-v1-4@amd64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/trillian-cli-stack-v1-4@1.4.3?filename=updatetree_darwin_amd64.tar.gz\u0026checksum=sha256:8031a91d5d2fd81e62d364a3e1a65f3cab696640a334f36eaf0de04252771358\u0026download_url=https://developers.qa.redhat.com/products"
}
}
}
],
"category": "architecture",
"name": "amd64_darwin"
},
{
"branches": [
{
"category": "product_version",
"name": "conforma-cli-stack-v1-4@arm64_darwin",
"product": {
"name": "conforma-cli-stack-v1-4@arm64_darwin",
"product_id": "conforma-cli-stack-v1-4@arm64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/conforma-cli-stack-v1-4@1.4.3?filename=ec_darwin_arm64.tar.gz\u0026checksum=sha256:f94cb68da5dd2e397443863c8306ba903277dab26bfc8bf5ae1f3d9e7a7bccf3\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "cosign-cli-stack-v1-4@arm64_darwin",
"product": {
"name": "cosign-cli-stack-v1-4@arm64_darwin",
"product_id": "cosign-cli-stack-v1-4@arm64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/cosign-cli-stack-v1-4@1.4.3?filename=cosign_darwin_arm64.tar.gz\u0026checksum=sha256:be6c8f783a6606938968a547dddffe8c860f404a21d61d0757a7e173d9a87860\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"product": {
"name": "fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"product_id": "fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/fetch-tsa-certs-cli-stack-v1-4@1.4.3?filename=fetch_tsa_certs_darwin_arm64.tar.gz\u0026checksum=sha256:5cc43b5d7aaa3829c93f21d95b9c4a27f08043cfb2b5e5b6e50fd39566def195\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "gitsign-cli-stack-v1-4@arm64_darwin",
"product": {
"name": "gitsign-cli-stack-v1-4@arm64_darwin",
"product_id": "gitsign-cli-stack-v1-4@arm64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/gitsign-cli-stack-v1-4@1.4.3?filename=gitsign_cli_darwin_arm64.tar.gz\u0026checksum=sha256:0a0667c88d39d6208f298ba84440f55e3054bc35c3dffcf86039bda233a82f89\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "model-transparency-cli-stack-v1-4@arm64_darwin",
"product": {
"name": "model-transparency-cli-stack-v1-4@arm64_darwin",
"product_id": "model-transparency-cli-stack-v1-4@arm64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/model-transparency-cli-stack-v1-4@1.4.3?filename=model_transparency_cli_darwin_arm64.tar.gz\u0026checksum=sha256:eae6ee618548fc7febb3256c8941f1a0ec829b8476e66078efd84dadff97d51f\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "rekor-cli-stack-v1-4@arm64_darwin",
"product": {
"name": "rekor-cli-stack-v1-4@arm64_darwin",
"product_id": "rekor-cli-stack-v1-4@arm64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/rekor-cli-stack-v1-4@1.4.3?filename=rekor_cli_darwin_arm64.tar.gz\u0026checksum=sha256:2e5d2e6a36d03862962cc8cbe0609f8b090f1319187763c188e268e149a211a6\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "trillian-cli-stack-v1-4@arm64_darwin",
"product": {
"name": "trillian-cli-stack-v1-4@arm64_darwin",
"product_id": "trillian-cli-stack-v1-4@arm64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/trillian-cli-stack-v1-4@1.4.3?filename=updatetree_darwin_arm64.tar.gz\u0026checksum=sha256:b90f2ec19c2e8790a31d523aa75da5d31cc223ca207c25f720e0e893ceedcb2b\u0026download_url=https://developers.qa.redhat.com/products"
}
}
}
],
"category": "architecture",
"name": "arm64_darwin"
},
{
"branches": [
{
"category": "product_version",
"name": "conforma-cli-stack-v1-4@amd64",
"product": {
"name": "conforma-cli-stack-v1-4@amd64",
"product_id": "conforma-cli-stack-v1-4@amd64",
"product_identification_helper": {
"purl": "pkg:generic/conforma-cli-stack-v1-4@1.4.3?filename=ec_linux_amd64.tar.gz\u0026checksum=sha256:9d67d0f809f8576c253ac2437aa7a1eb90a65e2f28da1f5c7ee4c4fe568f2d55\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "cosign-cli-stack-v1-4@amd64",
"product": {
"name": "cosign-cli-stack-v1-4@amd64",
"product_id": "cosign-cli-stack-v1-4@amd64",
"product_identification_helper": {
"purl": "pkg:generic/cosign-cli-stack-v1-4@1.4.3?filename=cosign_linux_amd64.tar.gz\u0026checksum=sha256:4a65933981e9eeb85e0a1b270411b44bde2ce3d008201a894e2af6a5440fe25c\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "fetch-tsa-certs-cli-stack-v1-4@amd64",
"product": {
"name": "fetch-tsa-certs-cli-stack-v1-4@amd64",
"product_id": "fetch-tsa-certs-cli-stack-v1-4@amd64",
"product_identification_helper": {
"purl": "pkg:generic/fetch-tsa-certs-cli-stack-v1-4@1.4.3?filename=fetch_tsa_certs_linux_amd64.tar.gz\u0026checksum=sha256:dcddc1ae6817d0595ce76e65fd11a7de32706645410ff891e160a641084ad379\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "gitsign-cli-stack-v1-4@amd64",
"product": {
"name": "gitsign-cli-stack-v1-4@amd64",
"product_id": "gitsign-cli-stack-v1-4@amd64",
"product_identification_helper": {
"purl": "pkg:generic/gitsign-cli-stack-v1-4@1.4.3?filename=gitsign_cli_linux_amd64.tar.gz\u0026checksum=sha256:772835071524d4670c44f48e73166118f088baf567d2019532d45c492c15c6de\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "model-transparency-cli-stack-v1-4@amd64",
"product": {
"name": "model-transparency-cli-stack-v1-4@amd64",
"product_id": "model-transparency-cli-stack-v1-4@amd64",
"product_identification_helper": {
"purl": "pkg:generic/model-transparency-cli-stack-v1-4@1.4.3?filename=model_transparency_cli_pkcs11_linux_amd64.tar.gz\u0026checksum=sha256:031c0547d645585a70a99461f35ae3a77a1e30790336915c6000e7bedd971b6f\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "rekor-cli-stack-v1-4@amd64",
"product": {
"name": "rekor-cli-stack-v1-4@amd64",
"product_id": "rekor-cli-stack-v1-4@amd64",
"product_identification_helper": {
"purl": "pkg:generic/rekor-cli-stack-v1-4@1.4.3?filename=rekor_cli_linux_amd64.tar.gz\u0026checksum=sha256:7dec4aff3daf64908417ca9ff5fa3822b6c41dcc63c20b832f6eb7963374b8d8\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "trillian-cli-stack-v1-4@amd64",
"product": {
"name": "trillian-cli-stack-v1-4@amd64",
"product_id": "trillian-cli-stack-v1-4@amd64",
"product_identification_helper": {
"purl": "pkg:generic/trillian-cli-stack-v1-4@1.4.3?filename=updatetree_linux_amd64.tar.gz\u0026checksum=sha256:42cfc2fd535bccc2bc623c61f736483313bd0f662f21501f42e902349435d15a\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "tuftool-cli-stack-v1-4@amd64",
"product": {
"name": "tuftool-cli-stack-v1-4@amd64",
"product_id": "tuftool-cli-stack-v1-4@amd64",
"product_identification_helper": {
"purl": "pkg:generic/tuftool-cli-stack-v1-4@1.4.3?filename=tuftool_linux_amd64.tar.gz\u0026checksum=sha256:5b288bfedf17b2a07486f16457b8405d34cf4081f76534b678fa7cdcd413f82b\u0026download_url=https://developers.qa.redhat.com/products"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "conforma-cli-stack-v1-4@arm64",
"product": {
"name": "conforma-cli-stack-v1-4@arm64",
"product_id": "conforma-cli-stack-v1-4@arm64",
"product_identification_helper": {
"purl": "pkg:generic/conforma-cli-stack-v1-4@1.4.3?filename=ec_linux_arm64.tar.gz\u0026checksum=sha256:d22c843c2cb8dad6b525614cddf62d20e2536260ddb9e8215a68ba34950ecda9\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "cosign-cli-stack-v1-4@arm64",
"product": {
"name": "cosign-cli-stack-v1-4@arm64",
"product_id": "cosign-cli-stack-v1-4@arm64",
"product_identification_helper": {
"purl": "pkg:generic/cosign-cli-stack-v1-4@1.4.3?filename=cosign_linux_arm64.tar.gz\u0026checksum=sha256:e8ff0ea9f5104e81d9b57b297d65c41b760556d70c98e8e21a612beb242ff731\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "fetch-tsa-certs-cli-stack-v1-4@arm64",
"product": {
"name": "fetch-tsa-certs-cli-stack-v1-4@arm64",
"product_id": "fetch-tsa-certs-cli-stack-v1-4@arm64",
"product_identification_helper": {
"purl": "pkg:generic/fetch-tsa-certs-cli-stack-v1-4@1.4.3?filename=fetch_tsa_certs_linux_arm64.tar.gz\u0026checksum=sha256:b2418f32be12f4e93c6bf993daa11243fa40f3aeafd46422b1f3badc7ca4b532\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "gitsign-cli-stack-v1-4@arm64",
"product": {
"name": "gitsign-cli-stack-v1-4@arm64",
"product_id": "gitsign-cli-stack-v1-4@arm64",
"product_identification_helper": {
"purl": "pkg:generic/gitsign-cli-stack-v1-4@1.4.3?filename=gitsign_cli_linux_arm64.tar.gz\u0026checksum=sha256:b8f320b723bb722565a78b51783bc750c28b8cc02ef6a08698e14cdb7773f0a2\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "model-transparency-cli-stack-v1-4@arm64",
"product": {
"name": "model-transparency-cli-stack-v1-4@arm64",
"product_id": "model-transparency-cli-stack-v1-4@arm64",
"product_identification_helper": {
"purl": "pkg:generic/model-transparency-cli-stack-v1-4@1.4.3?filename=model_transparency_cli_pkcs11_linux_arm64.tar.gz\u0026checksum=sha256:63182bbf957c0e156e9f695776875f7a53c9a187ceb14caae2b03b0f2ce4df43\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "rekor-cli-stack-v1-4@arm64",
"product": {
"name": "rekor-cli-stack-v1-4@arm64",
"product_id": "rekor-cli-stack-v1-4@arm64",
"product_identification_helper": {
"purl": "pkg:generic/rekor-cli-stack-v1-4@1.4.3?filename=rekor_cli_linux_arm64.tar.gz\u0026checksum=sha256:aa13a0ea35439464cf241988216a8dd2c9e40ad846e243ea9dae9b49b4a11ec3\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "trillian-cli-stack-v1-4@arm64",
"product": {
"name": "trillian-cli-stack-v1-4@arm64",
"product_id": "trillian-cli-stack-v1-4@arm64",
"product_identification_helper": {
"purl": "pkg:generic/trillian-cli-stack-v1-4@1.4.3?filename=updatetree_linux_arm64.tar.gz\u0026checksum=sha256:91d5b66c1d54c0efd257e4902a6692f51edb93e155643b8e6b50dc275c1bb048\u0026download_url=https://developers.qa.redhat.com/products"
}
}
}
],
"category": "architecture",
"name": "arm64"
},
{
"branches": [
{
"category": "product_version",
"name": "conforma-cli-stack-v1-4@ppc64le",
"product": {
"name": "conforma-cli-stack-v1-4@ppc64le",
"product_id": "conforma-cli-stack-v1-4@ppc64le",
"product_identification_helper": {
"purl": "pkg:generic/conforma-cli-stack-v1-4@1.4.3?filename=ec_linux_ppc64le.tar.gz\u0026checksum=sha256:18bd60a0143e998178e02fa7673105259e48fcbe9c32207a3bdc0d66daab8f8a\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "cosign-cli-stack-v1-4@ppc64le",
"product": {
"name": "cosign-cli-stack-v1-4@ppc64le",
"product_id": "cosign-cli-stack-v1-4@ppc64le",
"product_identification_helper": {
"purl": "pkg:generic/cosign-cli-stack-v1-4@1.4.3?filename=cosign_linux_ppc64le.tar.gz\u0026checksum=sha256:179353a55fe09a3031ecb6d7ea83f692eeafa948fed8df93f5a6e08fd95f9729\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"product": {
"name": "fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"product_id": "fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"product_identification_helper": {
"purl": "pkg:generic/fetch-tsa-certs-cli-stack-v1-4@1.4.3?filename=fetch_tsa_certs_linux_ppc64le.tar.gz\u0026checksum=sha256:8f906cfb20e8593cfb65aba0f64900b9897eb5ca00ef76f99b08a2192af027be\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "gitsign-cli-stack-v1-4@ppc64le",
"product": {
"name": "gitsign-cli-stack-v1-4@ppc64le",
"product_id": "gitsign-cli-stack-v1-4@ppc64le",
"product_identification_helper": {
"purl": "pkg:generic/gitsign-cli-stack-v1-4@1.4.3?filename=gitsign_cli_linux_ppc64le.tar.gz\u0026checksum=sha256:a05ff4b720561e4eae766ecd8463f56d566819505ee6d0254b01c1920dcd8af8\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "model-transparency-cli-stack-v1-4@ppc64le",
"product": {
"name": "model-transparency-cli-stack-v1-4@ppc64le",
"product_id": "model-transparency-cli-stack-v1-4@ppc64le",
"product_identification_helper": {
"purl": "pkg:generic/model-transparency-cli-stack-v1-4@1.4.3?filename=model_transparency_cli_pkcs11_linux_ppc64le.tar.gz\u0026checksum=sha256:4fc781761f359570a87defdad0e8f9992e3b84dcdf59ff72fb0ea60df210de83\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "rekor-cli-stack-v1-4@ppc64le",
"product": {
"name": "rekor-cli-stack-v1-4@ppc64le",
"product_id": "rekor-cli-stack-v1-4@ppc64le",
"product_identification_helper": {
"purl": "pkg:generic/rekor-cli-stack-v1-4@1.4.3?filename=rekor_cli_linux_ppc64le.tar.gz\u0026checksum=sha256:b36ce275d5e6735e69c51233ebac81aac6dc3f48c03ebd03ea6e548e5c4f02d7\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "trillian-cli-stack-v1-4@ppc64le",
"product": {
"name": "trillian-cli-stack-v1-4@ppc64le",
"product_id": "trillian-cli-stack-v1-4@ppc64le",
"product_identification_helper": {
"purl": "pkg:generic/trillian-cli-stack-v1-4@1.4.3?filename=updatetree_linux_ppc64le.tar.gz\u0026checksum=sha256:43e2b76086c4c7b96304da59f98dbcaedb61e8f6dfa9ad40ee3c0a9dcc70b410\u0026download_url=https://developers.qa.redhat.com/products"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "conforma-cli-stack-v1-4@s390x",
"product": {
"name": "conforma-cli-stack-v1-4@s390x",
"product_id": "conforma-cli-stack-v1-4@s390x",
"product_identification_helper": {
"purl": "pkg:generic/conforma-cli-stack-v1-4@1.4.3?filename=ec_linux_s390x.tar.gz\u0026checksum=sha256:2fe947638045e305fc2ee1a648f55e2b0e3215fe590ab3eaa0d7ac9e79544889\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "cosign-cli-stack-v1-4@s390x",
"product": {
"name": "cosign-cli-stack-v1-4@s390x",
"product_id": "cosign-cli-stack-v1-4@s390x",
"product_identification_helper": {
"purl": "pkg:generic/cosign-cli-stack-v1-4@1.4.3?filename=cosign_linux_s390x.tar.gz\u0026checksum=sha256:3681aea2d65788ba26a64e31acbb96051458b8075b1482b4f338b7ba12a6b289\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "fetch-tsa-certs-cli-stack-v1-4@s390x",
"product": {
"name": "fetch-tsa-certs-cli-stack-v1-4@s390x",
"product_id": "fetch-tsa-certs-cli-stack-v1-4@s390x",
"product_identification_helper": {
"purl": "pkg:generic/fetch-tsa-certs-cli-stack-v1-4@1.4.3?filename=fetch_tsa_certs_linux_s390x.tar.gz\u0026checksum=sha256:69498733a8e39078a9a5627a2dcfced108c0ecc7965fd2d16c25fc6e2feb3858\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "gitsign-cli-stack-v1-4@s390x",
"product": {
"name": "gitsign-cli-stack-v1-4@s390x",
"product_id": "gitsign-cli-stack-v1-4@s390x",
"product_identification_helper": {
"purl": "pkg:generic/gitsign-cli-stack-v1-4@1.4.3?filename=gitsign_cli_linux_s390x.tar.gz\u0026checksum=sha256:3e7eb54efaeb4faa1c6b5c64d5017b5afd6290f5202695bf1220acf25a2ad026\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "model-transparency-cli-stack-v1-4@s390x",
"product": {
"name": "model-transparency-cli-stack-v1-4@s390x",
"product_id": "model-transparency-cli-stack-v1-4@s390x",
"product_identification_helper": {
"purl": "pkg:generic/model-transparency-cli-stack-v1-4@1.4.3?filename=model_transparency_cli_pkcs11_linux_s390x.tar.gz\u0026checksum=sha256:a41fc6dafc44a3ef9cc45b71dcc557a4f633a3b3e13ea7672a77dd6666cfa9c8\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "rekor-cli-stack-v1-4@s390x",
"product": {
"name": "rekor-cli-stack-v1-4@s390x",
"product_id": "rekor-cli-stack-v1-4@s390x",
"product_identification_helper": {
"purl": "pkg:generic/rekor-cli-stack-v1-4@1.4.3?filename=rekor_cli_linux_s390x.tar.gz\u0026checksum=sha256:2afe6927478749fd550190111781d8ad529294bf0a7570d7059f14eb9ced52be\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "trillian-cli-stack-v1-4@s390x",
"product": {
"name": "trillian-cli-stack-v1-4@s390x",
"product_id": "trillian-cli-stack-v1-4@s390x",
"product_identification_helper": {
"purl": "pkg:generic/trillian-cli-stack-v1-4@1.4.3?filename=updatetree_linux_s390x.tar.gz\u0026checksum=sha256:6fed7506d560d15237996996a02e37f0724e904c1fd4911e12b0896823881b36\u0026download_url=https://developers.qa.redhat.com/products"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "conforma-cli-stack-v1-4@amd64_windows",
"product": {
"name": "conforma-cli-stack-v1-4@amd64_windows",
"product_id": "conforma-cli-stack-v1-4@amd64_windows",
"product_identification_helper": {
"purl": "pkg:generic/conforma-cli-stack-v1-4@1.4.3?filename=ec_windows_amd64.zip\u0026checksum=sha256:aab8df482a3af57bed8d3d5e707bad83a4df4df78dfdd1abee09f8661cc77292\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "cosign-cli-stack-v1-4@amd64_windows",
"product": {
"name": "cosign-cli-stack-v1-4@amd64_windows",
"product_id": "cosign-cli-stack-v1-4@amd64_windows",
"product_identification_helper": {
"purl": "pkg:generic/cosign-cli-stack-v1-4@1.4.3?filename=cosign_windows_amd64.zip\u0026checksum=sha256:ed5e15b31fbf8730930ca0ca372efaea8e036703dc662b0a292ff632e8a538f5\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"product": {
"name": "fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"product_id": "fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"product_identification_helper": {
"purl": "pkg:generic/fetch-tsa-certs-cli-stack-v1-4@1.4.3?filename=fetch_tsa_certs_windows_amd64.zip\u0026checksum=sha256:8397786f43ddc3e272fe73880a2947eb56fb5120ce3442f7bd6b4f0ee4fb8d28\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "gitsign-cli-stack-v1-4@amd64_windows",
"product": {
"name": "gitsign-cli-stack-v1-4@amd64_windows",
"product_id": "gitsign-cli-stack-v1-4@amd64_windows",
"product_identification_helper": {
"purl": "pkg:generic/gitsign-cli-stack-v1-4@1.4.3?filename=gitsign_cli_windows_amd64.zip\u0026checksum=sha256:5163527dc7d890b6d05d66c353a67702d148c43c66aaec366dcf90e5307533dc\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "model-transparency-cli-stack-v1-4@amd64_windows",
"product": {
"name": "model-transparency-cli-stack-v1-4@amd64_windows",
"product_id": "model-transparency-cli-stack-v1-4@amd64_windows",
"product_identification_helper": {
"purl": "pkg:generic/model-transparency-cli-stack-v1-4@1.4.3?filename=model_transparency_cli_windows_amd64.exe.gz\u0026checksum=sha256:90f187d79b8dfd39cca62120fdabbfc685c9f99c7c7f16f80dbf296defef72e1\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "rekor-cli-stack-v1-4@amd64_windows",
"product": {
"name": "rekor-cli-stack-v1-4@amd64_windows",
"product_id": "rekor-cli-stack-v1-4@amd64_windows",
"product_identification_helper": {
"purl": "pkg:generic/rekor-cli-stack-v1-4@1.4.3?filename=rekor_cli_windows_amd64.zip\u0026checksum=sha256:8e1fe853c7a5594822fe91cdc62e37b2851e49bb70a89fa47c662dc6ae4ddc7c\u0026download_url=https://developers.qa.redhat.com/products"
}
}
},
{
"category": "product_version",
"name": "trillian-cli-stack-v1-4@amd64_windows",
"product": {
"name": "trillian-cli-stack-v1-4@amd64_windows",
"product_id": "trillian-cli-stack-v1-4@amd64_windows",
"product_identification_helper": {
"purl": "pkg:generic/trillian-cli-stack-v1-4@1.4.3?filename=updatetree_windows_amd64.zip\u0026checksum=sha256:8a2bd8d3f3d2e1624e6f1a4b862c3c0d8edd17663d0b3f4625a3a0b32232f8ca\u0026download_url=https://developers.qa.redhat.com/products"
}
}
}
],
"category": "architecture",
"name": "amd64_windows"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "conforma-cli-stack-v1-4@amd64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64"
},
"product_reference": "conforma-cli-stack-v1-4@amd64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "conforma-cli-stack-v1-4@amd64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin"
},
"product_reference": "conforma-cli-stack-v1-4@amd64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "conforma-cli-stack-v1-4@amd64_windows as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows"
},
"product_reference": "conforma-cli-stack-v1-4@amd64_windows",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "conforma-cli-stack-v1-4@arm64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64"
},
"product_reference": "conforma-cli-stack-v1-4@arm64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "conforma-cli-stack-v1-4@arm64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin"
},
"product_reference": "conforma-cli-stack-v1-4@arm64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "conforma-cli-stack-v1-4@ppc64le as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le"
},
"product_reference": "conforma-cli-stack-v1-4@ppc64le",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "conforma-cli-stack-v1-4@s390x as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
},
"product_reference": "conforma-cli-stack-v1-4@s390x",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cosign-cli-stack-v1-4@amd64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64"
},
"product_reference": "cosign-cli-stack-v1-4@amd64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cosign-cli-stack-v1-4@amd64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin"
},
"product_reference": "cosign-cli-stack-v1-4@amd64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cosign-cli-stack-v1-4@amd64_windows as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows"
},
"product_reference": "cosign-cli-stack-v1-4@amd64_windows",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cosign-cli-stack-v1-4@arm64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64"
},
"product_reference": "cosign-cli-stack-v1-4@arm64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cosign-cli-stack-v1-4@arm64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin"
},
"product_reference": "cosign-cli-stack-v1-4@arm64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cosign-cli-stack-v1-4@ppc64le as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le"
},
"product_reference": "cosign-cli-stack-v1-4@ppc64le",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cosign-cli-stack-v1-4@s390x as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x"
},
"product_reference": "cosign-cli-stack-v1-4@s390x",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fetch-tsa-certs-cli-stack-v1-4@amd64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64"
},
"product_reference": "fetch-tsa-certs-cli-stack-v1-4@amd64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fetch-tsa-certs-cli-stack-v1-4@amd64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin"
},
"product_reference": "fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fetch-tsa-certs-cli-stack-v1-4@amd64_windows as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows"
},
"product_reference": "fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fetch-tsa-certs-cli-stack-v1-4@arm64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64"
},
"product_reference": "fetch-tsa-certs-cli-stack-v1-4@arm64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fetch-tsa-certs-cli-stack-v1-4@arm64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin"
},
"product_reference": "fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fetch-tsa-certs-cli-stack-v1-4@ppc64le as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le"
},
"product_reference": "fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fetch-tsa-certs-cli-stack-v1-4@s390x as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x"
},
"product_reference": "fetch-tsa-certs-cli-stack-v1-4@s390x",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gitsign-cli-stack-v1-4@amd64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64"
},
"product_reference": "gitsign-cli-stack-v1-4@amd64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gitsign-cli-stack-v1-4@amd64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin"
},
"product_reference": "gitsign-cli-stack-v1-4@amd64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gitsign-cli-stack-v1-4@amd64_windows as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows"
},
"product_reference": "gitsign-cli-stack-v1-4@amd64_windows",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gitsign-cli-stack-v1-4@arm64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64"
},
"product_reference": "gitsign-cli-stack-v1-4@arm64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gitsign-cli-stack-v1-4@arm64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin"
},
"product_reference": "gitsign-cli-stack-v1-4@arm64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gitsign-cli-stack-v1-4@ppc64le as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le"
},
"product_reference": "gitsign-cli-stack-v1-4@ppc64le",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gitsign-cli-stack-v1-4@s390x as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x"
},
"product_reference": "gitsign-cli-stack-v1-4@s390x",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "model-transparency-cli-stack-v1-4@amd64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64"
},
"product_reference": "model-transparency-cli-stack-v1-4@amd64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "model-transparency-cli-stack-v1-4@amd64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin"
},
"product_reference": "model-transparency-cli-stack-v1-4@amd64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "model-transparency-cli-stack-v1-4@amd64_windows as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows"
},
"product_reference": "model-transparency-cli-stack-v1-4@amd64_windows",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "model-transparency-cli-stack-v1-4@arm64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64"
},
"product_reference": "model-transparency-cli-stack-v1-4@arm64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "model-transparency-cli-stack-v1-4@arm64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin"
},
"product_reference": "model-transparency-cli-stack-v1-4@arm64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "model-transparency-cli-stack-v1-4@ppc64le as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le"
},
"product_reference": "model-transparency-cli-stack-v1-4@ppc64le",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "model-transparency-cli-stack-v1-4@s390x as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x"
},
"product_reference": "model-transparency-cli-stack-v1-4@s390x",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rekor-cli-stack-v1-4@amd64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64"
},
"product_reference": "rekor-cli-stack-v1-4@amd64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rekor-cli-stack-v1-4@amd64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin"
},
"product_reference": "rekor-cli-stack-v1-4@amd64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rekor-cli-stack-v1-4@amd64_windows as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows"
},
"product_reference": "rekor-cli-stack-v1-4@amd64_windows",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rekor-cli-stack-v1-4@arm64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64"
},
"product_reference": "rekor-cli-stack-v1-4@arm64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rekor-cli-stack-v1-4@arm64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin"
},
"product_reference": "rekor-cli-stack-v1-4@arm64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rekor-cli-stack-v1-4@ppc64le as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le"
},
"product_reference": "rekor-cli-stack-v1-4@ppc64le",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rekor-cli-stack-v1-4@s390x as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x"
},
"product_reference": "rekor-cli-stack-v1-4@s390x",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "trillian-cli-stack-v1-4@amd64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64"
},
"product_reference": "trillian-cli-stack-v1-4@amd64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "trillian-cli-stack-v1-4@amd64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin"
},
"product_reference": "trillian-cli-stack-v1-4@amd64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "trillian-cli-stack-v1-4@amd64_windows as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows"
},
"product_reference": "trillian-cli-stack-v1-4@amd64_windows",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "trillian-cli-stack-v1-4@arm64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64"
},
"product_reference": "trillian-cli-stack-v1-4@arm64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "trillian-cli-stack-v1-4@arm64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin"
},
"product_reference": "trillian-cli-stack-v1-4@arm64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "trillian-cli-stack-v1-4@ppc64le as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le"
},
"product_reference": "trillian-cli-stack-v1-4@ppc64le",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "trillian-cli-stack-v1-4@s390x as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x"
},
"product_reference": "trillian-cli-stack-v1-4@s390x",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tuftool-cli-stack-v1-4@amd64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
},
"product_reference": "tuftool-cli-stack-v1-4@amd64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-27145",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-06-02T23:01:08.992540+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2484207"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `crypto/x509` package of `golang`. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name (SAN) entries. The certificate verification process, specifically the `VerifyHostname` function, incurs excessive computational overhead due to repeated string operations when processing these entries. This can lead to a significant performance degradation or unresponsiveness of systems validating such certificates.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in the Go standard library crypto/x509 package. When verifying a TLS certificate hostname, VerifyHostname processed each DNS Subject Alternative Name (SAN) entry in a loop and repeatedly split the candidate hostname on \".\" characters. For certificates with a very large DNS SAN list, CPU use could grow quadratically with the number of SAN entries and hostname labels. Because hostname verification runs before the certificate chain is built, this overhead can occur even when the certificate is not trusted.\n\nRed Hat rates this issue as Important. It affects Red Hat products that include the Go standard library crypto/x509 code from an affected Go toolchain version (before Go 1.25.11, or from Go 1.26.0 through Go 1.26.3). Applications and container images built with a fixed Go release (1.25.11 or later, or 1.26.4 or later) are not affected. Community distributions such as Fedora are also affected.\n\nUpstream fix: Go 1.25.11 and Go 1.26.4 (GO-2026-5037).",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27145"
},
{
"category": "external",
"summary": "RHBZ#2484207",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484207"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27145",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27145"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27145",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27145"
},
{
"category": "external",
"summary": "https://go.dev/cl/783621",
"url": "https://go.dev/cl/783621"
},
{
"category": "external",
"summary": "https://go.dev/issue/79694",
"url": "https://go.dev/issue/79694"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw",
"url": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5037",
"url": "https://pkg.go.dev/vuln/GO-2026-5037"
}
],
"release_date": "2026-06-02T22:01:36.954000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-30T13:15:29+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:48771"
},
{
"category": "workaround",
"details": "A flaw was found in the Go standard library crypto/x509 package. When verifying a TLS certificate hostname, VerifyHostname processed each DNS Subject Alternative Name (SAN) entry in a loop and repeatedly split the candidate hostname on \".\" characters. For certificates with a very large DNS SAN list, CPU use could grow quadratically with the number of SAN entries and hostname labels. Because hostname verification runs before the certificate chain is built, this overhead can occur even when the certificate is not trusted.\n\nRed Hat rates this issue as Important. It affects Red Hat products that include the Go standard library crypto/x509 code from an affected Go toolchain version (before Go 1.25.11, or from Go 1.26.0 through Go 1.26.3). Applications and container images built with a fixed Go release (1.25.11 or later, or 1.26.4 or later) are not affected. Community distributions such as Fedora are also affected.\n\nUpstream fix: Go 1.25.11 and Go 1.26.4 (GO-2026-5037).",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries"
},
{
"cve": "CVE-2026-33811",
"cwe": {
"id": "CWE-1341",
"name": "Multiple Releases of Same Resource or Handle"
},
"discovery_date": "2026-05-07T20:01:34.913869+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467822"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net` package, affecting applications configured to use the `cgo` DNS resolver. A remote attacker could trigger a double-free memory error by providing a very long CNAME response, leading to a crash of the vulnerable application and impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "RHBZ#2467822",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467822"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33811",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33811"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://go.dev/cl/767860",
"url": "https://go.dev/cl/767860"
},
{
"category": "external",
"summary": "https://go.dev/issue/78803",
"url": "https://go.dev/issue/78803"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4981",
"url": "https://pkg.go.dev/vuln/GO-2026-4981"
}
],
"release_date": "2026-05-07T19:41:19.285000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-30T13:15:29+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:48771"
},
{
"category": "workaround",
"details": "To mitigate this issue, applications can be configured to use the pure Go DNS resolver instead of the `cgo` DNS resolver. This can be achieved by setting the `GODEBUG` environment variable to `netdns=go`. For example, to run a Go application with this mitigation: `GODEBUG=netdns=go /path/to/your/go/application`. This change may require restarting affected applications or services to take effect. Users should verify that this change does not negatively impact DNS resolution for their specific application environment.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME"
},
{
"cve": "CVE-2026-39820",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-05-07T20:01:27.800929+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467820"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net/mail` package. Applications processing untrusted email inputs via `ParseAddress`, `ParseAddressList`, or `ParseDate` functions are susceptible to excessive resource consumption, which can lead to service unavailability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39820"
},
{
"category": "external",
"summary": "RHBZ#2467820",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467820"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39820",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39820"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820"
},
{
"category": "external",
"summary": "https://go.dev/cl/759940",
"url": "https://go.dev/cl/759940"
},
{
"category": "external",
"summary": "https://go.dev/issue/78566",
"url": "https://go.dev/issue/78566"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4986",
"url": "https://pkg.go.dev/vuln/GO-2026-4986"
}
],
"release_date": "2026-05-07T19:41:19.854000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-30T13:15:29+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:48771"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs"
},
{
"cve": "CVE-2026-39821",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-05-22T16:00:52.844126+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480756"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/net/idna is vulnerable to privilege escalation through incorrect Punycode label handling in ToASCII and ToUnicode. An attacker who can supply a Punycode hostname that passes an ASCII-only authorization check may have it normalized to a restricted ASCII name the application intended to block. Red Hat exposure is broad across products shipping the Go toolchain or bundling golang.org/x/net, including RHEL and RHEL-AI golang RPMs, hummingbird Go runtimes, OpenShift and ODF container builds, and Ceph/OpenShift components compiled against affected x/net versions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "RHBZ#2480756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39821",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39821"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://go.dev/cl/767220",
"url": "https://go.dev/cl/767220"
},
{
"category": "external",
"summary": "https://go.dev/issue/78760",
"url": "https://go.dev/issue/78760"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5026",
"url": "https://pkg.go.dev/vuln/GO-2026-5026"
}
],
"release_date": "2026-05-22T15:01:21.462000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-30T13:15:29+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:48771"
},
{
"category": "workaround",
"details": "Upgrade to a fixed golang.org/x/net release that includes the idna correction, via updated golang or dependent package rebuilds.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing"
},
{
"cve": "CVE-2026-39828",
"cwe": {
"id": "CWE-281",
"name": "Improper Preservation of Permissions"
},
"discovery_date": "2026-05-22T04:01:46.775641+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480687"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote attacker could exploit this vulnerability when an SSH server authentication callback returned a PartialSuccessError with non-nil permissions. This flaw caused these permissions to be silently discarded, potentially bypassing certificate restrictions, such as a force-command, after a second authentication factor succeeded. This could lead to unauthorized command execution or access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important security flaw in the `golang.org/x/crypto/ssh` library. When an SSH server utilizing this library is configured with specific authentication callbacks that return a `PartialSuccessError` with non-nil permissions, an attacker could bypass intended certificate restrictions, such as `force-command`. This bypass could lead to unauthorized command execution or access on affected Red Hat systems configured with multi-factor authentication and certificate-based access controls.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39828"
},
{
"category": "external",
"summary": "RHBZ#2480687",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480687"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39828",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39828"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39828",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39828"
},
{
"category": "external",
"summary": "https://go.dev/cl/781621",
"url": "https://go.dev/cl/781621"
},
{
"category": "external",
"summary": "https://go.dev/issue/79562",
"url": "https://go.dev/issue/79562"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5014",
"url": "https://pkg.go.dev/vuln/GO-2026-5014"
}
],
"release_date": "2026-05-22T02:31:26.883000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-30T13:15:29+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:48771"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions"
},
{
"cve": "CVE-2026-39829",
"cwe": {
"id": "CWE-1284",
"name": "Improper Validation of Specified Quantity in Input"
},
"discovery_date": "2026-05-22T04:01:30.092249+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480681"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during public key authentication. Successful exploitation could lead to a denial of service (DoS) due to prolonged CPU consumption during signature verification.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in golang.org/x/crypto/ssh is rated as Important. An unauthenticated remote attacker could trigger a denial of service by providing a specially crafted public key with excessively large parameters during SSH public key authentication. This could lead to prolonged CPU consumption on the server, impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39829"
},
{
"category": "external",
"summary": "RHBZ#2480681",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480681"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39829",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39829"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39829",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39829"
},
{
"category": "external",
"summary": "https://go.dev/cl/781641",
"url": "https://go.dev/cl/781641"
},
{
"category": "external",
"summary": "https://go.dev/cl/781661",
"url": "https://go.dev/cl/781661"
},
{
"category": "external",
"summary": "https://go.dev/issue/79565",
"url": "https://go.dev/issue/79565"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5018",
"url": "https://pkg.go.dev/vuln/GO-2026-5018"
}
],
"release_date": "2026-05-22T02:31:27.324000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-30T13:15:29+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:48771"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters"
},
{
"cve": "CVE-2026-39830",
"cwe": {
"id": "CWE-772",
"name": "Missing Release of Resource after Effective Lifetime"
},
"discovery_date": "2026-05-22T04:01:38.517202+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480684"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection\u0027s read loop. This prevents the associated resources from being released, leading to a resource leak per connection. The consequence is a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in `golang.org/x/crypto/ssh`. A remote, unauthenticated attacker can exploit this vulnerability by sending unsolicited global request responses to an affected SSH server, leading to resource exhaustion and a denial of service. The impact is considered Important due to the potential for unauthenticated remote disruption of services utilizing the vulnerable SSH library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39830"
},
{
"category": "external",
"summary": "RHBZ#2480684",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480684"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39830",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39830"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39830",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39830"
},
{
"category": "external",
"summary": "https://go.dev/cl/781640",
"url": "https://go.dev/cl/781640"
},
{
"category": "external",
"summary": "https://go.dev/cl/781664",
"url": "https://go.dev/cl/781664"
},
{
"category": "external",
"summary": "https://go.dev/issue/79564",
"url": "https://go.dev/issue/79564"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5017",
"url": "https://pkg.go.dev/vuln/GO-2026-5017"
}
],
"release_date": "2026-05-22T02:31:27.208000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-30T13:15:29+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:48771"
},
{
"category": "workaround",
"details": "To mitigate this denial of service vulnerability, restrict network access to any service that utilizes the `golang.org/x/crypto/ssh` library and is exposed to untrusted networks. Implement firewall rules to allow connections only from trusted hosts or networks. This action limits the ability of malicious peers to send unsolicited global request responses. A restart of the affected service may be necessary for the new network rules to be applied effectively.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses"
},
{
"cve": "CVE-2026-39832",
"cwe": {
"id": "CWE-281",
"name": "Improper Preservation of Permissions"
},
"discovery_date": "2026-05-22T04:01:41.402561+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480685"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh/agent. When a key was added to a remote agent, security restrictions, known as constraint extensions, were not properly processed during the request. This allowed these restrictions to be silently removed when keys were forwarded, leading to the unrestricted use of the key on the remote host. This vulnerability could enable an attacker to bypass intended security controls and perform unauthorized actions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in `golang.org/x/crypto/ssh/agent` allows for a security bypass when SSH keys with destination restrictions are forwarded via an SSH agent. This flaw could lead to unintended exposure of SSH keys, enabling an attacker to use the forwarded key without the specified restrictions on remote hosts. Red Hat products utilizing `golang.org/x/crypto/ssh/agent` for key forwarding may be affected if users rely on constraint extensions for limiting key usage.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39832"
},
{
"category": "external",
"summary": "RHBZ#2480685",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480685"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39832",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39832"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39832",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39832"
},
{
"category": "external",
"summary": "https://go.dev/cl/778642",
"url": "https://go.dev/cl/778642"
},
{
"category": "external",
"summary": "https://go.dev/issue/79435",
"url": "https://go.dev/issue/79435"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5006",
"url": "https://pkg.go.dev/vuln/GO-2026-5006"
}
],
"release_date": "2026-05-22T02:31:26.660000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-30T13:15:29+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:48771"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions"
},
{
"cve": "CVE-2026-39833",
"cwe": {
"id": "CWE-358",
"name": "Improperly Implemented Security Check for Standard"
},
"discovery_date": "2026-05-22T04:01:35.714593+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480683"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh/agent. The NewKeyring() function, which creates an in-memory keyring, failed to enforce the ConfirmBeforeUse constraint on keys. This allowed keys configured to require user confirmation before use to perform signing operations without any prompt or indication to the user. Consequently, an attacker could potentially bypass intended security controls, leading to unauthorized cryptographic signing actions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to unenforced key confirmation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat rates this issue as Moderate with RH CVSS 5.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N). A flaw was found in golang.org/x/crypto/ssh/agent where the in-memory keyring returned by NewKeyring() silently accepted SSH agent keys with the ConfirmBeforeUse constraint but did not enforce interactive confirmation before signing. Exploitation requires local access and low privileges on a system where an affected application uses NewKeyring() with ConfirmBeforeUse. Most Red Hat products that bundle golang.org/x/crypto do not use the ssh/agent ConfirmBeforeUse feature in their supported execution paths. The upstream CISA CVSS 9.1 assumes a broader network attack context that does not reflect Red Hat product deployment.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39833"
},
{
"category": "external",
"summary": "RHBZ#2480683",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480683"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39833",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39833"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39833",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39833"
},
{
"category": "external",
"summary": "https://go.dev/cl/778640",
"url": "https://go.dev/cl/778640"
},
{
"category": "external",
"summary": "https://go.dev/cl/778641",
"url": "https://go.dev/cl/778641"
},
{
"category": "external",
"summary": "https://go.dev/issue/79436",
"url": "https://go.dev/issue/79436"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5005",
"url": "https://pkg.go.dev/vuln/GO-2026-5005"
}
],
"release_date": "2026-05-22T02:31:26.294000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-30T13:15:29+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:48771"
},
{
"category": "workaround",
"details": "Update affected Go applications to use golang.org/x/crypto version 0.52.0 or later, which rejects unsupported ConfirmBeforeUse keys instead of silently ignoring the constraint. As a workaround, do not add keys with ConfirmBeforeUse to the in-memory keyring from golang.org/x/crypto/ssh/agent, or use an SSH agent implementation that correctly enforces confirm-before-use.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to unenforced key confirmation"
},
{
"cve": "CVE-2026-39835",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"discovery_date": "2026-05-22T04:01:27.279943+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480680"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. SSH servers configured to use CertChecker as a public key callback, without explicitly setting IsUserAuthority or IsHostAuthority, are vulnerable. A remote attacker can exploit this by presenting a specially crafted certificate, causing the server to panic and resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in `golang.org/x/crypto/ssh` affecting SSH servers that utilize `CertChecker` as a public key callback without explicitly configuring `IsUserAuthority` or `IsHostAuthority`. A remote, unauthenticated attacker can trigger a server panic by presenting a specially crafted certificate, leading to service disruption. Exploitation requires a specific, non-default configuration of the `CertChecker`.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39835"
},
{
"category": "external",
"summary": "RHBZ#2480680",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480680"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39835",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39835"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39835",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39835"
},
{
"category": "external",
"summary": "https://go.dev/cl/781660",
"url": "https://go.dev/cl/781660"
},
{
"category": "external",
"summary": "https://go.dev/issue/79563",
"url": "https://go.dev/issue/79563"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5015",
"url": "https://pkg.go.dev/vuln/GO-2026-5015"
}
],
"release_date": "2026-05-22T02:31:26.982000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-30T13:15:29+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:48771"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate"
},
{
"cve": "CVE-2026-42151",
"cwe": {
"id": "CWE-256",
"name": "Plaintext Storage of a Password"
},
"discovery_date": "2026-05-04T19:02:26.983660+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466507"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Prometheus, an open-source monitoring system. The `client_secret` field within the Azure Active Directory (AD) remote write OAuth configuration was incorrectly handled as a plain string instead of a secure Secret type. This misconfiguration allowed any user or process with access to the `/-/config` HTTP API endpoint to view the Azure OAuth client secret in plaintext. This vulnerability leads to information disclosure, potentially compromising the security of integrated Azure AD services.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/prometheus/prometheus: Prometheus: Information disclosure of Azure OAuth client secret via config API",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important information disclosure flaw in Prometheus affects instances configured to use Azure AD remote write with OAuth authentication. The client secret, intended to be a secure credential, is exposed in plaintext through the `/-/config` HTTP API endpoint. This could allow an attacker with access to this endpoint to retrieve the secret, potentially compromising integrated Azure AD services.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42151"
},
{
"category": "external",
"summary": "RHBZ#2466507",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466507"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42151",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42151"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42151",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42151"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18587",
"url": "https://github.com/prometheus/prometheus/pull/18587"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18590",
"url": "https://github.com/prometheus/prometheus/pull/18590"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/security/advisories/GHSA-wg65-39gg-5wfj",
"url": "https://github.com/prometheus/prometheus/security/advisories/GHSA-wg65-39gg-5wfj"
}
],
"release_date": "2026-05-04T18:12:16.917000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-30T13:15:29+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:48771"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/prometheus/prometheus: Prometheus: Information disclosure of Azure OAuth client secret via config API"
},
{
"cve": "CVE-2026-42499",
"cwe": {
"id": "CWE-1046",
"name": "Creation of Immutable Text Using String Concatenation"
},
"discovery_date": "2026-05-07T20:00:51.685602+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467809"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the `net/mail` package of the Go standard library. A remote attacker can exploit this flaw by sending specially crafted email addresses, leading to excessive resource consumption and a denial of service in Go applications that parse email addresses using the affected library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42499"
},
{
"category": "external",
"summary": "RHBZ#2467809",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467809"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42499",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42499"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499"
},
{
"category": "external",
"summary": "https://go.dev/cl/771520",
"url": "https://go.dev/cl/771520"
},
{
"category": "external",
"summary": "https://go.dev/issue/78987",
"url": "https://go.dev/issue/78987"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4977",
"url": "https://pkg.go.dev/vuln/GO-2026-4977"
}
],
"release_date": "2026-05-07T19:41:18.615000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-30T13:15:29+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:48771"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing"
},
{
"cve": "CVE-2026-42508",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-05-22T04:01:49.515058+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480688"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh/knownhosts. This vulnerability occurs because the system did not correctly check for the revocation status of a SignatureKey belonging to a Certificate Authority (CA). A remote attacker could potentially exploit this by presenting a revoked key, leading to the system accepting it as valid. This could allow an attacker to bypass security checks and potentially gain unauthorized access or spoof legitimate entities.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: A flaw in `golang.org/x/crypto/ssh/knownhosts` allows a remote attacker to bypass security checks. This vulnerability arises because the system fails to properly verify the revocation status of a Certificate Authority (CA) `SignatureKey`. In Red Hat environments, this could enable an attacker to present a revoked key, leading to its acceptance as valid and potentially granting unauthorized access or facilitating the spoofing of legitimate entities.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42508"
},
{
"category": "external",
"summary": "RHBZ#2480688",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480688"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42508",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42508"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42508",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42508"
},
{
"category": "external",
"summary": "https://go.dev/cl/781220",
"url": "https://go.dev/cl/781220"
},
{
"category": "external",
"summary": "https://go.dev/issue/79568",
"url": "https://go.dev/issue/79568"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5021",
"url": "https://pkg.go.dev/vuln/GO-2026-5021"
}
],
"release_date": "2026-05-22T02:31:27.644000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-30T13:15:29+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:48771"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey"
},
{
"cve": "CVE-2026-46595",
"cwe": {
"id": "CWE-303",
"name": "Incorrect Implementation of Authentication Algorithm"
},
"discovery_date": "2026-05-22T04:01:52.215134+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480689"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. Source-address validation can be skipped when an SSH server configuration uses an authentication callback type other than public key, allowing authorization bypass in misconfigured servers. This is a follow-on to incomplete coverage from the CVE-2024-45337 fix.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/crypto/ssh is vulnerable to authorization bypass when SSH server configurations rely on source-address validation alongside non-public-key authentication callbacks. An attacker with low privileges who can authenticate through such a callback path may bypass intended source-address restrictions and gain unauthorized SSH access. Red Hat impact sits in services built with affected x/crypto/ssh, including RHEL golang streams, hummingbird Go toolchains, RHACM/MCE agents, and OpenShift or Ceph components that embed Go SSH servers with mixed callback types.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-46595"
},
{
"category": "external",
"summary": "RHBZ#2480689",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480689"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-46595",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46595"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46595",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46595"
},
{
"category": "external",
"summary": "https://go.dev/cl/781642",
"url": "https://go.dev/cl/781642"
},
{
"category": "external",
"summary": "https://go.dev/issue/79570",
"url": "https://go.dev/issue/79570"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5023",
"url": "https://pkg.go.dev/vuln/GO-2026-5023"
}
],
"release_date": "2026-05-22T02:31:27.894000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-07-30T13:15:29+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:48771"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation"
}
]
}
RHSA-2026:49767
Vulnerability from csaf_redhat - Published: 2026-08-03 18:13 - Updated: 2026-08-22 02:17Summary
Red Hat Security Advisory: RHTAS 1.4.3 - CLI Stack Release
Severity
Important
Notes
Topic: The 1.4.3 release of the RHTAS CLIs.
For more details please visit the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4
Details: The RHTAS CLI Stack images for RHTAS 1.4.3
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in the `crypto/x509` package of `golang`. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name (SAN) entries. The certificate verification process, specifically the `VerifyHostname` function, incurs excessive computational overhead due to repeated string operations when processing these entries. This can lead to a significant performance degradation or unresponsiveness of systems validating such certificates.
7.5 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.
7.5 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.
7.5 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.
8.2 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote attacker could exploit this vulnerability when an SSH server authentication callback returned a PartialSuccessError with non-nil permissions. This flaw caused these permissions to be silently discarded, potentially bypassing certificate restrictions, such as a force-command, after a second authentication factor succeeded. This could lead to unauthorized command execution or access.
8.8 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during public key authentication. Successful exploitation could lead to a denial of service (DoS) due to prolonged CPU consumption during signature verification.
7.5 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection's read loop. This prevents the associated resources from being released, leading to a resource leak per connection. The consequence is a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh/agent. When a key was added to a remote agent, security restrictions, known as constraint extensions, were not properly processed during the request. This allowed these restrictions to be silently removed when keys were forwarded, leading to the unrestricted use of the key on the remote host. This vulnerability could enable an attacker to bypass intended security controls and perform unauthorized actions.
8.7 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh/agent. The NewKeyring() function, which creates an in-memory keyring, failed to enforce the ConfirmBeforeUse constraint on keys. This allowed keys configured to require user confirmation before use to perform signing operations without any prompt or indication to the user. Consequently, an attacker could potentially bypass intended security controls, leading to unauthorized cryptographic signing actions.
5.5 (Medium)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in golang.org/x/crypto/ssh. SSH servers configured to use CertChecker as a public key callback, without explicitly setting IsUserAuthority or IsHostAuthority, are vulnerable. A remote attacker can exploit this by presenting a specially crafted certificate, causing the server to panic and resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Prometheus, an open-source monitoring system. The `client_secret` field within the Azure Active Directory (AD) remote write OAuth configuration was incorrectly handled as a plain string instead of a secure Secret type. This misconfiguration allowed any user or process with access to the `/-/config` HTTP API endpoint to view the Azure OAuth client secret in plaintext. This vulnerability leads to information disclosure, potentially compromising the security of integrated Azure AD services.
7.5 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Threats
Impact
Important
A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.
7.5 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh/knownhosts. This vulnerability occurs because the system did not correctly check for the revocation status of a SignatureKey belonging to a Certificate Authority (CA). A remote attacker could potentially exploit this by presenting a revoked key, leading to the system accepting it as valid. This could allow an attacker to bypass security checks and potentially gain unauthorized access or spoof legitimate entities.
7.4 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. Source-address validation can be skipped when an SSH server configuration uses an authentication callback type other than public key, allowing authorization bypass in misconfigured servers. This is a follow-on to incomplete coverage from the CVE-2024-45337 fix.
7.1 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Threats
Impact
Important
References
126 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "The 1.4.3 release of the RHTAS CLIs.\nFor more details please visit the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4",
"title": "Topic"
},
{
"category": "general",
"text": "The RHTAS CLI Stack images for RHTAS 1.4.3",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:49767",
"url": "https://access.redhat.com/errata/RHSA-2026:49767"
},
{
"category": "external",
"summary": "https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4",
"url": "https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4"
},
{
"category": "external",
"summary": "https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"url": "https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-27145",
"url": "https://access.redhat.com/security/cve/CVE-2026-27145"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33811",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39820",
"url": "https://access.redhat.com/security/cve/CVE-2026-39820"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39821",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39828",
"url": "https://access.redhat.com/security/cve/CVE-2026-39828"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39829",
"url": "https://access.redhat.com/security/cve/CVE-2026-39829"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39830",
"url": "https://access.redhat.com/security/cve/CVE-2026-39830"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39832",
"url": "https://access.redhat.com/security/cve/CVE-2026-39832"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39833",
"url": "https://access.redhat.com/security/cve/CVE-2026-39833"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39835",
"url": "https://access.redhat.com/security/cve/CVE-2026-39835"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42151",
"url": "https://access.redhat.com/security/cve/CVE-2026-42151"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42499",
"url": "https://access.redhat.com/security/cve/CVE-2026-42499"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42508",
"url": "https://access.redhat.com/security/cve/CVE-2026-42508"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-46595",
"url": "https://access.redhat.com/security/cve/CVE-2026-46595"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_49767.json"
}
],
"title": "Red Hat Security Advisory: RHTAS 1.4.3 - CLI Stack Release",
"tracking": {
"current_release_date": "2026-08-22T02:17:04+00:00",
"generator": {
"date": "2026-08-22T02:17:04+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.16"
}
},
"id": "RHSA-2026:49767",
"initial_release_date": "2026-08-03T18:13:05+00:00",
"revision_history": [
{
"date": "2026-08-03T18:13:05+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-15T05:55:47+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-22T02:17:04+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Trusted Artifact Signer 1.4",
"product": {
"name": "Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:trusted_artifact_signer:1.4::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat Trusted Artifact Signer"
},
{
"branches": [
{
"category": "product_version",
"name": "conforma-cli-stack-v1-4@amd64_darwin",
"product": {
"name": "conforma-cli-stack-v1-4@amd64_darwin",
"product_id": "conforma-cli-stack-v1-4@amd64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/conforma-cli-stack-v1-4@1.4.3?filename=ec_darwin_amd64.tar.gz\u0026checksum=sha256%3Ae75dc3d7df27fa5532642887c6a2989a5997507da4ff6677cc09b32b7d4f0cd0\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "cosign-cli-stack-v1-4@amd64_darwin",
"product": {
"name": "cosign-cli-stack-v1-4@amd64_darwin",
"product_id": "cosign-cli-stack-v1-4@amd64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/cosign-cli-stack-v1-4@1.4.3?filename=cosign_darwin_amd64.tar.gz\u0026checksum=sha256%3Ad6cc0d62c9f820ee8856ef2cf766cb981c0a898c1bc2e5da541298b92fe9f48d\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"product": {
"name": "fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"product_id": "fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/fetch-tsa-certs-cli-stack-v1-4@1.4.3?filename=fetch_tsa_certs_darwin_amd64.tar.gz\u0026checksum=sha256%3A4dc2de8a2c12c9499f0101148b7864680b4c74bdf4fb44c02d2a7966e63b978d\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "gitsign-cli-stack-v1-4@amd64_darwin",
"product": {
"name": "gitsign-cli-stack-v1-4@amd64_darwin",
"product_id": "gitsign-cli-stack-v1-4@amd64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/gitsign-cli-stack-v1-4@1.4.3?filename=gitsign_cli_darwin_amd64.tar.gz\u0026checksum=sha256%3A6b8a2b930fbd3695d0555585c412594b30b2506d9f9acfb6b6339c742a91a6ba\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "model-transparency-cli-stack-v1-4@amd64_darwin",
"product": {
"name": "model-transparency-cli-stack-v1-4@amd64_darwin",
"product_id": "model-transparency-cli-stack-v1-4@amd64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/model-transparency-cli-stack-v1-4@1.4.3?filename=model_transparency_cli_darwin_amd64.tar.gz\u0026checksum=sha256%3A42582688ba3a4c6d1eebba9ffbc385f2f606ec376bac977395c6c31e9d27f575\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "rekor-cli-stack-v1-4@amd64_darwin",
"product": {
"name": "rekor-cli-stack-v1-4@amd64_darwin",
"product_id": "rekor-cli-stack-v1-4@amd64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/rekor-cli-stack-v1-4@1.4.3?filename=rekor_cli_darwin_amd64.tar.gz\u0026checksum=sha256%3Aca3361e621846d985e2b04e77138097cd679402c88ad5ee7aa281cc33e89a7fe\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "trillian-cli-stack-v1-4@amd64_darwin",
"product": {
"name": "trillian-cli-stack-v1-4@amd64_darwin",
"product_id": "trillian-cli-stack-v1-4@amd64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/trillian-cli-stack-v1-4@1.4.3?filename=createtree_darwin_amd64.tar.gz\u0026checksum=sha256%3Aac86c9f4eadfea26a37e04b62cd79b1fb4a51eccfaac17f2e1f8fefa1d3609e8\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
}
],
"category": "architecture",
"name": "amd64_darwin"
},
{
"branches": [
{
"category": "product_version",
"name": "conforma-cli-stack-v1-4@arm64_darwin",
"product": {
"name": "conforma-cli-stack-v1-4@arm64_darwin",
"product_id": "conforma-cli-stack-v1-4@arm64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/conforma-cli-stack-v1-4@1.4.3?filename=ec_darwin_arm64.tar.gz\u0026checksum=sha256%3Adf7bf266fd09164656e6e0b16935f1028dcd930d02868df452f76f073a766128\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "cosign-cli-stack-v1-4@arm64_darwin",
"product": {
"name": "cosign-cli-stack-v1-4@arm64_darwin",
"product_id": "cosign-cli-stack-v1-4@arm64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/cosign-cli-stack-v1-4@1.4.3?filename=cosign_darwin_arm64.tar.gz\u0026checksum=sha256%3Ac89bf59960c1cdc08f91266782e8261c9ec14f2e9a6a54ba2702febb6f3edcf8\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"product": {
"name": "fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"product_id": "fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/fetch-tsa-certs-cli-stack-v1-4@1.4.3?filename=fetch_tsa_certs_darwin_arm64.tar.gz\u0026checksum=sha256%3Adfed759f50eaf9ca63716d1517ec14ab32fe83f908a49432bee34b2b7fa12f74\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "gitsign-cli-stack-v1-4@arm64_darwin",
"product": {
"name": "gitsign-cli-stack-v1-4@arm64_darwin",
"product_id": "gitsign-cli-stack-v1-4@arm64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/gitsign-cli-stack-v1-4@1.4.3?filename=gitsign_cli_darwin_arm64.tar.gz\u0026checksum=sha256%3Ab5c0783747fb834466f4e9f0e92ebd3dff94181d2b917f030ebd0b6c28f29c46\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "model-transparency-cli-stack-v1-4@arm64_darwin",
"product": {
"name": "model-transparency-cli-stack-v1-4@arm64_darwin",
"product_id": "model-transparency-cli-stack-v1-4@arm64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/model-transparency-cli-stack-v1-4@1.4.3?filename=model_transparency_cli_darwin_arm64.tar.gz\u0026checksum=sha256%3A2f2a611fcdb377b951461c5d9bdd588cba5d2b276f7f0def5ff10c51ff7c6211\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "rekor-cli-stack-v1-4@arm64_darwin",
"product": {
"name": "rekor-cli-stack-v1-4@arm64_darwin",
"product_id": "rekor-cli-stack-v1-4@arm64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/rekor-cli-stack-v1-4@1.4.3?filename=rekor_cli_darwin_arm64.tar.gz\u0026checksum=sha256%3A96e5b122199bfc8972d090d3b62b6a1d3b739b3b2e7cb5afb00ffaff07484bbd\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "trillian-cli-stack-v1-4@arm64_darwin",
"product": {
"name": "trillian-cli-stack-v1-4@arm64_darwin",
"product_id": "trillian-cli-stack-v1-4@arm64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/trillian-cli-stack-v1-4@1.4.3?filename=createtree_darwin_arm64.tar.gz\u0026checksum=sha256%3A51c236fb7321309645f0363e712a7e208746167b52634d4591ca7afc3ebe35f4\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
}
],
"category": "architecture",
"name": "arm64_darwin"
},
{
"branches": [
{
"category": "product_version",
"name": "conforma-cli-stack-v1-4@amd64",
"product": {
"name": "conforma-cli-stack-v1-4@amd64",
"product_id": "conforma-cli-stack-v1-4@amd64",
"product_identification_helper": {
"purl": "pkg:generic/conforma-cli-stack-v1-4@1.4.3?filename=ec_linux_amd64.tar.gz\u0026checksum=sha256%3A849c17c815b098e234b5d2e7de8a594d74aeceef9b275b7290a6c39cc87606da\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "cosign-cli-stack-v1-4@amd64",
"product": {
"name": "cosign-cli-stack-v1-4@amd64",
"product_id": "cosign-cli-stack-v1-4@amd64",
"product_identification_helper": {
"purl": "pkg:generic/cosign-cli-stack-v1-4@1.4.3?filename=cosign_linux_amd64.tar.gz\u0026checksum=sha256%3A40448bcf19dd95ac19281503edad38837ee754210b0910ffa33ce01616bc483d\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "fetch-tsa-certs-cli-stack-v1-4@amd64",
"product": {
"name": "fetch-tsa-certs-cli-stack-v1-4@amd64",
"product_id": "fetch-tsa-certs-cli-stack-v1-4@amd64",
"product_identification_helper": {
"purl": "pkg:generic/fetch-tsa-certs-cli-stack-v1-4@1.4.3?filename=fetch_tsa_certs_linux_amd64.tar.gz\u0026checksum=sha256%3Afdec9fafb327bd19e37a327ff8afdf81113839105a891ae43a4115387f448d80\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "gitsign-cli-stack-v1-4@amd64",
"product": {
"name": "gitsign-cli-stack-v1-4@amd64",
"product_id": "gitsign-cli-stack-v1-4@amd64",
"product_identification_helper": {
"purl": "pkg:generic/gitsign-cli-stack-v1-4@1.4.3?filename=gitsign_cli_linux_amd64.tar.gz\u0026checksum=sha256%3Ab41a91d8aaafd27f321e5c6afaa2f80a1a192b65490ed83d06fd9d1a13cd2259\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "model-transparency-cli-stack-v1-4@amd64",
"product": {
"name": "model-transparency-cli-stack-v1-4@amd64",
"product_id": "model-transparency-cli-stack-v1-4@amd64",
"product_identification_helper": {
"purl": "pkg:generic/model-transparency-cli-stack-v1-4@1.4.3?filename=model_transparency_cli_linux_amd64.tar.gz\u0026checksum=sha256%3Ad11f6fdf2936505d92011565b3191fede6e0c42361f3374f407104b0183d9650\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "rekor-cli-stack-v1-4@amd64",
"product": {
"name": "rekor-cli-stack-v1-4@amd64",
"product_id": "rekor-cli-stack-v1-4@amd64",
"product_identification_helper": {
"purl": "pkg:generic/rekor-cli-stack-v1-4@1.4.3?filename=rekor_cli_linux_amd64.tar.gz\u0026checksum=sha256%3Ae8f93b6f40448046ea096ccbe68d3770108ee5ee35fbec23bb9f6aa00bf961f0\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "trillian-cli-stack-v1-4@amd64",
"product": {
"name": "trillian-cli-stack-v1-4@amd64",
"product_id": "trillian-cli-stack-v1-4@amd64",
"product_identification_helper": {
"purl": "pkg:generic/trillian-cli-stack-v1-4@1.4.3?filename=createtree_linux_amd64.tar.gz\u0026checksum=sha256%3A4a1f79d40b04cb87ba8278793ab6cadf8139d4f013911501ac2b61c1342f8bf4\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "tuftool-cli-stack-v1-4@amd64",
"product": {
"name": "tuftool-cli-stack-v1-4@amd64",
"product_id": "tuftool-cli-stack-v1-4@amd64",
"product_identification_helper": {
"purl": "pkg:generic/tuftool-cli-stack-v1-4@1.4.3?filename=tuftool_linux_amd64.tar.gz\u0026checksum=sha256%3Af0274ee12240fd7d6eddda2b85edfe71debf640f881f8f87864e07607226b281\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "conforma-cli-stack-v1-4@arm64",
"product": {
"name": "conforma-cli-stack-v1-4@arm64",
"product_id": "conforma-cli-stack-v1-4@arm64",
"product_identification_helper": {
"purl": "pkg:generic/conforma-cli-stack-v1-4@1.4.3?filename=ec_linux_arm64.tar.gz\u0026checksum=sha256%3Ad84c73bc689218700d9134a408e24dc01a28b1366920ebbd7b74837729c4be49\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "cosign-cli-stack-v1-4@arm64",
"product": {
"name": "cosign-cli-stack-v1-4@arm64",
"product_id": "cosign-cli-stack-v1-4@arm64",
"product_identification_helper": {
"purl": "pkg:generic/cosign-cli-stack-v1-4@1.4.3?filename=cosign_linux_arm64.tar.gz\u0026checksum=sha256%3A9ec55cf4fdae8edd492ca4eb70540edf6cff7a9d66abd537e4b16e197d35c2c4\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "fetch-tsa-certs-cli-stack-v1-4@arm64",
"product": {
"name": "fetch-tsa-certs-cli-stack-v1-4@arm64",
"product_id": "fetch-tsa-certs-cli-stack-v1-4@arm64",
"product_identification_helper": {
"purl": "pkg:generic/fetch-tsa-certs-cli-stack-v1-4@1.4.3?filename=fetch_tsa_certs_linux_arm64.tar.gz\u0026checksum=sha256%3A4e8e133040df495b1dfb5c777c7e00e839829594c4e3b5238103d6cede6732bf\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "gitsign-cli-stack-v1-4@arm64",
"product": {
"name": "gitsign-cli-stack-v1-4@arm64",
"product_id": "gitsign-cli-stack-v1-4@arm64",
"product_identification_helper": {
"purl": "pkg:generic/gitsign-cli-stack-v1-4@1.4.3?filename=gitsign_cli_linux_arm64.tar.gz\u0026checksum=sha256%3Aad344e63797afc8efb929973badbdd975c84bacb07043882e87966fafc5dde31\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "model-transparency-cli-stack-v1-4@arm64",
"product": {
"name": "model-transparency-cli-stack-v1-4@arm64",
"product_id": "model-transparency-cli-stack-v1-4@arm64",
"product_identification_helper": {
"purl": "pkg:generic/model-transparency-cli-stack-v1-4@1.4.3?filename=model_transparency_cli_linux_arm64.tar.gz\u0026checksum=sha256%3Af41c6465b0729d50b466881c215e7c033ca8d325001b1a572c8259542e21a751\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "rekor-cli-stack-v1-4@arm64",
"product": {
"name": "rekor-cli-stack-v1-4@arm64",
"product_id": "rekor-cli-stack-v1-4@arm64",
"product_identification_helper": {
"purl": "pkg:generic/rekor-cli-stack-v1-4@1.4.3?filename=rekor_cli_linux_arm64.tar.gz\u0026checksum=sha256%3A3a0f8b948f7307efd546408f0b2ca5de177d53ddbe124edc78ffd3f8d81571ed\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "trillian-cli-stack-v1-4@arm64",
"product": {
"name": "trillian-cli-stack-v1-4@arm64",
"product_id": "trillian-cli-stack-v1-4@arm64",
"product_identification_helper": {
"purl": "pkg:generic/trillian-cli-stack-v1-4@1.4.3?filename=createtree_linux_arm64.tar.gz\u0026checksum=sha256%3Ad0ef9416f3dab3fc977311aa9ee56c6eda926b09a5e26310dc0fd633c0fbcc62\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
}
],
"category": "architecture",
"name": "arm64"
},
{
"branches": [
{
"category": "product_version",
"name": "conforma-cli-stack-v1-4@ppc64le",
"product": {
"name": "conforma-cli-stack-v1-4@ppc64le",
"product_id": "conforma-cli-stack-v1-4@ppc64le",
"product_identification_helper": {
"purl": "pkg:generic/conforma-cli-stack-v1-4@1.4.3?filename=ec_linux_ppc64le.tar.gz\u0026checksum=sha256%3A1a38cf42d9815165e7ba168a2ccd08d4183f30690d60779ff0365d348c9b6c73\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "cosign-cli-stack-v1-4@ppc64le",
"product": {
"name": "cosign-cli-stack-v1-4@ppc64le",
"product_id": "cosign-cli-stack-v1-4@ppc64le",
"product_identification_helper": {
"purl": "pkg:generic/cosign-cli-stack-v1-4@1.4.3?filename=cosign_linux_ppc64le.tar.gz\u0026checksum=sha256%3Aeb9a30596e16a751e664789d3cf9cec89bbbaade890df56c46e6f18562cece21\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"product": {
"name": "fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"product_id": "fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"product_identification_helper": {
"purl": "pkg:generic/fetch-tsa-certs-cli-stack-v1-4@1.4.3?filename=fetch_tsa_certs_linux_ppc64le.tar.gz\u0026checksum=sha256%3A130934550be2ea638bcf42f0f7b987b373b31b6a1a43a73b506c7a13a76d2d48\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "gitsign-cli-stack-v1-4@ppc64le",
"product": {
"name": "gitsign-cli-stack-v1-4@ppc64le",
"product_id": "gitsign-cli-stack-v1-4@ppc64le",
"product_identification_helper": {
"purl": "pkg:generic/gitsign-cli-stack-v1-4@1.4.3?filename=gitsign_cli_linux_ppc64le.tar.gz\u0026checksum=sha256%3A98f8bcf03a7241fb6e97fc71c10d36600066791a07423876ede59c950eb61f1b\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "model-transparency-cli-stack-v1-4@ppc64le",
"product": {
"name": "model-transparency-cli-stack-v1-4@ppc64le",
"product_id": "model-transparency-cli-stack-v1-4@ppc64le",
"product_identification_helper": {
"purl": "pkg:generic/model-transparency-cli-stack-v1-4@1.4.3?filename=model_transparency_cli_linux_ppc64le.tar.gz\u0026checksum=sha256%3A41c21c8e9f7bb881853fb9ce09136526010d0d4abf2f76549c76ca6f40740fba\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "rekor-cli-stack-v1-4@ppc64le",
"product": {
"name": "rekor-cli-stack-v1-4@ppc64le",
"product_id": "rekor-cli-stack-v1-4@ppc64le",
"product_identification_helper": {
"purl": "pkg:generic/rekor-cli-stack-v1-4@1.4.3?filename=rekor_cli_linux_ppc64le.tar.gz\u0026checksum=sha256%3Aad7261c944910196f7aab08e1a24dc77996d107a339d74da1d4196fd96a421e6\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "trillian-cli-stack-v1-4@ppc64le",
"product": {
"name": "trillian-cli-stack-v1-4@ppc64le",
"product_id": "trillian-cli-stack-v1-4@ppc64le",
"product_identification_helper": {
"purl": "pkg:generic/trillian-cli-stack-v1-4@1.4.3?filename=createtree_linux_ppc64le.tar.gz\u0026checksum=sha256%3A96991d095eb2dd8472471d377522f9e6ef36153292bd381b022b554de4539b19\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "conforma-cli-stack-v1-4@s390x",
"product": {
"name": "conforma-cli-stack-v1-4@s390x",
"product_id": "conforma-cli-stack-v1-4@s390x",
"product_identification_helper": {
"purl": "pkg:generic/conforma-cli-stack-v1-4@1.4.3?filename=ec_linux_s390x.tar.gz\u0026checksum=sha256%3Aaea309944ca64070e736e4695e9624ee4405cd5dd6c5b5c3dd85e15ff8c03554\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "cosign-cli-stack-v1-4@s390x",
"product": {
"name": "cosign-cli-stack-v1-4@s390x",
"product_id": "cosign-cli-stack-v1-4@s390x",
"product_identification_helper": {
"purl": "pkg:generic/cosign-cli-stack-v1-4@1.4.3?filename=cosign_linux_s390x.tar.gz\u0026checksum=sha256%3Ace65e11339269a1e1749aadef3add5b9d3b7487f3db8f358b4c0d2aba98e2d7a\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "fetch-tsa-certs-cli-stack-v1-4@s390x",
"product": {
"name": "fetch-tsa-certs-cli-stack-v1-4@s390x",
"product_id": "fetch-tsa-certs-cli-stack-v1-4@s390x",
"product_identification_helper": {
"purl": "pkg:generic/fetch-tsa-certs-cli-stack-v1-4@1.4.3?filename=fetch_tsa_certs_linux_s390x.tar.gz\u0026checksum=sha256%3A9fe9680fe67969fedfceb3993930056de422ff1836886145db8512ea18110368\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "gitsign-cli-stack-v1-4@s390x",
"product": {
"name": "gitsign-cli-stack-v1-4@s390x",
"product_id": "gitsign-cli-stack-v1-4@s390x",
"product_identification_helper": {
"purl": "pkg:generic/gitsign-cli-stack-v1-4@1.4.3?filename=gitsign_cli_linux_s390x.tar.gz\u0026checksum=sha256%3Aec9f094da7b0307fdc2d8440ca421caaaff22ab337c796fadeb7009313b6c564\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "model-transparency-cli-stack-v1-4@s390x",
"product": {
"name": "model-transparency-cli-stack-v1-4@s390x",
"product_id": "model-transparency-cli-stack-v1-4@s390x",
"product_identification_helper": {
"purl": "pkg:generic/model-transparency-cli-stack-v1-4@1.4.3?filename=model_transparency_cli_linux_s390x.tar.gz\u0026checksum=sha256%3A2655b8c2c57d107325710857fb7ca22c439b5466abd8adf60792b9821da9efc4\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "rekor-cli-stack-v1-4@s390x",
"product": {
"name": "rekor-cli-stack-v1-4@s390x",
"product_id": "rekor-cli-stack-v1-4@s390x",
"product_identification_helper": {
"purl": "pkg:generic/rekor-cli-stack-v1-4@1.4.3?filename=rekor_cli_linux_s390x.tar.gz\u0026checksum=sha256%3A0d8eadf8b8aee4e8e4eee350ef54c21ca921f9d3678157c8710d3ea3fb5d2215\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "trillian-cli-stack-v1-4@s390x",
"product": {
"name": "trillian-cli-stack-v1-4@s390x",
"product_id": "trillian-cli-stack-v1-4@s390x",
"product_identification_helper": {
"purl": "pkg:generic/trillian-cli-stack-v1-4@1.4.3?filename=createtree_linux_s390x.tar.gz\u0026checksum=sha256%3A029eadc83ace4ec12004539731d3b11817a0939c929bfa1895dad45bf4233899\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "conforma-cli-stack-v1-4@amd64_windows",
"product": {
"name": "conforma-cli-stack-v1-4@amd64_windows",
"product_id": "conforma-cli-stack-v1-4@amd64_windows",
"product_identification_helper": {
"purl": "pkg:generic/conforma-cli-stack-v1-4@1.4.3?filename=ec_windows_amd64.zip\u0026checksum=sha256%3Ab1e762e1277bf10d0ea1cd06268d521f827b41adff7898d3f2e90ef1f92b9459\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "cosign-cli-stack-v1-4@amd64_windows",
"product": {
"name": "cosign-cli-stack-v1-4@amd64_windows",
"product_id": "cosign-cli-stack-v1-4@amd64_windows",
"product_identification_helper": {
"purl": "pkg:generic/cosign-cli-stack-v1-4@1.4.3?filename=cosign_windows_amd64.zip\u0026checksum=sha256%3A38f4682466f7f1f9b6f0d0fa8b3faa635c94a604a0cb503280a139ee472fe0e6\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"product": {
"name": "fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"product_id": "fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"product_identification_helper": {
"purl": "pkg:generic/fetch-tsa-certs-cli-stack-v1-4@1.4.3?filename=fetch_tsa_certs_windows_amd64.zip\u0026checksum=sha256%3A71479daf6769fff4772c5e17684f7f86b91b7eeaffba0144df6f8fe78b4d0306\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "gitsign-cli-stack-v1-4@amd64_windows",
"product": {
"name": "gitsign-cli-stack-v1-4@amd64_windows",
"product_id": "gitsign-cli-stack-v1-4@amd64_windows",
"product_identification_helper": {
"purl": "pkg:generic/gitsign-cli-stack-v1-4@1.4.3?filename=gitsign_cli_windows_amd64.zip\u0026checksum=sha256%3A6fef4f4b207582acdc89736dba2155dabed565b8946be14211a4b64e744cb72b\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "model-transparency-cli-stack-v1-4@amd64_windows",
"product": {
"name": "model-transparency-cli-stack-v1-4@amd64_windows",
"product_id": "model-transparency-cli-stack-v1-4@amd64_windows",
"product_identification_helper": {
"purl": "pkg:generic/model-transparency-cli-stack-v1-4@1.4.3?filename=model_transparency_cli_windows_amd64.exe.gz\u0026checksum=sha256%3A54414f4e41a7b7324464df9ba51a5c5c7a36bdf2a10243e18a18c0a07a4c7250\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "rekor-cli-stack-v1-4@amd64_windows",
"product": {
"name": "rekor-cli-stack-v1-4@amd64_windows",
"product_id": "rekor-cli-stack-v1-4@amd64_windows",
"product_identification_helper": {
"purl": "pkg:generic/rekor-cli-stack-v1-4@1.4.3?filename=rekor_cli_windows_amd64.zip\u0026checksum=sha256%3A99b32d68816507be2304422886bd7991c0f0796ff5e80f3cb2e5df573dfd3fdd\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "trillian-cli-stack-v1-4@amd64_windows",
"product": {
"name": "trillian-cli-stack-v1-4@amd64_windows",
"product_id": "trillian-cli-stack-v1-4@amd64_windows",
"product_identification_helper": {
"purl": "pkg:generic/trillian-cli-stack-v1-4@1.4.3?filename=createtree_windows_amd64.zip\u0026checksum=sha256%3A1426e9dba9f83dc9f9e7e74a8930d223cbc9179860aeb5dcc988f5f1b06eec70\u0026download_url=https%3A%2F%2Fdevelopers.qa.redhat.com%2Fproducts"
}
}
}
],
"category": "architecture",
"name": "amd64_windows"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "conforma-cli-stack-v1-4@amd64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64"
},
"product_reference": "conforma-cli-stack-v1-4@amd64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "conforma-cli-stack-v1-4@amd64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin"
},
"product_reference": "conforma-cli-stack-v1-4@amd64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "conforma-cli-stack-v1-4@amd64_windows as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows"
},
"product_reference": "conforma-cli-stack-v1-4@amd64_windows",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "conforma-cli-stack-v1-4@arm64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64"
},
"product_reference": "conforma-cli-stack-v1-4@arm64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "conforma-cli-stack-v1-4@arm64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin"
},
"product_reference": "conforma-cli-stack-v1-4@arm64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "conforma-cli-stack-v1-4@ppc64le as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le"
},
"product_reference": "conforma-cli-stack-v1-4@ppc64le",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "conforma-cli-stack-v1-4@s390x as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
},
"product_reference": "conforma-cli-stack-v1-4@s390x",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cosign-cli-stack-v1-4@amd64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64"
},
"product_reference": "cosign-cli-stack-v1-4@amd64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cosign-cli-stack-v1-4@amd64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin"
},
"product_reference": "cosign-cli-stack-v1-4@amd64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cosign-cli-stack-v1-4@amd64_windows as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows"
},
"product_reference": "cosign-cli-stack-v1-4@amd64_windows",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cosign-cli-stack-v1-4@arm64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64"
},
"product_reference": "cosign-cli-stack-v1-4@arm64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cosign-cli-stack-v1-4@arm64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin"
},
"product_reference": "cosign-cli-stack-v1-4@arm64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cosign-cli-stack-v1-4@ppc64le as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le"
},
"product_reference": "cosign-cli-stack-v1-4@ppc64le",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cosign-cli-stack-v1-4@s390x as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x"
},
"product_reference": "cosign-cli-stack-v1-4@s390x",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fetch-tsa-certs-cli-stack-v1-4@amd64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64"
},
"product_reference": "fetch-tsa-certs-cli-stack-v1-4@amd64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fetch-tsa-certs-cli-stack-v1-4@amd64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin"
},
"product_reference": "fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fetch-tsa-certs-cli-stack-v1-4@amd64_windows as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows"
},
"product_reference": "fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fetch-tsa-certs-cli-stack-v1-4@arm64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64"
},
"product_reference": "fetch-tsa-certs-cli-stack-v1-4@arm64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fetch-tsa-certs-cli-stack-v1-4@arm64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin"
},
"product_reference": "fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fetch-tsa-certs-cli-stack-v1-4@ppc64le as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le"
},
"product_reference": "fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fetch-tsa-certs-cli-stack-v1-4@s390x as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x"
},
"product_reference": "fetch-tsa-certs-cli-stack-v1-4@s390x",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gitsign-cli-stack-v1-4@amd64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64"
},
"product_reference": "gitsign-cli-stack-v1-4@amd64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gitsign-cli-stack-v1-4@amd64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin"
},
"product_reference": "gitsign-cli-stack-v1-4@amd64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gitsign-cli-stack-v1-4@amd64_windows as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows"
},
"product_reference": "gitsign-cli-stack-v1-4@amd64_windows",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gitsign-cli-stack-v1-4@arm64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64"
},
"product_reference": "gitsign-cli-stack-v1-4@arm64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gitsign-cli-stack-v1-4@arm64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin"
},
"product_reference": "gitsign-cli-stack-v1-4@arm64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gitsign-cli-stack-v1-4@ppc64le as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le"
},
"product_reference": "gitsign-cli-stack-v1-4@ppc64le",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gitsign-cli-stack-v1-4@s390x as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x"
},
"product_reference": "gitsign-cli-stack-v1-4@s390x",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "model-transparency-cli-stack-v1-4@amd64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64"
},
"product_reference": "model-transparency-cli-stack-v1-4@amd64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "model-transparency-cli-stack-v1-4@amd64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin"
},
"product_reference": "model-transparency-cli-stack-v1-4@amd64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "model-transparency-cli-stack-v1-4@amd64_windows as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows"
},
"product_reference": "model-transparency-cli-stack-v1-4@amd64_windows",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "model-transparency-cli-stack-v1-4@arm64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64"
},
"product_reference": "model-transparency-cli-stack-v1-4@arm64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "model-transparency-cli-stack-v1-4@arm64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin"
},
"product_reference": "model-transparency-cli-stack-v1-4@arm64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "model-transparency-cli-stack-v1-4@ppc64le as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le"
},
"product_reference": "model-transparency-cli-stack-v1-4@ppc64le",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "model-transparency-cli-stack-v1-4@s390x as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x"
},
"product_reference": "model-transparency-cli-stack-v1-4@s390x",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rekor-cli-stack-v1-4@amd64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64"
},
"product_reference": "rekor-cli-stack-v1-4@amd64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rekor-cli-stack-v1-4@amd64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin"
},
"product_reference": "rekor-cli-stack-v1-4@amd64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rekor-cli-stack-v1-4@amd64_windows as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows"
},
"product_reference": "rekor-cli-stack-v1-4@amd64_windows",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rekor-cli-stack-v1-4@arm64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64"
},
"product_reference": "rekor-cli-stack-v1-4@arm64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rekor-cli-stack-v1-4@arm64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin"
},
"product_reference": "rekor-cli-stack-v1-4@arm64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rekor-cli-stack-v1-4@ppc64le as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le"
},
"product_reference": "rekor-cli-stack-v1-4@ppc64le",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rekor-cli-stack-v1-4@s390x as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x"
},
"product_reference": "rekor-cli-stack-v1-4@s390x",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "trillian-cli-stack-v1-4@amd64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64"
},
"product_reference": "trillian-cli-stack-v1-4@amd64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "trillian-cli-stack-v1-4@amd64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin"
},
"product_reference": "trillian-cli-stack-v1-4@amd64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "trillian-cli-stack-v1-4@amd64_windows as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows"
},
"product_reference": "trillian-cli-stack-v1-4@amd64_windows",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "trillian-cli-stack-v1-4@arm64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64"
},
"product_reference": "trillian-cli-stack-v1-4@arm64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "trillian-cli-stack-v1-4@arm64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin"
},
"product_reference": "trillian-cli-stack-v1-4@arm64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "trillian-cli-stack-v1-4@ppc64le as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le"
},
"product_reference": "trillian-cli-stack-v1-4@ppc64le",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "trillian-cli-stack-v1-4@s390x as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x"
},
"product_reference": "trillian-cli-stack-v1-4@s390x",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tuftool-cli-stack-v1-4@amd64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
},
"product_reference": "tuftool-cli-stack-v1-4@amd64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-27145",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-06-02T23:01:08.992540+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2484207"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `crypto/x509` package of `golang`. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name (SAN) entries. The certificate verification process, specifically the `VerifyHostname` function, incurs excessive computational overhead due to repeated string operations when processing these entries. This can lead to a significant performance degradation or unresponsiveness of systems validating such certificates.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in the Go standard library crypto/x509 package. When verifying a TLS certificate hostname, VerifyHostname processed each DNS Subject Alternative Name (SAN) entry in a loop and repeatedly split the candidate hostname on \".\" characters. For certificates with a very large DNS SAN list, CPU use could grow quadratically with the number of SAN entries and hostname labels. Because hostname verification runs before the certificate chain is built, this overhead can occur even when the certificate is not trusted.\n\nRed Hat rates this issue as Important. It affects Red Hat products that include the Go standard library crypto/x509 code from an affected Go toolchain version (before Go 1.25.11, or from Go 1.26.0 through Go 1.26.3). Applications and container images built with a fixed Go release (1.25.11 or later, or 1.26.4 or later) are not affected. Community distributions such as Fedora are also affected.\n\nUpstream fix: Go 1.25.11 and Go 1.26.4 (GO-2026-5037).",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27145"
},
{
"category": "external",
"summary": "RHBZ#2484207",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484207"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27145",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27145"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27145",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27145"
},
{
"category": "external",
"summary": "https://go.dev/cl/783621",
"url": "https://go.dev/cl/783621"
},
{
"category": "external",
"summary": "https://go.dev/issue/79694",
"url": "https://go.dev/issue/79694"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw",
"url": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5037",
"url": "https://pkg.go.dev/vuln/GO-2026-5037"
}
],
"release_date": "2026-06-02T22:01:36.954000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-03T18:13:05+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:49767"
},
{
"category": "workaround",
"details": "A flaw was found in the Go standard library crypto/x509 package. When verifying a TLS certificate hostname, VerifyHostname processed each DNS Subject Alternative Name (SAN) entry in a loop and repeatedly split the candidate hostname on \".\" characters. For certificates with a very large DNS SAN list, CPU use could grow quadratically with the number of SAN entries and hostname labels. Because hostname verification runs before the certificate chain is built, this overhead can occur even when the certificate is not trusted.\n\nRed Hat rates this issue as Important. It affects Red Hat products that include the Go standard library crypto/x509 code from an affected Go toolchain version (before Go 1.25.11, or from Go 1.26.0 through Go 1.26.3). Applications and container images built with a fixed Go release (1.25.11 or later, or 1.26.4 or later) are not affected. Community distributions such as Fedora are also affected.\n\nUpstream fix: Go 1.25.11 and Go 1.26.4 (GO-2026-5037).",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries"
},
{
"cve": "CVE-2026-33811",
"cwe": {
"id": "CWE-1341",
"name": "Multiple Releases of Same Resource or Handle"
},
"discovery_date": "2026-05-07T20:01:34.913869+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467822"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net` package, affecting applications configured to use the `cgo` DNS resolver. A remote attacker could trigger a double-free memory error by providing a very long CNAME response, leading to a crash of the vulnerable application and impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "RHBZ#2467822",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467822"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33811",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33811"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://go.dev/cl/767860",
"url": "https://go.dev/cl/767860"
},
{
"category": "external",
"summary": "https://go.dev/issue/78803",
"url": "https://go.dev/issue/78803"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4981",
"url": "https://pkg.go.dev/vuln/GO-2026-4981"
}
],
"release_date": "2026-05-07T19:41:19.285000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-03T18:13:05+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:49767"
},
{
"category": "workaround",
"details": "To mitigate this issue, applications can be configured to use the pure Go DNS resolver instead of the `cgo` DNS resolver. This can be achieved by setting the `GODEBUG` environment variable to `netdns=go`. For example, to run a Go application with this mitigation: `GODEBUG=netdns=go /path/to/your/go/application`. This change may require restarting affected applications or services to take effect. Users should verify that this change does not negatively impact DNS resolution for their specific application environment.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME"
},
{
"cve": "CVE-2026-39820",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-05-07T20:01:27.800929+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467820"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net/mail` package. Applications processing untrusted email inputs via `ParseAddress`, `ParseAddressList`, or `ParseDate` functions are susceptible to excessive resource consumption, which can lead to service unavailability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39820"
},
{
"category": "external",
"summary": "RHBZ#2467820",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467820"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39820",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39820"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820"
},
{
"category": "external",
"summary": "https://go.dev/cl/759940",
"url": "https://go.dev/cl/759940"
},
{
"category": "external",
"summary": "https://go.dev/issue/78566",
"url": "https://go.dev/issue/78566"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4986",
"url": "https://pkg.go.dev/vuln/GO-2026-4986"
}
],
"release_date": "2026-05-07T19:41:19.854000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-03T18:13:05+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:49767"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs"
},
{
"cve": "CVE-2026-39821",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-05-22T16:00:52.844126+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480756"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/net/idna is vulnerable to privilege escalation through incorrect Punycode label handling in ToASCII and ToUnicode. An attacker who can supply a Punycode hostname that passes an ASCII-only authorization check may have it normalized to a restricted ASCII name the application intended to block. Red Hat exposure is broad across products shipping the Go toolchain or bundling golang.org/x/net, including RHEL and RHEL-AI golang RPMs, hummingbird Go runtimes, OpenShift and ODF container builds, and Ceph/OpenShift components compiled against affected x/net versions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "RHBZ#2480756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39821",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39821"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://go.dev/cl/767220",
"url": "https://go.dev/cl/767220"
},
{
"category": "external",
"summary": "https://go.dev/issue/78760",
"url": "https://go.dev/issue/78760"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5026",
"url": "https://pkg.go.dev/vuln/GO-2026-5026"
}
],
"release_date": "2026-05-22T15:01:21.462000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-03T18:13:05+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:49767"
},
{
"category": "workaround",
"details": "Upgrade to a fixed golang.org/x/net release that includes the idna correction, via updated golang or dependent package rebuilds.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing"
},
{
"cve": "CVE-2026-39828",
"cwe": {
"id": "CWE-281",
"name": "Improper Preservation of Permissions"
},
"discovery_date": "2026-05-22T04:01:46.775641+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480687"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote attacker could exploit this vulnerability when an SSH server authentication callback returned a PartialSuccessError with non-nil permissions. This flaw caused these permissions to be silently discarded, potentially bypassing certificate restrictions, such as a force-command, after a second authentication factor succeeded. This could lead to unauthorized command execution or access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important security flaw in the `golang.org/x/crypto/ssh` library. When an SSH server utilizing this library is configured with specific authentication callbacks that return a `PartialSuccessError` with non-nil permissions, an attacker could bypass intended certificate restrictions, such as `force-command`. This bypass could lead to unauthorized command execution or access on affected Red Hat systems configured with multi-factor authentication and certificate-based access controls.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39828"
},
{
"category": "external",
"summary": "RHBZ#2480687",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480687"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39828",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39828"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39828",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39828"
},
{
"category": "external",
"summary": "https://go.dev/cl/781621",
"url": "https://go.dev/cl/781621"
},
{
"category": "external",
"summary": "https://go.dev/issue/79562",
"url": "https://go.dev/issue/79562"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5014",
"url": "https://pkg.go.dev/vuln/GO-2026-5014"
}
],
"release_date": "2026-05-22T02:31:26.883000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-03T18:13:05+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:49767"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions"
},
{
"cve": "CVE-2026-39829",
"cwe": {
"id": "CWE-1284",
"name": "Improper Validation of Specified Quantity in Input"
},
"discovery_date": "2026-05-22T04:01:30.092249+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480681"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during public key authentication. Successful exploitation could lead to a denial of service (DoS) due to prolonged CPU consumption during signature verification.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in golang.org/x/crypto/ssh is rated as Important. An unauthenticated remote attacker could trigger a denial of service by providing a specially crafted public key with excessively large parameters during SSH public key authentication. This could lead to prolonged CPU consumption on the server, impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39829"
},
{
"category": "external",
"summary": "RHBZ#2480681",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480681"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39829",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39829"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39829",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39829"
},
{
"category": "external",
"summary": "https://go.dev/cl/781641",
"url": "https://go.dev/cl/781641"
},
{
"category": "external",
"summary": "https://go.dev/cl/781661",
"url": "https://go.dev/cl/781661"
},
{
"category": "external",
"summary": "https://go.dev/issue/79565",
"url": "https://go.dev/issue/79565"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5018",
"url": "https://pkg.go.dev/vuln/GO-2026-5018"
}
],
"release_date": "2026-05-22T02:31:27.324000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-03T18:13:05+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:49767"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters"
},
{
"cve": "CVE-2026-39830",
"cwe": {
"id": "CWE-772",
"name": "Missing Release of Resource after Effective Lifetime"
},
"discovery_date": "2026-05-22T04:01:38.517202+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480684"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection\u0027s read loop. This prevents the associated resources from being released, leading to a resource leak per connection. The consequence is a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in `golang.org/x/crypto/ssh`. A remote, unauthenticated attacker can exploit this vulnerability by sending unsolicited global request responses to an affected SSH server, leading to resource exhaustion and a denial of service. The impact is considered Important due to the potential for unauthenticated remote disruption of services utilizing the vulnerable SSH library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39830"
},
{
"category": "external",
"summary": "RHBZ#2480684",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480684"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39830",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39830"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39830",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39830"
},
{
"category": "external",
"summary": "https://go.dev/cl/781640",
"url": "https://go.dev/cl/781640"
},
{
"category": "external",
"summary": "https://go.dev/cl/781664",
"url": "https://go.dev/cl/781664"
},
{
"category": "external",
"summary": "https://go.dev/issue/79564",
"url": "https://go.dev/issue/79564"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5017",
"url": "https://pkg.go.dev/vuln/GO-2026-5017"
}
],
"release_date": "2026-05-22T02:31:27.208000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-03T18:13:05+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:49767"
},
{
"category": "workaround",
"details": "To mitigate this denial of service vulnerability, restrict network access to any service that utilizes the `golang.org/x/crypto/ssh` library and is exposed to untrusted networks. Implement firewall rules to allow connections only from trusted hosts or networks. This action limits the ability of malicious peers to send unsolicited global request responses. A restart of the affected service may be necessary for the new network rules to be applied effectively.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses"
},
{
"cve": "CVE-2026-39832",
"cwe": {
"id": "CWE-281",
"name": "Improper Preservation of Permissions"
},
"discovery_date": "2026-05-22T04:01:41.402561+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480685"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh/agent. When a key was added to a remote agent, security restrictions, known as constraint extensions, were not properly processed during the request. This allowed these restrictions to be silently removed when keys were forwarded, leading to the unrestricted use of the key on the remote host. This vulnerability could enable an attacker to bypass intended security controls and perform unauthorized actions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in `golang.org/x/crypto/ssh/agent` allows for a security bypass when SSH keys with destination restrictions are forwarded via an SSH agent. This flaw could lead to unintended exposure of SSH keys, enabling an attacker to use the forwarded key without the specified restrictions on remote hosts. Red Hat products utilizing `golang.org/x/crypto/ssh/agent` for key forwarding may be affected if users rely on constraint extensions for limiting key usage.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39832"
},
{
"category": "external",
"summary": "RHBZ#2480685",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480685"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39832",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39832"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39832",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39832"
},
{
"category": "external",
"summary": "https://go.dev/cl/778642",
"url": "https://go.dev/cl/778642"
},
{
"category": "external",
"summary": "https://go.dev/issue/79435",
"url": "https://go.dev/issue/79435"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5006",
"url": "https://pkg.go.dev/vuln/GO-2026-5006"
}
],
"release_date": "2026-05-22T02:31:26.660000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-03T18:13:05+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:49767"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions"
},
{
"cve": "CVE-2026-39833",
"cwe": {
"id": "CWE-358",
"name": "Improperly Implemented Security Check for Standard"
},
"discovery_date": "2026-05-22T04:01:35.714593+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480683"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh/agent. The NewKeyring() function, which creates an in-memory keyring, failed to enforce the ConfirmBeforeUse constraint on keys. This allowed keys configured to require user confirmation before use to perform signing operations without any prompt or indication to the user. Consequently, an attacker could potentially bypass intended security controls, leading to unauthorized cryptographic signing actions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to unenforced key confirmation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat rates this issue as Moderate with RH CVSS 5.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N). A flaw was found in golang.org/x/crypto/ssh/agent where the in-memory keyring returned by NewKeyring() silently accepted SSH agent keys with the ConfirmBeforeUse constraint but did not enforce interactive confirmation before signing. Exploitation requires local access and low privileges on a system where an affected application uses NewKeyring() with ConfirmBeforeUse. Most Red Hat products that bundle golang.org/x/crypto do not use the ssh/agent ConfirmBeforeUse feature in their supported execution paths. The upstream CISA CVSS 9.1 assumes a broader network attack context that does not reflect Red Hat product deployment.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39833"
},
{
"category": "external",
"summary": "RHBZ#2480683",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480683"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39833",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39833"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39833",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39833"
},
{
"category": "external",
"summary": "https://go.dev/cl/778640",
"url": "https://go.dev/cl/778640"
},
{
"category": "external",
"summary": "https://go.dev/cl/778641",
"url": "https://go.dev/cl/778641"
},
{
"category": "external",
"summary": "https://go.dev/issue/79436",
"url": "https://go.dev/issue/79436"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5005",
"url": "https://pkg.go.dev/vuln/GO-2026-5005"
}
],
"release_date": "2026-05-22T02:31:26.294000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-03T18:13:05+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:49767"
},
{
"category": "workaround",
"details": "Update affected Go applications to use golang.org/x/crypto version 0.52.0 or later, which rejects unsupported ConfirmBeforeUse keys instead of silently ignoring the constraint. As a workaround, do not add keys with ConfirmBeforeUse to the in-memory keyring from golang.org/x/crypto/ssh/agent, or use an SSH agent implementation that correctly enforces confirm-before-use.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to unenforced key confirmation"
},
{
"cve": "CVE-2026-39835",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"discovery_date": "2026-05-22T04:01:27.279943+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480680"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. SSH servers configured to use CertChecker as a public key callback, without explicitly setting IsUserAuthority or IsHostAuthority, are vulnerable. A remote attacker can exploit this by presenting a specially crafted certificate, causing the server to panic and resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in `golang.org/x/crypto/ssh` affecting SSH servers that utilize `CertChecker` as a public key callback without explicitly configuring `IsUserAuthority` or `IsHostAuthority`. A remote, unauthenticated attacker can trigger a server panic by presenting a specially crafted certificate, leading to service disruption. Exploitation requires a specific, non-default configuration of the `CertChecker`.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39835"
},
{
"category": "external",
"summary": "RHBZ#2480680",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480680"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39835",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39835"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39835",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39835"
},
{
"category": "external",
"summary": "https://go.dev/cl/781660",
"url": "https://go.dev/cl/781660"
},
{
"category": "external",
"summary": "https://go.dev/issue/79563",
"url": "https://go.dev/issue/79563"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5015",
"url": "https://pkg.go.dev/vuln/GO-2026-5015"
}
],
"release_date": "2026-05-22T02:31:26.982000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-03T18:13:05+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:49767"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate"
},
{
"cve": "CVE-2026-42151",
"cwe": {
"id": "CWE-256",
"name": "Plaintext Storage of a Password"
},
"discovery_date": "2026-05-04T19:02:26.983660+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466507"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Prometheus, an open-source monitoring system. The `client_secret` field within the Azure Active Directory (AD) remote write OAuth configuration was incorrectly handled as a plain string instead of a secure Secret type. This misconfiguration allowed any user or process with access to the `/-/config` HTTP API endpoint to view the Azure OAuth client secret in plaintext. This vulnerability leads to information disclosure, potentially compromising the security of integrated Azure AD services.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/prometheus/prometheus: Prometheus: Information disclosure of Azure OAuth client secret via config API",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important information disclosure flaw in Prometheus affects instances configured to use Azure AD remote write with OAuth authentication. The client secret, intended to be a secure credential, is exposed in plaintext through the `/-/config` HTTP API endpoint. This could allow an attacker with access to this endpoint to retrieve the secret, potentially compromising integrated Azure AD services.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42151"
},
{
"category": "external",
"summary": "RHBZ#2466507",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466507"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42151",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42151"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42151",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42151"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18587",
"url": "https://github.com/prometheus/prometheus/pull/18587"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18590",
"url": "https://github.com/prometheus/prometheus/pull/18590"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/security/advisories/GHSA-wg65-39gg-5wfj",
"url": "https://github.com/prometheus/prometheus/security/advisories/GHSA-wg65-39gg-5wfj"
}
],
"release_date": "2026-05-04T18:12:16.917000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-03T18:13:05+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:49767"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/prometheus/prometheus: Prometheus: Information disclosure of Azure OAuth client secret via config API"
},
{
"cve": "CVE-2026-42499",
"cwe": {
"id": "CWE-1046",
"name": "Creation of Immutable Text Using String Concatenation"
},
"discovery_date": "2026-05-07T20:00:51.685602+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467809"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the `net/mail` package of the Go standard library. A remote attacker can exploit this flaw by sending specially crafted email addresses, leading to excessive resource consumption and a denial of service in Go applications that parse email addresses using the affected library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42499"
},
{
"category": "external",
"summary": "RHBZ#2467809",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467809"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42499",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42499"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499"
},
{
"category": "external",
"summary": "https://go.dev/cl/771520",
"url": "https://go.dev/cl/771520"
},
{
"category": "external",
"summary": "https://go.dev/issue/78987",
"url": "https://go.dev/issue/78987"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4977",
"url": "https://pkg.go.dev/vuln/GO-2026-4977"
}
],
"release_date": "2026-05-07T19:41:18.615000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-03T18:13:05+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:49767"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing"
},
{
"cve": "CVE-2026-42508",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-05-22T04:01:49.515058+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480688"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh/knownhosts. This vulnerability occurs because the system did not correctly check for the revocation status of a SignatureKey belonging to a Certificate Authority (CA). A remote attacker could potentially exploit this by presenting a revoked key, leading to the system accepting it as valid. This could allow an attacker to bypass security checks and potentially gain unauthorized access or spoof legitimate entities.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: A flaw in `golang.org/x/crypto/ssh/knownhosts` allows a remote attacker to bypass security checks. This vulnerability arises because the system fails to properly verify the revocation status of a Certificate Authority (CA) `SignatureKey`. In Red Hat environments, this could enable an attacker to present a revoked key, leading to its acceptance as valid and potentially granting unauthorized access or facilitating the spoofing of legitimate entities.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42508"
},
{
"category": "external",
"summary": "RHBZ#2480688",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480688"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42508",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42508"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42508",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42508"
},
{
"category": "external",
"summary": "https://go.dev/cl/781220",
"url": "https://go.dev/cl/781220"
},
{
"category": "external",
"summary": "https://go.dev/issue/79568",
"url": "https://go.dev/issue/79568"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5021",
"url": "https://pkg.go.dev/vuln/GO-2026-5021"
}
],
"release_date": "2026-05-22T02:31:27.644000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-03T18:13:05+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:49767"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey"
},
{
"cve": "CVE-2026-46595",
"cwe": {
"id": "CWE-303",
"name": "Incorrect Implementation of Authentication Algorithm"
},
"discovery_date": "2026-05-22T04:01:52.215134+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480689"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. Source-address validation can be skipped when an SSH server configuration uses an authentication callback type other than public key, allowing authorization bypass in misconfigured servers. This is a follow-on to incomplete coverage from the CVE-2024-45337 fix.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/crypto/ssh is vulnerable to authorization bypass when SSH server configurations rely on source-address validation alongside non-public-key authentication callbacks. An attacker with low privileges who can authenticate through such a callback path may bypass intended source-address restrictions and gain unauthorized SSH access. Red Hat impact sits in services built with affected x/crypto/ssh, including RHEL golang streams, hummingbird Go toolchains, RHACM/MCE agents, and OpenShift or Ceph components that embed Go SSH servers with mixed callback types.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-46595"
},
{
"category": "external",
"summary": "RHBZ#2480689",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480689"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-46595",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46595"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46595",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46595"
},
{
"category": "external",
"summary": "https://go.dev/cl/781642",
"url": "https://go.dev/cl/781642"
},
{
"category": "external",
"summary": "https://go.dev/issue/79570",
"url": "https://go.dev/issue/79570"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5023",
"url": "https://pkg.go.dev/vuln/GO-2026-5023"
}
],
"release_date": "2026-05-22T02:31:27.894000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-03T18:13:05+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:49767"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation"
}
]
}
RHSA-2026:50888
Vulnerability from csaf_redhat - Published: 2026-08-05 18:08 - Updated: 2026-08-22 02:17Summary
Red Hat Security Advisory: RHTAS 1.4.3 - CLI Stack Release
Severity
Important
Notes
Topic: The 1.4.3 release of the RHTAS CLIs.
For more details please visit the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4
Details: The RHTAS CLI Stack images for RHTAS 1.4.3
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in the `crypto/x509` package of `golang`. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name (SAN) entries. The certificate verification process, specifically the `VerifyHostname` function, incurs excessive computational overhead due to repeated string operations when processing these entries. This can lead to a significant performance degradation or unresponsiveness of systems validating such certificates.
7.5 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.
7.5 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.
7.5 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.
8.2 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote attacker could exploit this vulnerability when an SSH server authentication callback returned a PartialSuccessError with non-nil permissions. This flaw caused these permissions to be silently discarded, potentially bypassing certificate restrictions, such as a force-command, after a second authentication factor succeeded. This could lead to unauthorized command execution or access.
8.8 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during public key authentication. Successful exploitation could lead to a denial of service (DoS) due to prolonged CPU consumption during signature verification.
7.5 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection's read loop. This prevents the associated resources from being released, leading to a resource leak per connection. The consequence is a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh/agent. When a key was added to a remote agent, security restrictions, known as constraint extensions, were not properly processed during the request. This allowed these restrictions to be silently removed when keys were forwarded, leading to the unrestricted use of the key on the remote host. This vulnerability could enable an attacker to bypass intended security controls and perform unauthorized actions.
8.7 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh/agent. The NewKeyring() function, which creates an in-memory keyring, failed to enforce the ConfirmBeforeUse constraint on keys. This allowed keys configured to require user confirmation before use to perform signing operations without any prompt or indication to the user. Consequently, an attacker could potentially bypass intended security controls, leading to unauthorized cryptographic signing actions.
5.5 (Medium)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in golang.org/x/crypto/ssh. SSH servers configured to use CertChecker as a public key callback, without explicitly setting IsUserAuthority or IsHostAuthority, are vulnerable. A remote attacker can exploit this by presenting a specially crafted certificate, causing the server to panic and resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Prometheus, an open-source monitoring system. The `client_secret` field within the Azure Active Directory (AD) remote write OAuth configuration was incorrectly handled as a plain string instead of a secure Secret type. This misconfiguration allowed any user or process with access to the `/-/config` HTTP API endpoint to view the Azure OAuth client secret in plaintext. This vulnerability leads to information disclosure, potentially compromising the security of integrated Azure AD services.
7.5 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Threats
Impact
Important
A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.
7.5 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh/knownhosts. This vulnerability occurs because the system did not correctly check for the revocation status of a SignatureKey belonging to a Certificate Authority (CA). A remote attacker could potentially exploit this by presenting a revoked key, leading to the system accepting it as valid. This could allow an attacker to bypass security checks and potentially gain unauthorized access or spoof legitimate entities.
7.4 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. Source-address validation can be skipped when an SSH server configuration uses an authentication callback type other than public key, allowing authorization bypass in misconfigured servers. This is a follow-on to incomplete coverage from the CVE-2024-45337 fix.
7.1 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x | — |
Vendor Fix
fix
|
Known not affected
43 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64 | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x | — | ||
| Unresolved product id: Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64 | — |
Threats
Impact
Important
References
126 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "The 1.4.3 release of the RHTAS CLIs.\nFor more details please visit the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4",
"title": "Topic"
},
{
"category": "general",
"text": "The RHTAS CLI Stack images for RHTAS 1.4.3",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:50888",
"url": "https://access.redhat.com/errata/RHSA-2026:50888"
},
{
"category": "external",
"summary": "https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4",
"url": "https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4"
},
{
"category": "external",
"summary": "https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"url": "https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-27145",
"url": "https://access.redhat.com/security/cve/CVE-2026-27145"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33811",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39820",
"url": "https://access.redhat.com/security/cve/CVE-2026-39820"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39821",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39828",
"url": "https://access.redhat.com/security/cve/CVE-2026-39828"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39829",
"url": "https://access.redhat.com/security/cve/CVE-2026-39829"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39830",
"url": "https://access.redhat.com/security/cve/CVE-2026-39830"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39832",
"url": "https://access.redhat.com/security/cve/CVE-2026-39832"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39833",
"url": "https://access.redhat.com/security/cve/CVE-2026-39833"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39835",
"url": "https://access.redhat.com/security/cve/CVE-2026-39835"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42151",
"url": "https://access.redhat.com/security/cve/CVE-2026-42151"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42499",
"url": "https://access.redhat.com/security/cve/CVE-2026-42499"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42508",
"url": "https://access.redhat.com/security/cve/CVE-2026-42508"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-46595",
"url": "https://access.redhat.com/security/cve/CVE-2026-46595"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_50888.json"
}
],
"title": "Red Hat Security Advisory: RHTAS 1.4.3 - CLI Stack Release",
"tracking": {
"current_release_date": "2026-08-22T02:17:06+00:00",
"generator": {
"date": "2026-08-22T02:17:06+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.16"
}
},
"id": "RHSA-2026:50888",
"initial_release_date": "2026-08-05T18:08:33+00:00",
"revision_history": [
{
"date": "2026-08-05T18:08:33+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-15T05:55:47+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-22T02:17:06+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Trusted Artifact Signer 1.4",
"product": {
"name": "Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:trusted_artifact_signer:1.4::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat Trusted Artifact Signer"
},
{
"branches": [
{
"category": "product_version",
"name": "conforma-cli-stack-v1-4@amd64_darwin",
"product": {
"name": "conforma-cli-stack-v1-4@amd64_darwin",
"product_id": "conforma-cli-stack-v1-4@amd64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/conforma-cli-stack-v1-4@1.4.3?filename=ec_darwin_amd64.tar.gz\u0026checksum=sha256%3Abd510871ddd70ad4c77eec429f8ca4161fa6f8016bf9b21109457657d95dd206\u0026download_url=https%3A%2F%2Fdevelopers.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "cosign-cli-stack-v1-4@amd64_darwin",
"product": {
"name": "cosign-cli-stack-v1-4@amd64_darwin",
"product_id": "cosign-cli-stack-v1-4@amd64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/cosign-cli-stack-v1-4@1.4.3?filename=cosign_darwin_amd64.tar.gz\u0026checksum=sha256%3A8ada7c9cb3128cca17ed34bf2c1cb2937b4a23597b655566e435ec38cd384353\u0026download_url=https%3A%2F%2Fdevelopers.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"product": {
"name": "fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"product_id": "fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/fetch-tsa-certs-cli-stack-v1-4@1.4.3?filename=fetch_tsa_certs_darwin_amd64.tar.gz\u0026checksum=sha256%3A38a6fefa4556a7ba4847569f1ca8387150ba7118bd03bee3c9829abf8d665ea5\u0026download_url=https%3A%2F%2Fdevelopers.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "gitsign-cli-stack-v1-4@amd64_darwin",
"product": {
"name": "gitsign-cli-stack-v1-4@amd64_darwin",
"product_id": "gitsign-cli-stack-v1-4@amd64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/gitsign-cli-stack-v1-4@1.4.3?filename=gitsign_cli_darwin_amd64.tar.gz\u0026checksum=sha256%3A8f0e7e990c9c5992ae02bbf0205ca679a65edf4a7f349443fce511c110a09171\u0026download_url=https%3A%2F%2Fdevelopers.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "model-transparency-cli-stack-v1-4@amd64_darwin",
"product": {
"name": "model-transparency-cli-stack-v1-4@amd64_darwin",
"product_id": "model-transparency-cli-stack-v1-4@amd64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/model-transparency-cli-stack-v1-4@1.4.3?filename=model_transparency_cli_darwin_amd64.tar.gz\u0026checksum=sha256%3A83fb045b349eb3f2c1c36949d6fa40c12d1a0e5d71b15284c77141725eec0497\u0026download_url=https%3A%2F%2Fdevelopers.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "rekor-cli-stack-v1-4@amd64_darwin",
"product": {
"name": "rekor-cli-stack-v1-4@amd64_darwin",
"product_id": "rekor-cli-stack-v1-4@amd64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/rekor-cli-stack-v1-4@1.4.3?filename=rekor_cli_darwin_amd64.tar.gz\u0026checksum=sha256%3Af16aeafac638580028087659b7f9ce4f61bcd53fb16138b1bab9ff5b08843748\u0026download_url=https%3A%2F%2Fdevelopers.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "trillian-cli-stack-v1-4@amd64_darwin",
"product": {
"name": "trillian-cli-stack-v1-4@amd64_darwin",
"product_id": "trillian-cli-stack-v1-4@amd64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/trillian-cli-stack-v1-4@1.4.3?filename=createtree_darwin_amd64.tar.gz\u0026checksum=sha256%3A2bd80e13a7c451009b57e9a5b3cdfbd9ae7f84a5b56957e19b57e2a22c1091ae\u0026download_url=https%3A%2F%2Fdevelopers.redhat.com%2Fproducts"
}
}
}
],
"category": "architecture",
"name": "amd64_darwin"
},
{
"branches": [
{
"category": "product_version",
"name": "conforma-cli-stack-v1-4@arm64_darwin",
"product": {
"name": "conforma-cli-stack-v1-4@arm64_darwin",
"product_id": "conforma-cli-stack-v1-4@arm64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/conforma-cli-stack-v1-4@1.4.3?filename=ec_darwin_arm64.tar.gz\u0026checksum=sha256%3Aa0d471228842a02917d01cedf6fc2a64c9198d08e17d22e149ea4188ca4da3ea\u0026download_url=https%3A%2F%2Fdevelopers.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "cosign-cli-stack-v1-4@arm64_darwin",
"product": {
"name": "cosign-cli-stack-v1-4@arm64_darwin",
"product_id": "cosign-cli-stack-v1-4@arm64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/cosign-cli-stack-v1-4@1.4.3?filename=cosign_darwin_arm64.tar.gz\u0026checksum=sha256%3A2b3901b9cb7f02ad5a3d449a6de2d70a2ed9e3069d01ac819becd0590a8bdcdd\u0026download_url=https%3A%2F%2Fdevelopers.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"product": {
"name": "fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"product_id": "fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/fetch-tsa-certs-cli-stack-v1-4@1.4.3?filename=fetch_tsa_certs_darwin_arm64.tar.gz\u0026checksum=sha256%3A158a23a2839854bb8e26133a8916acad1bb305d8defb9b3d540b8b89004fa240\u0026download_url=https%3A%2F%2Fdevelopers.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "gitsign-cli-stack-v1-4@arm64_darwin",
"product": {
"name": "gitsign-cli-stack-v1-4@arm64_darwin",
"product_id": "gitsign-cli-stack-v1-4@arm64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/gitsign-cli-stack-v1-4@1.4.3?filename=gitsign_cli_darwin_arm64.tar.gz\u0026checksum=sha256%3Adbdb81bb2ba208c3b15025289d4f1813b1e09c9b229f71e82201ec2caf86f751\u0026download_url=https%3A%2F%2Fdevelopers.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "model-transparency-cli-stack-v1-4@arm64_darwin",
"product": {
"name": "model-transparency-cli-stack-v1-4@arm64_darwin",
"product_id": "model-transparency-cli-stack-v1-4@arm64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/model-transparency-cli-stack-v1-4@1.4.3?filename=model_transparency_cli_darwin_arm64.tar.gz\u0026checksum=sha256%3A5d1379f5f38ea788dfb05ac5c5ee1a979bf5be8bbfa1357962a2be2b182bd784\u0026download_url=https%3A%2F%2Fdevelopers.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "rekor-cli-stack-v1-4@arm64_darwin",
"product": {
"name": "rekor-cli-stack-v1-4@arm64_darwin",
"product_id": "rekor-cli-stack-v1-4@arm64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/rekor-cli-stack-v1-4@1.4.3?filename=rekor_cli_darwin_arm64.tar.gz\u0026checksum=sha256%3A8d2a32ff42f82f7839cb59f0dcddf12882a0e0132fbd6c2c94dacc67e1fadd62\u0026download_url=https%3A%2F%2Fdevelopers.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "trillian-cli-stack-v1-4@arm64_darwin",
"product": {
"name": "trillian-cli-stack-v1-4@arm64_darwin",
"product_id": "trillian-cli-stack-v1-4@arm64_darwin",
"product_identification_helper": {
"purl": "pkg:generic/trillian-cli-stack-v1-4@1.4.3?filename=createtree_darwin_arm64.tar.gz\u0026checksum=sha256%3A147842ba7f5d7d777a9a17a93ec11a06439f0c8fa3aa3bb93e7905e7bb5378b1\u0026download_url=https%3A%2F%2Fdevelopers.redhat.com%2Fproducts"
}
}
}
],
"category": "architecture",
"name": "arm64_darwin"
},
{
"branches": [
{
"category": "product_version",
"name": "conforma-cli-stack-v1-4@amd64",
"product": {
"name": "conforma-cli-stack-v1-4@amd64",
"product_id": "conforma-cli-stack-v1-4@amd64",
"product_identification_helper": {
"purl": "pkg:generic/conforma-cli-stack-v1-4@1.4.3?filename=ec_linux_amd64.tar.gz\u0026checksum=sha256%3Afe850ff78ccd6a2536761252abe869b12e8555099b903088fb77415db810faeb\u0026download_url=https%3A%2F%2Fdevelopers.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "cosign-cli-stack-v1-4@amd64",
"product": {
"name": "cosign-cli-stack-v1-4@amd64",
"product_id": "cosign-cli-stack-v1-4@amd64",
"product_identification_helper": {
"purl": "pkg:generic/cosign-cli-stack-v1-4@1.4.3?filename=cosign_linux_amd64.tar.gz\u0026checksum=sha256%3Ab5ad8965d128b0362f978262a8cec0b97e5b8a017cc9f3bdf792d481f39cdca9\u0026download_url=https%3A%2F%2Fdevelopers.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "fetch-tsa-certs-cli-stack-v1-4@amd64",
"product": {
"name": "fetch-tsa-certs-cli-stack-v1-4@amd64",
"product_id": "fetch-tsa-certs-cli-stack-v1-4@amd64",
"product_identification_helper": {
"purl": "pkg:generic/fetch-tsa-certs-cli-stack-v1-4@1.4.3?filename=fetch_tsa_certs_linux_amd64.tar.gz\u0026checksum=sha256%3A7bcaae762c0ae4bc631e055469984b58a6a3f63178919c783c64b04800054d3c\u0026download_url=https%3A%2F%2Fdevelopers.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "gitsign-cli-stack-v1-4@amd64",
"product": {
"name": "gitsign-cli-stack-v1-4@amd64",
"product_id": "gitsign-cli-stack-v1-4@amd64",
"product_identification_helper": {
"purl": "pkg:generic/gitsign-cli-stack-v1-4@1.4.3?filename=gitsign_cli_linux_amd64.tar.gz\u0026checksum=sha256%3A092ff1a20e6b3a586c45f15322c234c509c907013a6d281e61b37dbdf8d08da6\u0026download_url=https%3A%2F%2Fdevelopers.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "model-transparency-cli-stack-v1-4@amd64",
"product": {
"name": "model-transparency-cli-stack-v1-4@amd64",
"product_id": "model-transparency-cli-stack-v1-4@amd64",
"product_identification_helper": {
"purl": "pkg:generic/model-transparency-cli-stack-v1-4@1.4.3?filename=model_transparency_cli_linux_amd64.tar.gz\u0026checksum=sha256%3A644c135df58d8349afd7ef6161939a6e32d0378fe3ddd79e8ebc2e6e121c0a7c\u0026download_url=https%3A%2F%2Fdevelopers.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "rekor-cli-stack-v1-4@amd64",
"product": {
"name": "rekor-cli-stack-v1-4@amd64",
"product_id": "rekor-cli-stack-v1-4@amd64",
"product_identification_helper": {
"purl": "pkg:generic/rekor-cli-stack-v1-4@1.4.3?filename=rekor_cli_linux_amd64.tar.gz\u0026checksum=sha256%3Ac2cd95304bf21ddb404f75d2752edd9b0ac1dcacb5d00bc33e9a1e50a60b8263\u0026download_url=https%3A%2F%2Fdevelopers.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "trillian-cli-stack-v1-4@amd64",
"product": {
"name": "trillian-cli-stack-v1-4@amd64",
"product_id": "trillian-cli-stack-v1-4@amd64",
"product_identification_helper": {
"purl": "pkg:generic/trillian-cli-stack-v1-4@1.4.3?filename=createtree_linux_amd64.tar.gz\u0026checksum=sha256%3A8e7969ad725e923cd4b5106cd9c001274b2f599c147f94ab88c7983e77779518\u0026download_url=https%3A%2F%2Fdevelopers.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "tuftool-cli-stack-v1-4@amd64",
"product": {
"name": "tuftool-cli-stack-v1-4@amd64",
"product_id": "tuftool-cli-stack-v1-4@amd64",
"product_identification_helper": {
"purl": "pkg:generic/tuftool-cli-stack-v1-4@1.4.3?filename=tuftool_linux_amd64.tar.gz\u0026checksum=sha256%3A99bac870e85db0b22ed0881c93e811cf70eed102b47d41a3a3c1cae7e0da6f24\u0026download_url=https%3A%2F%2Fdevelopers.redhat.com%2Fproducts"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "conforma-cli-stack-v1-4@arm64",
"product": {
"name": "conforma-cli-stack-v1-4@arm64",
"product_id": "conforma-cli-stack-v1-4@arm64",
"product_identification_helper": {
"purl": "pkg:generic/conforma-cli-stack-v1-4@1.4.3?filename=ec_linux_arm64.tar.gz\u0026checksum=sha256%3A23de179f43a4145d1b9fa681e0f15b681d7a5bc3f2a5d4237db305b7ecde4f75\u0026download_url=https%3A%2F%2Fdevelopers.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "cosign-cli-stack-v1-4@arm64",
"product": {
"name": "cosign-cli-stack-v1-4@arm64",
"product_id": "cosign-cli-stack-v1-4@arm64",
"product_identification_helper": {
"purl": "pkg:generic/cosign-cli-stack-v1-4@1.4.3?filename=cosign_linux_arm64.tar.gz\u0026checksum=sha256%3A92016ad84dd2cc43e8cd4d4a12dc5c09f9c5917d72058d4a8ec4b80f57721552\u0026download_url=https%3A%2F%2Fdevelopers.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "fetch-tsa-certs-cli-stack-v1-4@arm64",
"product": {
"name": "fetch-tsa-certs-cli-stack-v1-4@arm64",
"product_id": "fetch-tsa-certs-cli-stack-v1-4@arm64",
"product_identification_helper": {
"purl": "pkg:generic/fetch-tsa-certs-cli-stack-v1-4@1.4.3?filename=fetch_tsa_certs_linux_arm64.tar.gz\u0026checksum=sha256%3Aacf168c048297dd0845a9258ff05122b5ac04133983ec12185889fa4e24c949e\u0026download_url=https%3A%2F%2Fdevelopers.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "gitsign-cli-stack-v1-4@arm64",
"product": {
"name": "gitsign-cli-stack-v1-4@arm64",
"product_id": "gitsign-cli-stack-v1-4@arm64",
"product_identification_helper": {
"purl": "pkg:generic/gitsign-cli-stack-v1-4@1.4.3?filename=gitsign_cli_linux_arm64.tar.gz\u0026checksum=sha256%3Af1d2cd7760f778bdde8a93fce683b01a5d35b75a5e70244ef54706be23d64e88\u0026download_url=https%3A%2F%2Fdevelopers.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "model-transparency-cli-stack-v1-4@arm64",
"product": {
"name": "model-transparency-cli-stack-v1-4@arm64",
"product_id": "model-transparency-cli-stack-v1-4@arm64",
"product_identification_helper": {
"purl": "pkg:generic/model-transparency-cli-stack-v1-4@1.4.3?filename=model_transparency_cli_linux_arm64.tar.gz\u0026checksum=sha256%3A153247e5c490219a2d2c64b1dd109c273d31b08fec64e499b0da6d81d5a426b2\u0026download_url=https%3A%2F%2Fdevelopers.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "rekor-cli-stack-v1-4@arm64",
"product": {
"name": "rekor-cli-stack-v1-4@arm64",
"product_id": "rekor-cli-stack-v1-4@arm64",
"product_identification_helper": {
"purl": "pkg:generic/rekor-cli-stack-v1-4@1.4.3?filename=rekor_cli_linux_arm64.tar.gz\u0026checksum=sha256%3Aff0c33eb7f4e82f523a1f84591f42b58319f146cdf486e5f303cc1d7d102d139\u0026download_url=https%3A%2F%2Fdevelopers.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "trillian-cli-stack-v1-4@arm64",
"product": {
"name": "trillian-cli-stack-v1-4@arm64",
"product_id": "trillian-cli-stack-v1-4@arm64",
"product_identification_helper": {
"purl": "pkg:generic/trillian-cli-stack-v1-4@1.4.3?filename=createtree_linux_arm64.tar.gz\u0026checksum=sha256%3Ab272964a73e058251845e12b2bc07f4398d391a7a642e4d3fdf003d7e3651d0a\u0026download_url=https%3A%2F%2Fdevelopers.redhat.com%2Fproducts"
}
}
}
],
"category": "architecture",
"name": "arm64"
},
{
"branches": [
{
"category": "product_version",
"name": "conforma-cli-stack-v1-4@ppc64le",
"product": {
"name": "conforma-cli-stack-v1-4@ppc64le",
"product_id": "conforma-cli-stack-v1-4@ppc64le",
"product_identification_helper": {
"purl": "pkg:generic/conforma-cli-stack-v1-4@1.4.3?filename=ec_linux_ppc64le.tar.gz\u0026checksum=sha256%3A43c5e32c8b05224fcdb8fd4e02fc95a0c45c697ce02fe845cbc6c0b65011914b\u0026download_url=https%3A%2F%2Fdevelopers.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "cosign-cli-stack-v1-4@ppc64le",
"product": {
"name": "cosign-cli-stack-v1-4@ppc64le",
"product_id": "cosign-cli-stack-v1-4@ppc64le",
"product_identification_helper": {
"purl": "pkg:generic/cosign-cli-stack-v1-4@1.4.3?filename=cosign_linux_ppc64le.tar.gz\u0026checksum=sha256%3Ace54373736d56eeb9fd9196e4e8d154a19e0c1be4f79a7e49c45189204b8be8c\u0026download_url=https%3A%2F%2Fdevelopers.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"product": {
"name": "fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"product_id": "fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"product_identification_helper": {
"purl": "pkg:generic/fetch-tsa-certs-cli-stack-v1-4@1.4.3?filename=fetch_tsa_certs_linux_ppc64le.tar.gz\u0026checksum=sha256%3A3d26686ce8a19183d0c1594d9fba01502db3d5bbf314f03220045546ebff21b9\u0026download_url=https%3A%2F%2Fdevelopers.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "gitsign-cli-stack-v1-4@ppc64le",
"product": {
"name": "gitsign-cli-stack-v1-4@ppc64le",
"product_id": "gitsign-cli-stack-v1-4@ppc64le",
"product_identification_helper": {
"purl": "pkg:generic/gitsign-cli-stack-v1-4@1.4.3?filename=gitsign_cli_linux_ppc64le.tar.gz\u0026checksum=sha256%3Ab36b2473abf86da8d1946d7f1cfc98fc915c824e674134150da42fe2c909cb40\u0026download_url=https%3A%2F%2Fdevelopers.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "model-transparency-cli-stack-v1-4@ppc64le",
"product": {
"name": "model-transparency-cli-stack-v1-4@ppc64le",
"product_id": "model-transparency-cli-stack-v1-4@ppc64le",
"product_identification_helper": {
"purl": "pkg:generic/model-transparency-cli-stack-v1-4@1.4.3?filename=model_transparency_cli_linux_ppc64le.tar.gz\u0026checksum=sha256%3Ac6a6924aadf33d43839b09a41cc99c6552add5cca758c30de2715c4c2d39c7c6\u0026download_url=https%3A%2F%2Fdevelopers.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "rekor-cli-stack-v1-4@ppc64le",
"product": {
"name": "rekor-cli-stack-v1-4@ppc64le",
"product_id": "rekor-cli-stack-v1-4@ppc64le",
"product_identification_helper": {
"purl": "pkg:generic/rekor-cli-stack-v1-4@1.4.3?filename=rekor_cli_linux_ppc64le.tar.gz\u0026checksum=sha256%3Abcc90bfef837fe04e832ba21034aaba9419e72458899dd7929ef117c739d83ba\u0026download_url=https%3A%2F%2Fdevelopers.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "trillian-cli-stack-v1-4@ppc64le",
"product": {
"name": "trillian-cli-stack-v1-4@ppc64le",
"product_id": "trillian-cli-stack-v1-4@ppc64le",
"product_identification_helper": {
"purl": "pkg:generic/trillian-cli-stack-v1-4@1.4.3?filename=createtree_linux_ppc64le.tar.gz\u0026checksum=sha256%3Af54b20dafe80d52dbd0b2ac9feeef7dd469312b8e5a430669627bb7b22757f9a\u0026download_url=https%3A%2F%2Fdevelopers.redhat.com%2Fproducts"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "conforma-cli-stack-v1-4@s390x",
"product": {
"name": "conforma-cli-stack-v1-4@s390x",
"product_id": "conforma-cli-stack-v1-4@s390x",
"product_identification_helper": {
"purl": "pkg:generic/conforma-cli-stack-v1-4@1.4.3?filename=ec_linux_s390x.tar.gz\u0026checksum=sha256%3A899d90fa1e4004deecfd748edc9bc08a11b81f0e1918248288d783c0779dfaa1\u0026download_url=https%3A%2F%2Fdevelopers.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "cosign-cli-stack-v1-4@s390x",
"product": {
"name": "cosign-cli-stack-v1-4@s390x",
"product_id": "cosign-cli-stack-v1-4@s390x",
"product_identification_helper": {
"purl": "pkg:generic/cosign-cli-stack-v1-4@1.4.3?filename=cosign_linux_s390x.tar.gz\u0026checksum=sha256%3Abda606880c51943c4d359dfb0dab673f5054ea3cfbe0bf7f60c080992ccba6cb\u0026download_url=https%3A%2F%2Fdevelopers.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "fetch-tsa-certs-cli-stack-v1-4@s390x",
"product": {
"name": "fetch-tsa-certs-cli-stack-v1-4@s390x",
"product_id": "fetch-tsa-certs-cli-stack-v1-4@s390x",
"product_identification_helper": {
"purl": "pkg:generic/fetch-tsa-certs-cli-stack-v1-4@1.4.3?filename=fetch_tsa_certs_linux_s390x.tar.gz\u0026checksum=sha256%3A3fc5432f460b74b4c9fd34bc8ee53dcbe75f21cd507f604a97245e5a6099eeec\u0026download_url=https%3A%2F%2Fdevelopers.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "gitsign-cli-stack-v1-4@s390x",
"product": {
"name": "gitsign-cli-stack-v1-4@s390x",
"product_id": "gitsign-cli-stack-v1-4@s390x",
"product_identification_helper": {
"purl": "pkg:generic/gitsign-cli-stack-v1-4@1.4.3?filename=gitsign_cli_linux_s390x.tar.gz\u0026checksum=sha256%3Ace7d0514a83e7c3de696c2c7530a102f43ab81443c96c335e0c9b717aae704f6\u0026download_url=https%3A%2F%2Fdevelopers.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "model-transparency-cli-stack-v1-4@s390x",
"product": {
"name": "model-transparency-cli-stack-v1-4@s390x",
"product_id": "model-transparency-cli-stack-v1-4@s390x",
"product_identification_helper": {
"purl": "pkg:generic/model-transparency-cli-stack-v1-4@1.4.3?filename=model_transparency_cli_linux_s390x.tar.gz\u0026checksum=sha256%3Afe19f79e90f4d3f73d37b8cd51bba6574c9e365b8dc147bdd92f2623cf223053\u0026download_url=https%3A%2F%2Fdevelopers.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "rekor-cli-stack-v1-4@s390x",
"product": {
"name": "rekor-cli-stack-v1-4@s390x",
"product_id": "rekor-cli-stack-v1-4@s390x",
"product_identification_helper": {
"purl": "pkg:generic/rekor-cli-stack-v1-4@1.4.3?filename=rekor_cli_linux_s390x.tar.gz\u0026checksum=sha256%3A293ed031b6a8265b30dea4c61ea793b98f783c1f5919bba9d89e0807df181dce\u0026download_url=https%3A%2F%2Fdevelopers.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "trillian-cli-stack-v1-4@s390x",
"product": {
"name": "trillian-cli-stack-v1-4@s390x",
"product_id": "trillian-cli-stack-v1-4@s390x",
"product_identification_helper": {
"purl": "pkg:generic/trillian-cli-stack-v1-4@1.4.3?filename=createtree_linux_s390x.tar.gz\u0026checksum=sha256%3Ad14b422dd794265f466b50df38052d6b65ccc44758d6970b8aaf63def82a5238\u0026download_url=https%3A%2F%2Fdevelopers.redhat.com%2Fproducts"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "conforma-cli-stack-v1-4@amd64_windows",
"product": {
"name": "conforma-cli-stack-v1-4@amd64_windows",
"product_id": "conforma-cli-stack-v1-4@amd64_windows",
"product_identification_helper": {
"purl": "pkg:generic/conforma-cli-stack-v1-4@1.4.3?filename=ec_windows_amd64.zip\u0026checksum=sha256%3A31be5f7fd0a135f1251ba47c3772dd2d3804b568bee4ddb644284d1a5ba46e54\u0026download_url=https%3A%2F%2Fdevelopers.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "cosign-cli-stack-v1-4@amd64_windows",
"product": {
"name": "cosign-cli-stack-v1-4@amd64_windows",
"product_id": "cosign-cli-stack-v1-4@amd64_windows",
"product_identification_helper": {
"purl": "pkg:generic/cosign-cli-stack-v1-4@1.4.3?filename=cosign_windows_amd64.zip\u0026checksum=sha256%3A988f094e519e8e6f6f19d73e132a4d78e85d552d6c18ed93eb387284e02bb91c\u0026download_url=https%3A%2F%2Fdevelopers.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"product": {
"name": "fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"product_id": "fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"product_identification_helper": {
"purl": "pkg:generic/fetch-tsa-certs-cli-stack-v1-4@1.4.3?filename=fetch_tsa_certs_windows_amd64.zip\u0026checksum=sha256%3A8144083b1b7cda5bf4c4514f695298dd9db8337f012eceb50ad55791a5aca14f\u0026download_url=https%3A%2F%2Fdevelopers.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "gitsign-cli-stack-v1-4@amd64_windows",
"product": {
"name": "gitsign-cli-stack-v1-4@amd64_windows",
"product_id": "gitsign-cli-stack-v1-4@amd64_windows",
"product_identification_helper": {
"purl": "pkg:generic/gitsign-cli-stack-v1-4@1.4.3?filename=gitsign_cli_windows_amd64.zip\u0026checksum=sha256%3Ac5caaa0e3d970b115e8882ca559a3c646876b1b8715d2b1595893069d148a975\u0026download_url=https%3A%2F%2Fdevelopers.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "model-transparency-cli-stack-v1-4@amd64_windows",
"product": {
"name": "model-transparency-cli-stack-v1-4@amd64_windows",
"product_id": "model-transparency-cli-stack-v1-4@amd64_windows",
"product_identification_helper": {
"purl": "pkg:generic/model-transparency-cli-stack-v1-4@1.4.3?filename=model_transparency_cli_windows_amd64.exe.gz\u0026checksum=sha256%3Ae3069473632f310db5789c9aa163357be419fd63e9207ce172eb4983ad238ce8\u0026download_url=https%3A%2F%2Fdevelopers.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "rekor-cli-stack-v1-4@amd64_windows",
"product": {
"name": "rekor-cli-stack-v1-4@amd64_windows",
"product_id": "rekor-cli-stack-v1-4@amd64_windows",
"product_identification_helper": {
"purl": "pkg:generic/rekor-cli-stack-v1-4@1.4.3?filename=rekor_cli_windows_amd64.zip\u0026checksum=sha256%3Aa693c0e3c59eb810900e3108f5917c6811040dfea4dbe7546dabadc77308d023\u0026download_url=https%3A%2F%2Fdevelopers.redhat.com%2Fproducts"
}
}
},
{
"category": "product_version",
"name": "trillian-cli-stack-v1-4@amd64_windows",
"product": {
"name": "trillian-cli-stack-v1-4@amd64_windows",
"product_id": "trillian-cli-stack-v1-4@amd64_windows",
"product_identification_helper": {
"purl": "pkg:generic/trillian-cli-stack-v1-4@1.4.3?filename=createtree_windows_amd64.zip\u0026checksum=sha256%3Ab12859b13938626a1139a4afc3b202a80ece5ffd72c51da782f7e0516733dd6c\u0026download_url=https%3A%2F%2Fdevelopers.redhat.com%2Fproducts"
}
}
}
],
"category": "architecture",
"name": "amd64_windows"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "conforma-cli-stack-v1-4@amd64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64"
},
"product_reference": "conforma-cli-stack-v1-4@amd64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "conforma-cli-stack-v1-4@amd64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin"
},
"product_reference": "conforma-cli-stack-v1-4@amd64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "conforma-cli-stack-v1-4@amd64_windows as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows"
},
"product_reference": "conforma-cli-stack-v1-4@amd64_windows",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "conforma-cli-stack-v1-4@arm64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64"
},
"product_reference": "conforma-cli-stack-v1-4@arm64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "conforma-cli-stack-v1-4@arm64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin"
},
"product_reference": "conforma-cli-stack-v1-4@arm64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "conforma-cli-stack-v1-4@ppc64le as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le"
},
"product_reference": "conforma-cli-stack-v1-4@ppc64le",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "conforma-cli-stack-v1-4@s390x as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
},
"product_reference": "conforma-cli-stack-v1-4@s390x",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cosign-cli-stack-v1-4@amd64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64"
},
"product_reference": "cosign-cli-stack-v1-4@amd64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cosign-cli-stack-v1-4@amd64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin"
},
"product_reference": "cosign-cli-stack-v1-4@amd64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cosign-cli-stack-v1-4@amd64_windows as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows"
},
"product_reference": "cosign-cli-stack-v1-4@amd64_windows",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cosign-cli-stack-v1-4@arm64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64"
},
"product_reference": "cosign-cli-stack-v1-4@arm64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cosign-cli-stack-v1-4@arm64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin"
},
"product_reference": "cosign-cli-stack-v1-4@arm64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cosign-cli-stack-v1-4@ppc64le as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le"
},
"product_reference": "cosign-cli-stack-v1-4@ppc64le",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "cosign-cli-stack-v1-4@s390x as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x"
},
"product_reference": "cosign-cli-stack-v1-4@s390x",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fetch-tsa-certs-cli-stack-v1-4@amd64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64"
},
"product_reference": "fetch-tsa-certs-cli-stack-v1-4@amd64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fetch-tsa-certs-cli-stack-v1-4@amd64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin"
},
"product_reference": "fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fetch-tsa-certs-cli-stack-v1-4@amd64_windows as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows"
},
"product_reference": "fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fetch-tsa-certs-cli-stack-v1-4@arm64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64"
},
"product_reference": "fetch-tsa-certs-cli-stack-v1-4@arm64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fetch-tsa-certs-cli-stack-v1-4@arm64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin"
},
"product_reference": "fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fetch-tsa-certs-cli-stack-v1-4@ppc64le as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le"
},
"product_reference": "fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fetch-tsa-certs-cli-stack-v1-4@s390x as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x"
},
"product_reference": "fetch-tsa-certs-cli-stack-v1-4@s390x",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gitsign-cli-stack-v1-4@amd64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64"
},
"product_reference": "gitsign-cli-stack-v1-4@amd64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gitsign-cli-stack-v1-4@amd64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin"
},
"product_reference": "gitsign-cli-stack-v1-4@amd64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gitsign-cli-stack-v1-4@amd64_windows as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows"
},
"product_reference": "gitsign-cli-stack-v1-4@amd64_windows",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gitsign-cli-stack-v1-4@arm64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64"
},
"product_reference": "gitsign-cli-stack-v1-4@arm64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gitsign-cli-stack-v1-4@arm64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin"
},
"product_reference": "gitsign-cli-stack-v1-4@arm64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gitsign-cli-stack-v1-4@ppc64le as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le"
},
"product_reference": "gitsign-cli-stack-v1-4@ppc64le",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "gitsign-cli-stack-v1-4@s390x as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x"
},
"product_reference": "gitsign-cli-stack-v1-4@s390x",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "model-transparency-cli-stack-v1-4@amd64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64"
},
"product_reference": "model-transparency-cli-stack-v1-4@amd64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "model-transparency-cli-stack-v1-4@amd64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin"
},
"product_reference": "model-transparency-cli-stack-v1-4@amd64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "model-transparency-cli-stack-v1-4@amd64_windows as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows"
},
"product_reference": "model-transparency-cli-stack-v1-4@amd64_windows",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "model-transparency-cli-stack-v1-4@arm64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64"
},
"product_reference": "model-transparency-cli-stack-v1-4@arm64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "model-transparency-cli-stack-v1-4@arm64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin"
},
"product_reference": "model-transparency-cli-stack-v1-4@arm64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "model-transparency-cli-stack-v1-4@ppc64le as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le"
},
"product_reference": "model-transparency-cli-stack-v1-4@ppc64le",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "model-transparency-cli-stack-v1-4@s390x as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x"
},
"product_reference": "model-transparency-cli-stack-v1-4@s390x",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rekor-cli-stack-v1-4@amd64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64"
},
"product_reference": "rekor-cli-stack-v1-4@amd64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rekor-cli-stack-v1-4@amd64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin"
},
"product_reference": "rekor-cli-stack-v1-4@amd64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rekor-cli-stack-v1-4@amd64_windows as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows"
},
"product_reference": "rekor-cli-stack-v1-4@amd64_windows",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rekor-cli-stack-v1-4@arm64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64"
},
"product_reference": "rekor-cli-stack-v1-4@arm64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rekor-cli-stack-v1-4@arm64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin"
},
"product_reference": "rekor-cli-stack-v1-4@arm64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rekor-cli-stack-v1-4@ppc64le as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le"
},
"product_reference": "rekor-cli-stack-v1-4@ppc64le",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rekor-cli-stack-v1-4@s390x as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x"
},
"product_reference": "rekor-cli-stack-v1-4@s390x",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "trillian-cli-stack-v1-4@amd64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64"
},
"product_reference": "trillian-cli-stack-v1-4@amd64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "trillian-cli-stack-v1-4@amd64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin"
},
"product_reference": "trillian-cli-stack-v1-4@amd64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "trillian-cli-stack-v1-4@amd64_windows as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows"
},
"product_reference": "trillian-cli-stack-v1-4@amd64_windows",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "trillian-cli-stack-v1-4@arm64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64"
},
"product_reference": "trillian-cli-stack-v1-4@arm64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "trillian-cli-stack-v1-4@arm64_darwin as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin"
},
"product_reference": "trillian-cli-stack-v1-4@arm64_darwin",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "trillian-cli-stack-v1-4@ppc64le as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le"
},
"product_reference": "trillian-cli-stack-v1-4@ppc64le",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "trillian-cli-stack-v1-4@s390x as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x"
},
"product_reference": "trillian-cli-stack-v1-4@s390x",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "tuftool-cli-stack-v1-4@amd64 as a component of Red Hat Trusted Artifact Signer 1.4",
"product_id": "Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
},
"product_reference": "tuftool-cli-stack-v1-4@amd64",
"relates_to_product_reference": "Red Hat Trusted Artifact Signer 1.4"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-27145",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-06-02T23:01:08.992540+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2484207"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `crypto/x509` package of `golang`. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name (SAN) entries. The certificate verification process, specifically the `VerifyHostname` function, incurs excessive computational overhead due to repeated string operations when processing these entries. This can lead to a significant performance degradation or unresponsiveness of systems validating such certificates.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in the Go standard library crypto/x509 package. When verifying a TLS certificate hostname, VerifyHostname processed each DNS Subject Alternative Name (SAN) entry in a loop and repeatedly split the candidate hostname on \".\" characters. For certificates with a very large DNS SAN list, CPU use could grow quadratically with the number of SAN entries and hostname labels. Because hostname verification runs before the certificate chain is built, this overhead can occur even when the certificate is not trusted.\n\nRed Hat rates this issue as Important. It affects Red Hat products that include the Go standard library crypto/x509 code from an affected Go toolchain version (before Go 1.25.11, or from Go 1.26.0 through Go 1.26.3). Applications and container images built with a fixed Go release (1.25.11 or later, or 1.26.4 or later) are not affected. Community distributions such as Fedora are also affected.\n\nUpstream fix: Go 1.25.11 and Go 1.26.4 (GO-2026-5037).",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27145"
},
{
"category": "external",
"summary": "RHBZ#2484207",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484207"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27145",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27145"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27145",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27145"
},
{
"category": "external",
"summary": "https://go.dev/cl/783621",
"url": "https://go.dev/cl/783621"
},
{
"category": "external",
"summary": "https://go.dev/issue/79694",
"url": "https://go.dev/issue/79694"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw",
"url": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5037",
"url": "https://pkg.go.dev/vuln/GO-2026-5037"
}
],
"release_date": "2026-06-02T22:01:36.954000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-05T18:08:33+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:50888"
},
{
"category": "workaround",
"details": "A flaw was found in the Go standard library crypto/x509 package. When verifying a TLS certificate hostname, VerifyHostname processed each DNS Subject Alternative Name (SAN) entry in a loop and repeatedly split the candidate hostname on \".\" characters. For certificates with a very large DNS SAN list, CPU use could grow quadratically with the number of SAN entries and hostname labels. Because hostname verification runs before the certificate chain is built, this overhead can occur even when the certificate is not trusted.\n\nRed Hat rates this issue as Important. It affects Red Hat products that include the Go standard library crypto/x509 code from an affected Go toolchain version (before Go 1.25.11, or from Go 1.26.0 through Go 1.26.3). Applications and container images built with a fixed Go release (1.25.11 or later, or 1.26.4 or later) are not affected. Community distributions such as Fedora are also affected.\n\nUpstream fix: Go 1.25.11 and Go 1.26.4 (GO-2026-5037).",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries"
},
{
"cve": "CVE-2026-33811",
"cwe": {
"id": "CWE-1341",
"name": "Multiple Releases of Same Resource or Handle"
},
"discovery_date": "2026-05-07T20:01:34.913869+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467822"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net` package, affecting applications configured to use the `cgo` DNS resolver. A remote attacker could trigger a double-free memory error by providing a very long CNAME response, leading to a crash of the vulnerable application and impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "RHBZ#2467822",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467822"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33811",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33811"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://go.dev/cl/767860",
"url": "https://go.dev/cl/767860"
},
{
"category": "external",
"summary": "https://go.dev/issue/78803",
"url": "https://go.dev/issue/78803"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4981",
"url": "https://pkg.go.dev/vuln/GO-2026-4981"
}
],
"release_date": "2026-05-07T19:41:19.285000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-05T18:08:33+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:50888"
},
{
"category": "workaround",
"details": "To mitigate this issue, applications can be configured to use the pure Go DNS resolver instead of the `cgo` DNS resolver. This can be achieved by setting the `GODEBUG` environment variable to `netdns=go`. For example, to run a Go application with this mitigation: `GODEBUG=netdns=go /path/to/your/go/application`. This change may require restarting affected applications or services to take effect. Users should verify that this change does not negatively impact DNS resolution for their specific application environment.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME"
},
{
"cve": "CVE-2026-39820",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-05-07T20:01:27.800929+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467820"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net/mail` package. Applications processing untrusted email inputs via `ParseAddress`, `ParseAddressList`, or `ParseDate` functions are susceptible to excessive resource consumption, which can lead to service unavailability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39820"
},
{
"category": "external",
"summary": "RHBZ#2467820",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467820"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39820",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39820"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820"
},
{
"category": "external",
"summary": "https://go.dev/cl/759940",
"url": "https://go.dev/cl/759940"
},
{
"category": "external",
"summary": "https://go.dev/issue/78566",
"url": "https://go.dev/issue/78566"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4986",
"url": "https://pkg.go.dev/vuln/GO-2026-4986"
}
],
"release_date": "2026-05-07T19:41:19.854000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-05T18:08:33+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:50888"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs"
},
{
"cve": "CVE-2026-39821",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-05-22T16:00:52.844126+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480756"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/net/idna is vulnerable to privilege escalation through incorrect Punycode label handling in ToASCII and ToUnicode. An attacker who can supply a Punycode hostname that passes an ASCII-only authorization check may have it normalized to a restricted ASCII name the application intended to block. Red Hat exposure is broad across products shipping the Go toolchain or bundling golang.org/x/net, including RHEL and RHEL-AI golang RPMs, hummingbird Go runtimes, OpenShift and ODF container builds, and Ceph/OpenShift components compiled against affected x/net versions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "RHBZ#2480756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39821",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39821"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://go.dev/cl/767220",
"url": "https://go.dev/cl/767220"
},
{
"category": "external",
"summary": "https://go.dev/issue/78760",
"url": "https://go.dev/issue/78760"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5026",
"url": "https://pkg.go.dev/vuln/GO-2026-5026"
}
],
"release_date": "2026-05-22T15:01:21.462000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-05T18:08:33+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:50888"
},
{
"category": "workaround",
"details": "Upgrade to a fixed golang.org/x/net release that includes the idna correction, via updated golang or dependent package rebuilds.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing"
},
{
"cve": "CVE-2026-39828",
"cwe": {
"id": "CWE-281",
"name": "Improper Preservation of Permissions"
},
"discovery_date": "2026-05-22T04:01:46.775641+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480687"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote attacker could exploit this vulnerability when an SSH server authentication callback returned a PartialSuccessError with non-nil permissions. This flaw caused these permissions to be silently discarded, potentially bypassing certificate restrictions, such as a force-command, after a second authentication factor succeeded. This could lead to unauthorized command execution or access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important security flaw in the `golang.org/x/crypto/ssh` library. When an SSH server utilizing this library is configured with specific authentication callbacks that return a `PartialSuccessError` with non-nil permissions, an attacker could bypass intended certificate restrictions, such as `force-command`. This bypass could lead to unauthorized command execution or access on affected Red Hat systems configured with multi-factor authentication and certificate-based access controls.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39828"
},
{
"category": "external",
"summary": "RHBZ#2480687",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480687"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39828",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39828"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39828",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39828"
},
{
"category": "external",
"summary": "https://go.dev/cl/781621",
"url": "https://go.dev/cl/781621"
},
{
"category": "external",
"summary": "https://go.dev/issue/79562",
"url": "https://go.dev/issue/79562"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5014",
"url": "https://pkg.go.dev/vuln/GO-2026-5014"
}
],
"release_date": "2026-05-22T02:31:26.883000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-05T18:08:33+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:50888"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions"
},
{
"cve": "CVE-2026-39829",
"cwe": {
"id": "CWE-1284",
"name": "Improper Validation of Specified Quantity in Input"
},
"discovery_date": "2026-05-22T04:01:30.092249+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480681"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during public key authentication. Successful exploitation could lead to a denial of service (DoS) due to prolonged CPU consumption during signature verification.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in golang.org/x/crypto/ssh is rated as Important. An unauthenticated remote attacker could trigger a denial of service by providing a specially crafted public key with excessively large parameters during SSH public key authentication. This could lead to prolonged CPU consumption on the server, impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39829"
},
{
"category": "external",
"summary": "RHBZ#2480681",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480681"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39829",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39829"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39829",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39829"
},
{
"category": "external",
"summary": "https://go.dev/cl/781641",
"url": "https://go.dev/cl/781641"
},
{
"category": "external",
"summary": "https://go.dev/cl/781661",
"url": "https://go.dev/cl/781661"
},
{
"category": "external",
"summary": "https://go.dev/issue/79565",
"url": "https://go.dev/issue/79565"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5018",
"url": "https://pkg.go.dev/vuln/GO-2026-5018"
}
],
"release_date": "2026-05-22T02:31:27.324000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-05T18:08:33+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:50888"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters"
},
{
"cve": "CVE-2026-39830",
"cwe": {
"id": "CWE-772",
"name": "Missing Release of Resource after Effective Lifetime"
},
"discovery_date": "2026-05-22T04:01:38.517202+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480684"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection\u0027s read loop. This prevents the associated resources from being released, leading to a resource leak per connection. The consequence is a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in `golang.org/x/crypto/ssh`. A remote, unauthenticated attacker can exploit this vulnerability by sending unsolicited global request responses to an affected SSH server, leading to resource exhaustion and a denial of service. The impact is considered Important due to the potential for unauthenticated remote disruption of services utilizing the vulnerable SSH library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39830"
},
{
"category": "external",
"summary": "RHBZ#2480684",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480684"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39830",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39830"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39830",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39830"
},
{
"category": "external",
"summary": "https://go.dev/cl/781640",
"url": "https://go.dev/cl/781640"
},
{
"category": "external",
"summary": "https://go.dev/cl/781664",
"url": "https://go.dev/cl/781664"
},
{
"category": "external",
"summary": "https://go.dev/issue/79564",
"url": "https://go.dev/issue/79564"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5017",
"url": "https://pkg.go.dev/vuln/GO-2026-5017"
}
],
"release_date": "2026-05-22T02:31:27.208000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-05T18:08:33+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:50888"
},
{
"category": "workaround",
"details": "To mitigate this denial of service vulnerability, restrict network access to any service that utilizes the `golang.org/x/crypto/ssh` library and is exposed to untrusted networks. Implement firewall rules to allow connections only from trusted hosts or networks. This action limits the ability of malicious peers to send unsolicited global request responses. A restart of the affected service may be necessary for the new network rules to be applied effectively.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses"
},
{
"cve": "CVE-2026-39832",
"cwe": {
"id": "CWE-281",
"name": "Improper Preservation of Permissions"
},
"discovery_date": "2026-05-22T04:01:41.402561+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480685"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh/agent. When a key was added to a remote agent, security restrictions, known as constraint extensions, were not properly processed during the request. This allowed these restrictions to be silently removed when keys were forwarded, leading to the unrestricted use of the key on the remote host. This vulnerability could enable an attacker to bypass intended security controls and perform unauthorized actions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in `golang.org/x/crypto/ssh/agent` allows for a security bypass when SSH keys with destination restrictions are forwarded via an SSH agent. This flaw could lead to unintended exposure of SSH keys, enabling an attacker to use the forwarded key without the specified restrictions on remote hosts. Red Hat products utilizing `golang.org/x/crypto/ssh/agent` for key forwarding may be affected if users rely on constraint extensions for limiting key usage.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39832"
},
{
"category": "external",
"summary": "RHBZ#2480685",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480685"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39832",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39832"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39832",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39832"
},
{
"category": "external",
"summary": "https://go.dev/cl/778642",
"url": "https://go.dev/cl/778642"
},
{
"category": "external",
"summary": "https://go.dev/issue/79435",
"url": "https://go.dev/issue/79435"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5006",
"url": "https://pkg.go.dev/vuln/GO-2026-5006"
}
],
"release_date": "2026-05-22T02:31:26.660000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-05T18:08:33+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:50888"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions"
},
{
"cve": "CVE-2026-39833",
"cwe": {
"id": "CWE-358",
"name": "Improperly Implemented Security Check for Standard"
},
"discovery_date": "2026-05-22T04:01:35.714593+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480683"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh/agent. The NewKeyring() function, which creates an in-memory keyring, failed to enforce the ConfirmBeforeUse constraint on keys. This allowed keys configured to require user confirmation before use to perform signing operations without any prompt or indication to the user. Consequently, an attacker could potentially bypass intended security controls, leading to unauthorized cryptographic signing actions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to unenforced key confirmation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat rates this issue as Moderate with RH CVSS 5.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N). A flaw was found in golang.org/x/crypto/ssh/agent where the in-memory keyring returned by NewKeyring() silently accepted SSH agent keys with the ConfirmBeforeUse constraint but did not enforce interactive confirmation before signing. Exploitation requires local access and low privileges on a system where an affected application uses NewKeyring() with ConfirmBeforeUse. Most Red Hat products that bundle golang.org/x/crypto do not use the ssh/agent ConfirmBeforeUse feature in their supported execution paths. The upstream CISA CVSS 9.1 assumes a broader network attack context that does not reflect Red Hat product deployment.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39833"
},
{
"category": "external",
"summary": "RHBZ#2480683",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480683"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39833",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39833"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39833",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39833"
},
{
"category": "external",
"summary": "https://go.dev/cl/778640",
"url": "https://go.dev/cl/778640"
},
{
"category": "external",
"summary": "https://go.dev/cl/778641",
"url": "https://go.dev/cl/778641"
},
{
"category": "external",
"summary": "https://go.dev/issue/79436",
"url": "https://go.dev/issue/79436"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5005",
"url": "https://pkg.go.dev/vuln/GO-2026-5005"
}
],
"release_date": "2026-05-22T02:31:26.294000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-05T18:08:33+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:50888"
},
{
"category": "workaround",
"details": "Update affected Go applications to use golang.org/x/crypto version 0.52.0 or later, which rejects unsupported ConfirmBeforeUse keys instead of silently ignoring the constraint. As a workaround, do not add keys with ConfirmBeforeUse to the in-memory keyring from golang.org/x/crypto/ssh/agent, or use an SSH agent implementation that correctly enforces confirm-before-use.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to unenforced key confirmation"
},
{
"cve": "CVE-2026-39835",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"discovery_date": "2026-05-22T04:01:27.279943+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480680"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. SSH servers configured to use CertChecker as a public key callback, without explicitly setting IsUserAuthority or IsHostAuthority, are vulnerable. A remote attacker can exploit this by presenting a specially crafted certificate, causing the server to panic and resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in `golang.org/x/crypto/ssh` affecting SSH servers that utilize `CertChecker` as a public key callback without explicitly configuring `IsUserAuthority` or `IsHostAuthority`. A remote, unauthenticated attacker can trigger a server panic by presenting a specially crafted certificate, leading to service disruption. Exploitation requires a specific, non-default configuration of the `CertChecker`.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39835"
},
{
"category": "external",
"summary": "RHBZ#2480680",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480680"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39835",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39835"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39835",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39835"
},
{
"category": "external",
"summary": "https://go.dev/cl/781660",
"url": "https://go.dev/cl/781660"
},
{
"category": "external",
"summary": "https://go.dev/issue/79563",
"url": "https://go.dev/issue/79563"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5015",
"url": "https://pkg.go.dev/vuln/GO-2026-5015"
}
],
"release_date": "2026-05-22T02:31:26.982000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-05T18:08:33+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:50888"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate"
},
{
"cve": "CVE-2026-42151",
"cwe": {
"id": "CWE-256",
"name": "Plaintext Storage of a Password"
},
"discovery_date": "2026-05-04T19:02:26.983660+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2466507"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Prometheus, an open-source monitoring system. The `client_secret` field within the Azure Active Directory (AD) remote write OAuth configuration was incorrectly handled as a plain string instead of a secure Secret type. This misconfiguration allowed any user or process with access to the `/-/config` HTTP API endpoint to view the Azure OAuth client secret in plaintext. This vulnerability leads to information disclosure, potentially compromising the security of integrated Azure AD services.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/prometheus/prometheus: Prometheus: Information disclosure of Azure OAuth client secret via config API",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important information disclosure flaw in Prometheus affects instances configured to use Azure AD remote write with OAuth authentication. The client secret, intended to be a secure credential, is exposed in plaintext through the `/-/config` HTTP API endpoint. This could allow an attacker with access to this endpoint to retrieve the secret, potentially compromising integrated Azure AD services.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42151"
},
{
"category": "external",
"summary": "RHBZ#2466507",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466507"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42151",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42151"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42151",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42151"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18587",
"url": "https://github.com/prometheus/prometheus/pull/18587"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/pull/18590",
"url": "https://github.com/prometheus/prometheus/pull/18590"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.11.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3",
"url": "https://github.com/prometheus/prometheus/releases/tag/v3.5.3"
},
{
"category": "external",
"summary": "https://github.com/prometheus/prometheus/security/advisories/GHSA-wg65-39gg-5wfj",
"url": "https://github.com/prometheus/prometheus/security/advisories/GHSA-wg65-39gg-5wfj"
}
],
"release_date": "2026-05-04T18:12:16.917000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-05T18:08:33+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:50888"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/prometheus/prometheus: Prometheus: Information disclosure of Azure OAuth client secret via config API"
},
{
"cve": "CVE-2026-42499",
"cwe": {
"id": "CWE-1046",
"name": "Creation of Immutable Text Using String Concatenation"
},
"discovery_date": "2026-05-07T20:00:51.685602+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467809"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the `net/mail` package of the Go standard library. A remote attacker can exploit this flaw by sending specially crafted email addresses, leading to excessive resource consumption and a denial of service in Go applications that parse email addresses using the affected library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42499"
},
{
"category": "external",
"summary": "RHBZ#2467809",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467809"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42499",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42499"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499"
},
{
"category": "external",
"summary": "https://go.dev/cl/771520",
"url": "https://go.dev/cl/771520"
},
{
"category": "external",
"summary": "https://go.dev/issue/78987",
"url": "https://go.dev/issue/78987"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4977",
"url": "https://pkg.go.dev/vuln/GO-2026-4977"
}
],
"release_date": "2026-05-07T19:41:18.615000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-05T18:08:33+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:50888"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing"
},
{
"cve": "CVE-2026-42508",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-05-22T04:01:49.515058+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480688"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh/knownhosts. This vulnerability occurs because the system did not correctly check for the revocation status of a SignatureKey belonging to a Certificate Authority (CA). A remote attacker could potentially exploit this by presenting a revoked key, leading to the system accepting it as valid. This could allow an attacker to bypass security checks and potentially gain unauthorized access or spoof legitimate entities.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: A flaw in `golang.org/x/crypto/ssh/knownhosts` allows a remote attacker to bypass security checks. This vulnerability arises because the system fails to properly verify the revocation status of a Certificate Authority (CA) `SignatureKey`. In Red Hat environments, this could enable an attacker to present a revoked key, leading to its acceptance as valid and potentially granting unauthorized access or facilitating the spoofing of legitimate entities.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42508"
},
{
"category": "external",
"summary": "RHBZ#2480688",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480688"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42508",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42508"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42508",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42508"
},
{
"category": "external",
"summary": "https://go.dev/cl/781220",
"url": "https://go.dev/cl/781220"
},
{
"category": "external",
"summary": "https://go.dev/issue/79568",
"url": "https://go.dev/issue/79568"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5021",
"url": "https://pkg.go.dev/vuln/GO-2026-5021"
}
],
"release_date": "2026-05-22T02:31:27.644000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-05T18:08:33+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:50888"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey"
},
{
"cve": "CVE-2026-46595",
"cwe": {
"id": "CWE-303",
"name": "Incorrect Implementation of Authentication Algorithm"
},
"discovery_date": "2026-05-22T04:01:52.215134+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480689"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. Source-address validation can be skipped when an SSH server configuration uses an authentication callback type other than public key, allowing authorization bypass in misconfigured servers. This is a follow-on to incomplete coverage from the CVE-2024-45337 fix.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/crypto/ssh is vulnerable to authorization bypass when SSH server configurations rely on source-address validation alongside non-public-key authentication callbacks. An attacker with low privileges who can authenticate through such a callback path may bypass intended source-address restrictions and gain unauthorized SSH access. Red Hat impact sits in services built with affected x/crypto/ssh, including RHEL golang streams, hummingbird Go toolchains, RHACM/MCE agents, and OpenShift or Ceph components that embed Go SSH servers with mixed callback types.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"known_not_affected": [
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-46595"
},
{
"category": "external",
"summary": "RHBZ#2480689",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480689"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-46595",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46595"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46595",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46595"
},
{
"category": "external",
"summary": "https://go.dev/cl/781642",
"url": "https://go.dev/cl/781642"
},
{
"category": "external",
"summary": "https://go.dev/issue/79570",
"url": "https://go.dev/issue/79570"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5023",
"url": "https://pkg.go.dev/vuln/GO-2026-5023"
}
],
"release_date": "2026-05-22T02:31:27.894000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-05T18:08:33+00:00",
"details": "The RHTAS CLI Stack images contain Red Hat Trusted Artifact Signer CLI binaries.\n\nFor details on using the CLI images, refer to the product documentation at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4\n\nYou can find the release notes for this version of Red Hat Trusted Artifact Signer at https://access.redhat.com/documentation/en-us/red_hat_trusted_artifact_signer/1.4/html-single/release_notes/index",
"product_ids": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:50888"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L",
"version": "3.1"
},
"products": [
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:conforma-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:cosign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:fetch-tsa-certs-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:gitsign-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:model-transparency-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:rekor-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@amd64_windows",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@arm64_darwin",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@ppc64le",
"Red Hat Trusted Artifact Signer 1.4:trillian-cli-stack-v1-4@s390x",
"Red Hat Trusted Artifact Signer 1.4:tuftool-cli-stack-v1-4@amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation"
}
]
}
RHSA-2026:51033
Vulnerability from csaf_redhat - Published: 2026-08-06 07:31 - Updated: 2026-08-22 08:40Summary
Red Hat Security Advisory: Red Hat OpenShift API for Data Protection
Severity
Important
Notes
Topic: A new version of OpenShift API for Data Protection (OADP) is now available.
Details: OpenShift API for Data Protection (OADP) enables you to back up and restore
application resources, persistent volume data, and internal container
images to external backup storage. OADP enables both file system-based and
snapshot-based backups for persistent volumes.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A local privilege escalation vulnerability has been discovered in containerd. This vulnerability is the result of an overly broad default permission which allows local users on the host to potentially access the metadata store, the content store and the contents of Kubernetes local volumes. The contents of volumes might include setuid binaries, which could allow a local user on the host to elevate privileges on the host.
7.7 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
41 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the net/url package in the Go standard library. The package does not enforce a limit on the number of unique query parameters it parses. A Go application using the net/http.Request.ParseForm method will try to process all parameters provided in the request. A specially crafted HTTP request containing a massive number of query parameters will cause the application to consume an excessive amount of memory, eventually causing the application to crash or become unresponsive, resulting in a denial of service.
7.5 (High)
Affected products
Fixed
40 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the archive/zip package in the Go standard library. A super-linear file name indexing algorithm is used in the first time a file in an archive is opened. A crafted zip archive containing a specific arrangement of file names can cause an excessive CPU and memory consumption. A Go application processing a malicious archive can become unresponsive or crash, resulting in a denial of service.
7.5 (High)
Affected products
Fixed
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
29 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in golang. A remote attacker could exploit this vulnerability by providing a specially crafted certificate during the error string construction process within the `HostnameError.Error()` function. This flaw, caused by unbounded string concatenation, leads to excessive resource consumption. Successful exploitation can result in a denial of service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
40 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x | — |
Vendor Fix
fix
|
Known not affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64 | — |
Threats
Impact
Important
A flaw was found in Fulcio, a free-to-use certificate authority. This vulnerability allows a denial of service (DoS) due to excessive memory allocation when processing a malicious OpenID Connect (OIDC) identity token containing numerous period characters.
7.5 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le | — |
Vendor Fix
fix
|
Known not affected
37 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x | — |
Threats
Impact
Important
A flaw was found in the crypto/tls component. This vulnerability occurs during Transport Layer Security (TLS) session resumption when certificate authority (CA) settings are modified between the initial and resumed handshakes. An attacker could exploit this to bypass certificate validation, allowing a client or server to establish a connection that should have been rejected. This could lead to an authentication bypass under specific conditions.
7.4 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x | — |
Vendor Fix
fix
|
Known not affected
41 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64 | — |
Threats
Impact
Moderate
A flaw was found in golang.org/x/net/html. A remote attacker could exploit this vulnerability by providing specially crafted HTML. When this arbitrary HTML is parsed and rendered, it can result in an unexpected HTML tree, bypassing input sanitization. This can be leveraged to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution in applications that use the affected component.
8.1 (High)
Affected products
Fixed
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
25 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/html. When arbitrary HTML is parsed and then rendered, it can result in an unexpected HTML tree. This allows an attacker to bypass HTML sanitization mechanisms, leading to Cross-Site Scripting (XSS) attacks in applications. Such attacks can result in information disclosure or arbitrary code execution.
8.1 (High)
Affected products
Fixed
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
25 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the Go standard library packages `crypto/x509` and `crypto/tls`. During the process of building a certificate chain, an attacker can provide a large number of intermediate certificates. This excessive input is not properly limited, leading to an uncontrolled amount of work being performed. This can result in a denial of service (DoS) condition, making the affected system or application unavailable to legitimate users.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x | — |
Vendor Fix
fix
|
Known not affected
41 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64 | — |
Threats
Impact
Important
A flaw was found in Go's `crypto/x509` package. A remote attacker could exploit this by presenting a specially crafted certificate chain containing a large number of policy mappings. This inefficient validation process consumes excessive resources, which can lead to a denial of service (DoS) for applications or systems performing certificate validation.
5.9 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
41 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in the internal/syscall/unix package in the Go standard library. If the target of the `Root.Chmod` function is replaced with a symbolic link during execution, specifically after `Root.Chmod` checks the target but before acting, the `chmod` operation will be performed on the file the symbolic link points to. This issue can bypass directory restrictions and lead to unauthorized permission changes on the filesystem.
7.8 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
41 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.
9.1 (Critical)
Affected products
Fixed
40 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in BuildKit, a toolkit for converting source code to build artifacts. An untrusted BuildKit frontend can be leveraged to craft a malicious API message, allowing files to be written outside of the designated BuildKit state directory. This vulnerability, which is a form of arbitrary file write, could enable an attacker to execute unauthorized code or escalate their privileges on the system. This issue arises when custom BuildKit frontends are used with specific configuration options.
8.2 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
41 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in BuildKit. Insufficient validation of Git URL fragment subdirectory components may allow a remote attacker to access files outside the checked-out Git repository root. This access is limited to files on the same mounted filesystem. This vulnerability could lead to unauthorized information disclosure.
6.5 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
41 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in the `crypto/x509` package within Go (golang). When verifying a certificate chain, excluded DNS (Domain Name System) constraints are not correctly applied to wildcard DNS Subject Alternative Names (SANs) if the case of the SAN differs from the constraint. This oversight could allow an attacker to bypass certificate validation, potentially leading to the acceptance of a malicious certificate that should have been rejected. This issue specifically impacts the validation of trusted certificate chains.
8.8 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x | — |
Vendor Fix
fix
|
Known not affected
41 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64 | — |
Threats
Impact
Important
A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
41 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Go JOSE, a library for handling JSON Web Encryption (JWE) objects. A remote attacker could exploit this vulnerability by providing a specially crafted JWE object. When decrypting such an object, if a key wrapping algorithm is specified but the encrypted key field is empty, the application can crash. This leads to a denial of service (DoS), making the affected service unavailable to legitimate users.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
41 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
41 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.
8.2 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
41 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote attacker could exploit this vulnerability when an SSH server authentication callback returned a PartialSuccessError with non-nil permissions. This flaw caused these permissions to be silently discarded, potentially bypassing certificate restrictions, such as a force-command, after a second authentication factor succeeded. This could lead to unauthorized command execution or access.
8.8 (High)
Affected products
Fixed
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
33 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during public key authentication. Successful exploitation could lead to a denial of service (DoS) due to prolonged CPU consumption during signature verification.
7.5 (High)
Affected products
Fixed
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
33 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection's read loop. This prevents the associated resources from being released, leading to a resource leak per connection. The consequence is a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
33 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. The Verify() method, responsible for FIDO/U2F security key types, did not properly check for user presence. This allowed signatures to be accepted without requiring a physical touch on the hardware security key. As a result, an attacker could potentially use a hardware security key in an unattended manner, bypassing a critical security control designed to ensure user intent.
8.1 (High)
Affected products
Fixed
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x | — |
Vendor Fix
fix
|
Known not affected
33 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le | — |
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. SSH servers configured to use CertChecker as a public key callback, without explicitly setting IsUserAuthority or IsHostAuthority, are vulnerable. A remote attacker can exploit this by presenting a specially crafted certificate, causing the server to panic and resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
33 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the Moby container framework. A race condition occurs during the `docker cp` mount setup, which a malicious container can exploit. This vulnerability allows the container to redirect a bind mount target to an arbitrary path on the host system. Consequently, an attacker could overwrite host files, potentially leading to data corruption or a denial of service.
7.2 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
41 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
41 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh/knownhosts. This vulnerability occurs because the system did not correctly check for the revocation status of a SignatureKey belonging to a Certificate Authority (CA). A remote attacker could potentially exploit this by presenting a revoked key, leading to the system accepting it as valid. This could allow an attacker to bypass security checks and potentially gain unauthorized access or spoof legitimate entities.
7.4 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le | — |
Vendor Fix
fix
|
Known not affected
41 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x | — |
Threats
Impact
Important
A flaw was found in Billy, an interface filesystem abstraction for Go. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by providing crafted or malformed input. The issue arises from insufficient validation and missing safety mechanisms when processing untrusted repository data and filesystem structures, leading to panics, infinite loops, uncontrolled recursion, or excessive resource consumption.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
41 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. Source-address validation can be skipped when an SSH server configuration uses an authentication callback type other than public key, allowing authorization bypass in misconfigured servers. This is a follow-on to incomplete coverage from the CVE-2024-45337 fix.
7.1 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x | — |
Vendor Fix
fix
|
Known not affected
41 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64 | — |
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote attacker could send specially crafted inputs to the AES-GCM packet decoder. This could lead to an incorrectly placed cast from bytes to an integer, causing a server-side panic and resulting in a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
33 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in containerd, an open-source container runtime. The Container Runtime Interface (CRI) plugin, which manages container operations, fails to validate labels propagated from an image configuration to a container. This oversight could enable an attacker to execute arbitrary commands on the host system through a plugin that processes these unvalidated labels. The primary impact is host-root command execution, allowing unauthorized control over the underlying system.
8.8 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
41 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in containerd, an open-source container runtime. The Container Runtime Interface (CRI) implementation, which allows Kubernetes to interact with container runtimes, improperly trusts Container Device Interface (CDI) annotations found within untrusted checkpoint image metadata during container restoration. This vulnerability enables a user with permissions to create pods to bypass standard Kubernetes resource allocation and device plugin enforcement. Consequently, an attacker can inject arbitrary CDI edits, such as device nodes and host mounts, into the restored container, potentially leading to unauthorized resource access or privilege escalation.
8.2 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le | — |
Vendor Fix
fix
|
Known not affected
41 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x | — |
Threats
Impact
Important
References
257 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "A new version of OpenShift API for Data Protection (OADP) is now available.",
"title": "Topic"
},
{
"category": "general",
"text": "OpenShift API for Data Protection (OADP) enables you to back up and restore\napplication resources, persistent volume data, and internal container\nimages to external backup storage. OADP enables both file system-based and\nsnapshot-based backups for persistent volumes.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:51033",
"url": "https://access.redhat.com/errata/RHSA-2026:51033"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2024-25621",
"url": "https://access.redhat.com/security/cve/CVE-2024-25621"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-61726",
"url": "https://access.redhat.com/security/cve/CVE-2025-61726"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-61728",
"url": "https://access.redhat.com/security/cve/CVE-2025-61728"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-61729",
"url": "https://access.redhat.com/security/cve/CVE-2025-61729"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-66506",
"url": "https://access.redhat.com/security/cve/CVE-2025-66506"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-68121",
"url": "https://access.redhat.com/security/cve/CVE-2025-68121"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-25681",
"url": "https://access.redhat.com/security/cve/CVE-2026-25681"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-27136",
"url": "https://access.redhat.com/security/cve/CVE-2026-27136"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32280",
"url": "https://access.redhat.com/security/cve/CVE-2026-32280"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32281",
"url": "https://access.redhat.com/security/cve/CVE-2026-32281"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32282",
"url": "https://access.redhat.com/security/cve/CVE-2026-32282"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33186",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33747",
"url": "https://access.redhat.com/security/cve/CVE-2026-33747"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33748",
"url": "https://access.redhat.com/security/cve/CVE-2026-33748"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33810",
"url": "https://access.redhat.com/security/cve/CVE-2026-33810"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33811",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-34986",
"url": "https://access.redhat.com/security/cve/CVE-2026-34986"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39820",
"url": "https://access.redhat.com/security/cve/CVE-2026-39820"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39821",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39828",
"url": "https://access.redhat.com/security/cve/CVE-2026-39828"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39829",
"url": "https://access.redhat.com/security/cve/CVE-2026-39829"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39830",
"url": "https://access.redhat.com/security/cve/CVE-2026-39830"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39831",
"url": "https://access.redhat.com/security/cve/CVE-2026-39831"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39835",
"url": "https://access.redhat.com/security/cve/CVE-2026-39835"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42306",
"url": "https://access.redhat.com/security/cve/CVE-2026-42306"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42499",
"url": "https://access.redhat.com/security/cve/CVE-2026-42499"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42508",
"url": "https://access.redhat.com/security/cve/CVE-2026-42508"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44740",
"url": "https://access.redhat.com/security/cve/CVE-2026-44740"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-46595",
"url": "https://access.redhat.com/security/cve/CVE-2026-46595"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-46597",
"url": "https://access.redhat.com/security/cve/CVE-2026-46597"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-53488",
"url": "https://access.redhat.com/security/cve/CVE-2026-53488"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-53492",
"url": "https://access.redhat.com/security/cve/CVE-2026-53492"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "external",
"summary": "https://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/backup_and_restore/oadp-application-backup-and-restore",
"url": "https://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/backup_and_restore/oadp-application-backup-and-restore"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_51033.json"
}
],
"title": "Red Hat Security Advisory: Red Hat OpenShift API for Data Protection",
"tracking": {
"current_release_date": "2026-08-22T08:40:52+00:00",
"generator": {
"date": "2026-08-22T08:40:52+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.16"
}
},
"id": "RHSA-2026:51033",
"initial_release_date": "2026-08-06T07:31:01+00:00",
"revision_history": [
{
"date": "2026-08-06T07:31:01+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-15T05:55:47+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-22T08:40:52+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "OpenShift API for Data Protection 1.3",
"product": {
"name": "OpenShift API for Data Protection 1.3",
"product_id": "OpenShift API for Data Protection 1.3",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openshift_api_data_protection:1.3::el9"
}
}
}
],
"category": "product_family",
"name": "OpenShift API for Data Protection"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"product": {
"name": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"product_id": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-cli-binaries-rhel9@sha256%3A56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa?arch=amd64\u0026repository_url=registry.redhat.io/oadp/oadp-cli-binaries-rhel9\u0026tag=1785180801"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"product": {
"name": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"product_id": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-kubevirt-velero-plugin-rhel9@sha256%3A4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2?arch=amd64\u0026repository_url=registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9\u0026tag=1785177413"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"product": {
"name": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"product_id": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-mustgather-rhel9@sha256%3A9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5?arch=amd64\u0026repository_url=registry.redhat.io/oadp/oadp-mustgather-rhel9\u0026tag=1785177359"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"product": {
"name": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"product_id": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-rhel9-operator@sha256%3A5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb?arch=amd64\u0026repository_url=registry.redhat.io/oadp/oadp-rhel9-operator\u0026tag=1785426166"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"product": {
"name": "registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"product_id": "registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-operator-bundle@sha256%3Abf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484?arch=amd64\u0026repository_url=registry.redhat.io/oadp/oadp-operator-bundle\u0026tag=1785427055"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"product_id": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-rhel9@sha256%3A4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0?arch=amd64\u0026repository_url=registry.redhat.io/oadp/oadp-velero-rhel9\u0026tag=1785180878"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-rhel9@sha256%3A7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7?arch=amd64\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-rhel9\u0026tag=1785177357"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-for-aws-rhel9@sha256%3Ab26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6?arch=amd64\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9\u0026tag=1785177325"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-for-csi-rhel9@sha256%3Ae23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552?arch=amd64\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9\u0026tag=1785177350"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-for-gcp-rhel9@sha256%3Afd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab?arch=amd64\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9\u0026tag=1785426129"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256%3A39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330?arch=amd64\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9\u0026tag=1785177322"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"product_id": "registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-restic-restore-helper-rhel9@sha256%3A36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352?arch=amd64\u0026repository_url=registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9\u0026tag=1785177438"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"product": {
"name": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"product_id": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-cli-binaries-rhel9@sha256%3A31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9?arch=arm64\u0026repository_url=registry.redhat.io/oadp/oadp-cli-binaries-rhel9\u0026tag=1785180801"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"product": {
"name": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"product_id": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-kubevirt-velero-plugin-rhel9@sha256%3A4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75?arch=arm64\u0026repository_url=registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9\u0026tag=1785177413"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"product": {
"name": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"product_id": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-mustgather-rhel9@sha256%3A93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f?arch=arm64\u0026repository_url=registry.redhat.io/oadp/oadp-mustgather-rhel9\u0026tag=1785177359"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"product": {
"name": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"product_id": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-rhel9-operator@sha256%3A54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e?arch=arm64\u0026repository_url=registry.redhat.io/oadp/oadp-rhel9-operator\u0026tag=1785426166"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"product_id": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-rhel9@sha256%3A9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296?arch=arm64\u0026repository_url=registry.redhat.io/oadp/oadp-velero-rhel9\u0026tag=1785180878"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-rhel9@sha256%3A6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf?arch=arm64\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-rhel9\u0026tag=1785177357"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-for-aws-rhel9@sha256%3A2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2?arch=arm64\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9\u0026tag=1785177325"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-for-csi-rhel9@sha256%3A9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75?arch=arm64\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9\u0026tag=1785177350"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-for-gcp-rhel9@sha256%3A43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025?arch=arm64\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9\u0026tag=1785426129"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256%3A40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2?arch=arm64\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9\u0026tag=1785177322"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"product_id": "registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-restic-restore-helper-rhel9@sha256%3Abe6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207?arch=arm64\u0026repository_url=registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9\u0026tag=1785177438"
}
}
}
],
"category": "architecture",
"name": "arm64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"product": {
"name": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"product_id": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"product_identification_helper": {
"purl": "pkg:oci/oadp-cli-binaries-rhel9@sha256%3A93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4?arch=s390x\u0026repository_url=registry.redhat.io/oadp/oadp-cli-binaries-rhel9\u0026tag=1785180801"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"product": {
"name": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"product_id": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"product_identification_helper": {
"purl": "pkg:oci/oadp-kubevirt-velero-plugin-rhel9@sha256%3A956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0?arch=s390x\u0026repository_url=registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9\u0026tag=1785177413"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"product": {
"name": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"product_id": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"product_identification_helper": {
"purl": "pkg:oci/oadp-mustgather-rhel9@sha256%3Acc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60?arch=s390x\u0026repository_url=registry.redhat.io/oadp/oadp-mustgather-rhel9\u0026tag=1785177359"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"product": {
"name": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"product_id": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"product_identification_helper": {
"purl": "pkg:oci/oadp-rhel9-operator@sha256%3Ab38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3?arch=s390x\u0026repository_url=registry.redhat.io/oadp/oadp-rhel9-operator\u0026tag=1785426166"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x",
"product_id": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-rhel9@sha256%3A9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5?arch=s390x\u0026repository_url=registry.redhat.io/oadp/oadp-velero-rhel9\u0026tag=1785180878"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-rhel9@sha256%3A67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4?arch=s390x\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-rhel9\u0026tag=1785177357"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-for-aws-rhel9@sha256%3A1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44?arch=s390x\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9\u0026tag=1785177325"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-for-csi-rhel9@sha256%3A345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5?arch=s390x\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9\u0026tag=1785177350"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-for-gcp-rhel9@sha256%3Afa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1?arch=s390x\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9\u0026tag=1785426129"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256%3A7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e?arch=s390x\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9\u0026tag=1785177322"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"product_id": "registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-restic-restore-helper-rhel9@sha256%3A378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c?arch=s390x\u0026repository_url=registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9\u0026tag=1785177438"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"product": {
"name": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"product_id": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/oadp-cli-binaries-rhel9@sha256%3A48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213?arch=ppc64le\u0026repository_url=registry.redhat.io/oadp/oadp-cli-binaries-rhel9\u0026tag=1785180801"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"product": {
"name": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"product_id": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/oadp-kubevirt-velero-plugin-rhel9@sha256%3Acf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3?arch=ppc64le\u0026repository_url=registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9\u0026tag=1785177413"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"product": {
"name": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"product_id": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/oadp-mustgather-rhel9@sha256%3Aeea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030?arch=ppc64le\u0026repository_url=registry.redhat.io/oadp/oadp-mustgather-rhel9\u0026tag=1785177359"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"product": {
"name": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"product_id": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/oadp-rhel9-operator@sha256%3Ac2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10?arch=ppc64le\u0026repository_url=registry.redhat.io/oadp/oadp-rhel9-operator\u0026tag=1785426166"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"product_id": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-rhel9@sha256%3A391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca?arch=ppc64le\u0026repository_url=registry.redhat.io/oadp/oadp-velero-rhel9\u0026tag=1785180878"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-rhel9@sha256%3Ac612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2?arch=ppc64le\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-rhel9\u0026tag=1785177357"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-for-aws-rhel9@sha256%3A4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e?arch=ppc64le\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9\u0026tag=1785177325"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-for-csi-rhel9@sha256%3A46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc?arch=ppc64le\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9\u0026tag=1785177350"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-for-gcp-rhel9@sha256%3A19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b?arch=ppc64le\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9\u0026tag=1785426129"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256%3Abd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2?arch=ppc64le\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9\u0026tag=1785177322"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"product_id": "registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-restic-restore-helper-rhel9@sha256%3Aaebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70?arch=ppc64le\u0026repository_url=registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9\u0026tag=1785177438"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64 as a component of OpenShift API for Data Protection 1.3",
"product_id": "OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64"
},
"product_reference": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le as a component of OpenShift API for Data Protection 1.3",
"product_id": "OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le"
},
"product_reference": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"relates_to_product_reference": "OpenShift API for Data Protection 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64 as a component of OpenShift API for Data Protection 1.3",
"product_id": "OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64"
},
"product_reference": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x as a component of OpenShift API for Data Protection 1.3",
"product_id": "OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x"
},
"product_reference": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"relates_to_product_reference": "OpenShift API for Data Protection 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64 as a component of OpenShift API for Data Protection 1.3",
"product_id": "OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64"
},
"product_reference": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64 as a component of OpenShift API for Data Protection 1.3",
"product_id": "OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64"
},
"product_reference": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x as a component of OpenShift API for Data Protection 1.3",
"product_id": "OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x"
},
"product_reference": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"relates_to_product_reference": "OpenShift API for Data Protection 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le as a component of OpenShift API for Data Protection 1.3",
"product_id": "OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le"
},
"product_reference": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"relates_to_product_reference": "OpenShift API for Data Protection 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64 as a component of OpenShift API for Data Protection 1.3",
"product_id": "OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64"
},
"product_reference": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64 as a component of OpenShift API for Data Protection 1.3",
"product_id": "OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64"
},
"product_reference": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x as a component of OpenShift API for Data Protection 1.3",
"product_id": "OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x"
},
"product_reference": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"relates_to_product_reference": "OpenShift API for Data Protection 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le as a component of OpenShift API for Data Protection 1.3",
"product_id": "OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le"
},
"product_reference": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"relates_to_product_reference": "OpenShift API for Data Protection 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64 as a component of OpenShift API for Data Protection 1.3",
"product_id": "OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64"
},
"product_reference": "registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64 as a component of OpenShift API for Data Protection 1.3",
"product_id": "OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64"
},
"product_reference": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64 as a component of OpenShift API for Data Protection 1.3",
"product_id": "OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64"
},
"product_reference": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x as a component of OpenShift API for Data Protection 1.3",
"product_id": "OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x"
},
"product_reference": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"relates_to_product_reference": "OpenShift API for Data Protection 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le as a component of OpenShift API for Data Protection 1.3",
"product_id": "OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le"
},
"product_reference": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"relates_to_product_reference": "OpenShift API for Data Protection 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x as a component of OpenShift API for Data Protection 1.3",
"product_id": "OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"relates_to_product_reference": "OpenShift API for Data Protection 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64 as a component of OpenShift API for Data Protection 1.3",
"product_id": "OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le as a component of OpenShift API for Data Protection 1.3",
"product_id": "OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"relates_to_product_reference": "OpenShift API for Data Protection 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64 as a component of OpenShift API for Data Protection 1.3",
"product_id": "OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x as a component of OpenShift API for Data Protection 1.3",
"product_id": "OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"relates_to_product_reference": "OpenShift API for Data Protection 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le as a component of OpenShift API for Data Protection 1.3",
"product_id": "OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"relates_to_product_reference": "OpenShift API for Data Protection 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64 as a component of OpenShift API for Data Protection 1.3",
"product_id": "OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64 as a component of OpenShift API for Data Protection 1.3",
"product_id": "OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le as a component of OpenShift API for Data Protection 1.3",
"product_id": "OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"relates_to_product_reference": "OpenShift API for Data Protection 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64 as a component of OpenShift API for Data Protection 1.3",
"product_id": "OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x as a component of OpenShift API for Data Protection 1.3",
"product_id": "OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"relates_to_product_reference": "OpenShift API for Data Protection 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64 as a component of OpenShift API for Data Protection 1.3",
"product_id": "OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64 as a component of OpenShift API for Data Protection 1.3",
"product_id": "OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64 as a component of OpenShift API for Data Protection 1.3",
"product_id": "OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x as a component of OpenShift API for Data Protection 1.3",
"product_id": "OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"relates_to_product_reference": "OpenShift API for Data Protection 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le as a component of OpenShift API for Data Protection 1.3",
"product_id": "OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"relates_to_product_reference": "OpenShift API for Data Protection 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x as a component of OpenShift API for Data Protection 1.3",
"product_id": "OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"relates_to_product_reference": "OpenShift API for Data Protection 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64 as a component of OpenShift API for Data Protection 1.3",
"product_id": "OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64 as a component of OpenShift API for Data Protection 1.3",
"product_id": "OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le as a component of OpenShift API for Data Protection 1.3",
"product_id": "OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"relates_to_product_reference": "OpenShift API for Data Protection 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64 as a component of OpenShift API for Data Protection 1.3",
"product_id": "OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x as a component of OpenShift API for Data Protection 1.3",
"product_id": "OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"relates_to_product_reference": "OpenShift API for Data Protection 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le as a component of OpenShift API for Data Protection 1.3",
"product_id": "OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"relates_to_product_reference": "OpenShift API for Data Protection 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64 as a component of OpenShift API for Data Protection 1.3",
"product_id": "OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le as a component of OpenShift API for Data Protection 1.3",
"product_id": "OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"relates_to_product_reference": "OpenShift API for Data Protection 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64 as a component of OpenShift API for Data Protection 1.3",
"product_id": "OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64 as a component of OpenShift API for Data Protection 1.3",
"product_id": "OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x as a component of OpenShift API for Data Protection 1.3",
"product_id": "OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x",
"relates_to_product_reference": "OpenShift API for Data Protection 1.3"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2024-25621",
"cwe": {
"id": "CWE-279",
"name": "Incorrect Execution-Assigned Permissions"
},
"discovery_date": "2025-11-06T19:01:04.402278+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2413190"
}
],
"notes": [
{
"category": "description",
"text": "A local privilege escalation vulnerability has been discovered in containerd. This vulnerability is the result of an overly broad default permission which allows local users on the host to potentially access the metadata store, the content store and the contents of Kubernetes local volumes. The contents of volumes might include setuid binaries, which could allow a local user on the host to elevate privileges on the host.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/containerd/containerd: containerd local privilege escalation",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2024-25621"
},
{
"category": "external",
"summary": "RHBZ#2413190",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2413190"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2024-25621",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-25621"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2024-25621",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-25621"
},
{
"category": "external",
"summary": "https://github.com/containerd/containerd/blob/main/docs/rootless.md",
"url": "https://github.com/containerd/containerd/blob/main/docs/rootless.md"
},
{
"category": "external",
"summary": "https://github.com/containerd/containerd/commit/7c59e8e9e970d38061a77b586b23655c352bfec5",
"url": "https://github.com/containerd/containerd/commit/7c59e8e9e970d38061a77b586b23655c352bfec5"
},
{
"category": "external",
"summary": "https://github.com/containerd/containerd/security/advisories/GHSA-pwhc-rpq9-4c8w",
"url": "https://github.com/containerd/containerd/security/advisories/GHSA-pwhc-rpq9-4c8w"
}
],
"release_date": "2025-11-06T18:36:21.566000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-06T07:31:01+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:51033"
},
{
"category": "workaround",
"details": "The system administrator on the host can manually chmod the directories to not\nhave group or world accessible permissions:\n```\nchmod 700 /var/lib/containerd\nchmod 700 /run/containerd/io.containerd.grpc.v1.cri\nchmod 700 /run/containerd/io.containerd.sandbox.controller.v1.shim\n```\nAn alternative mitigation would be to run containerd in rootless mode.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "LOW",
"baseScore": 7.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:L",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/containerd/containerd: containerd local privilege escalation"
},
{
"cve": "CVE-2025-61726",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-01-28T20:01:42.791305+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2434432"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the net/url package in the Go standard library. The package does not enforce a limit on the number of unique query parameters it parses. A Go application using the net/http.Request.ParseForm method will try to process all parameters provided in the request. A specially crafted HTTP request containing a massive number of query parameters will cause the application to consume an excessive amount of memory, eventually causing the application to crash or become unresponsive, resulting in a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang: net/url: Memory exhaustion in query parameter parsing in net/url",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this flaw, an attacker must be able to send a specially crafted HTTP request to an application parsing URL-encoded forms with net/url, specifically a request containing a large number of unique query parameters. The request will cause the application to consume an excessive amount of memory and eventually result in a denial of service, with no impact to confidentiality or integrity. Due to this reason, this vulnerability has been rated with an important severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-61726"
},
{
"category": "external",
"summary": "RHBZ#2434432",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2434432"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-61726",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-61726"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-61726",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-61726"
},
{
"category": "external",
"summary": "https://go.dev/cl/736712",
"url": "https://go.dev/cl/736712"
},
{
"category": "external",
"summary": "https://go.dev/issue/77101",
"url": "https://go.dev/issue/77101"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/Vd2tYVM8eUc",
"url": "https://groups.google.com/g/golang-announce/c/Vd2tYVM8eUc"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4341",
"url": "https://pkg.go.dev/vuln/GO-2026-4341"
}
],
"release_date": "2026-01-28T19:30:31.215000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-06T07:31:01+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:51033"
},
{
"category": "workaround",
"details": "Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected package as soon as possible.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang: net/url: Memory exhaustion in query parameter parsing in net/url"
},
{
"cve": "CVE-2025-61728",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-01-28T20:01:39.965024+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2434431"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the archive/zip package in the Go standard library. A super-linear file name indexing algorithm is used in the first time a file in an archive is opened. A crafted zip archive containing a specific arrangement of file names can cause an excessive CPU and memory consumption. A Go application processing a malicious archive can become unresponsive or crash, resulting in a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang: archive/zip: Excessive CPU consumption when building archive index in archive/zip",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this flaw, an attacker needs to be able to process a malicious zip archive with an application using the archive/zip package. Additionally, this vulnerability can cause a Go application to consume an excessive amount of CPU and memory, eventually resulting in a denial of service with no other security impact. Due to these reasons, this flaw has been rated with a moderate severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-61728"
},
{
"category": "external",
"summary": "RHBZ#2434431",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2434431"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-61728",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-61728"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-61728",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-61728"
},
{
"category": "external",
"summary": "https://go.dev/cl/736713",
"url": "https://go.dev/cl/736713"
},
{
"category": "external",
"summary": "https://go.dev/issue/77102",
"url": "https://go.dev/issue/77102"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/Vd2tYVM8eUc",
"url": "https://groups.google.com/g/golang-announce/c/Vd2tYVM8eUc"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4342",
"url": "https://pkg.go.dev/vuln/GO-2026-4342"
}
],
"release_date": "2026-01-28T19:30:31.354000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-06T07:31:01+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:51033"
},
{
"category": "workaround",
"details": "To mitigate this vulnerability, implement a timeout in your archive/zip processing logic to abort the operation if it exceeds a few seconds, preventing the application from consuming an excessive amount of resources.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang: archive/zip: Excessive CPU consumption when building archive index in archive/zip"
},
{
"cve": "CVE-2025-61729",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2025-12-02T20:01:45.330964+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2418462"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang. A remote attacker could exploit this vulnerability by providing a specially crafted certificate during the error string construction process within the `HostnameError.Error()` function. This flaw, caused by unbounded string concatenation, leads to excessive resource consumption. Successful exploitation can result in a denial of service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-61729"
},
{
"category": "external",
"summary": "RHBZ#2418462",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2418462"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-61729",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-61729"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-61729",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-61729"
},
{
"category": "external",
"summary": "https://go.dev/cl/725920",
"url": "https://go.dev/cl/725920"
},
{
"category": "external",
"summary": "https://go.dev/issue/76445",
"url": "https://go.dev/issue/76445"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/8FJoBkPddm4",
"url": "https://groups.google.com/g/golang-announce/c/8FJoBkPddm4"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2025-4155",
"url": "https://pkg.go.dev/vuln/GO-2025-4155"
}
],
"release_date": "2025-12-02T18:54:10.166000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-06T07:31:01+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:51033"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate"
},
{
"cve": "CVE-2025-66506",
"cwe": {
"id": "CWE-405",
"name": "Asymmetric Resource Consumption (Amplification)"
},
"discovery_date": "2025-12-04T23:01:20.507333+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2419056"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Fulcio, a free-to-use certificate authority. This vulnerability allows a denial of service (DoS) due to excessive memory allocation when processing a malicious OpenID Connect (OIDC) identity token containing numerous period characters.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/sigstore/fulcio: Fulcio: Denial of Service via crafted OpenID Connect (OIDC) token",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated Important for Red Hat as Fulcio, a certificate authority used for issuing code signing certificates, is susceptible to a denial of service when processing a specially crafted OpenID Connect (OIDC) token. This could lead to resource exhaustion and service unavailability in affected Red Hat products that utilize Fulcio.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-66506"
},
{
"category": "external",
"summary": "RHBZ#2419056",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2419056"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-66506",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-66506"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-66506",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-66506"
},
{
"category": "external",
"summary": "https://github.com/sigstore/fulcio/commit/765a0e57608b9ef390e1eeeea8595b9054c63a5a",
"url": "https://github.com/sigstore/fulcio/commit/765a0e57608b9ef390e1eeeea8595b9054c63a5a"
},
{
"category": "external",
"summary": "https://github.com/sigstore/fulcio/security/advisories/GHSA-f83f-xpx7-ffpw",
"url": "https://github.com/sigstore/fulcio/security/advisories/GHSA-f83f-xpx7-ffpw"
}
],
"release_date": "2025-12-04T22:04:41.637000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-06T07:31:01+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:51033"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/sigstore/fulcio: Fulcio: Denial of Service via crafted OpenID Connect (OIDC) token"
},
{
"cve": "CVE-2025-68121",
"discovery_date": "2026-02-05T18:01:30.086058+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2437111"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the crypto/tls component. This vulnerability occurs during Transport Layer Security (TLS) session resumption when certificate authority (CA) settings are modified between the initial and resumed handshakes. An attacker could exploit this to bypass certificate validation, allowing a client or server to establish a connection that should have been rejected. This could lead to an authentication bypass under specific conditions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is a moderate flaw because it only occurs under specific conditions, such as TLS session resumption with runtime changes to certificate authority settings. Exploitation is not straightforward and requires a controlled setup. The impact is limited to certificate validation within the same component and does not affect system availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-68121"
},
{
"category": "external",
"summary": "RHBZ#2437111",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2437111"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-68121",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-68121"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-68121",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-68121"
},
{
"category": "external",
"summary": "https://go.dev/cl/737700",
"url": "https://go.dev/cl/737700"
},
{
"category": "external",
"summary": "https://go.dev/issue/77217",
"url": "https://go.dev/issue/77217"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/K09ubi9FQFk",
"url": "https://groups.google.com/g/golang-announce/c/K09ubi9FQFk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4337",
"url": "https://pkg.go.dev/vuln/GO-2026-4337"
}
],
"release_date": "2026-02-05T17:48:44.141000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-06T07:31:01+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:51033"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "crypto/tls: crypto/tls: Incorrect certificate validation during TLS session resumption"
},
{
"cve": "CVE-2026-25681",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-05-22T16:01:08.177603+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480761"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/html. A remote attacker could exploit this vulnerability by providing specially crafted HTML. When this arbitrary HTML is parsed and rendered, it can result in an unexpected HTML tree, bypassing input sanitization. This can be leveraged to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution in applications that use the affected component.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in `golang.org/x/net/html` could enable remote attackers to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution. The flaw allows specially crafted HTML to bypass input sanitization during parsing and rendering. Red Hat products are affected if they process untrusted HTML content using the vulnerable component without additional output encoding or robust content security policies.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-25681"
},
{
"category": "external",
"summary": "RHBZ#2480761",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480761"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-25681",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25681"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25681",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25681"
},
{
"category": "external",
"summary": "https://go.dev/cl/781703",
"url": "https://go.dev/cl/781703"
},
{
"category": "external",
"summary": "https://go.dev/issue/79574",
"url": "https://go.dev/issue/79574"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5029",
"url": "https://pkg.go.dev/vuln/GO-2026-5029"
}
],
"release_date": "2026-05-22T15:01:21.975000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-06T07:31:01+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:51033"
},
{
"category": "workaround",
"details": "To mitigate this flaw, applications processing untrusted HTML input must implement strict input sanitization and ensure all output is properly encoded before rendering. Deploying a comprehensive Content Security Policy (CSP) can restrict script execution, further reducing the attack surface. Administrators should review application configurations to ensure adequate protection against XSS.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting"
},
{
"cve": "CVE-2026-27136",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-05-22T16:00:56.609820+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480757"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/html. When arbitrary HTML is parsed and then rendered, it can result in an unexpected HTML tree. This allows an attacker to bypass HTML sanitization mechanisms, leading to Cross-Site Scripting (XSS) attacks in applications. Such attacks can result in information disclosure or arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in `golang.org/x/net/html` is rated as Important. It allows for Cross-Site Scripting (XSS) attacks by enabling an attacker to bypass HTML sanitization mechanisms when arbitrary HTML is parsed and rendered. This can lead to information disclosure or arbitrary code execution in affected applications. Exploitation typically requires user interaction, where a user processes specially crafted malicious HTML content.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27136"
},
{
"category": "external",
"summary": "RHBZ#2480757",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480757"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27136",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27136"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27136",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27136"
},
{
"category": "external",
"summary": "https://go.dev/cl/781685",
"url": "https://go.dev/cl/781685"
},
{
"category": "external",
"summary": "https://go.dev/issue/79575",
"url": "https://go.dev/issue/79575"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5030",
"url": "https://pkg.go.dev/vuln/GO-2026-5030"
}
],
"release_date": "2026-05-22T15:01:22.111000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-06T07:31:01+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:51033"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass"
},
{
"cve": "CVE-2026-32280",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-04-08T02:01:19.572351+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456339"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Go standard library packages `crypto/x509` and `crypto/tls`. During the process of building a certificate chain, an attacker can provide a large number of intermediate certificates. This excessive input is not properly limited, leading to an uncontrolled amount of work being performed. This can result in a denial of service (DoS) condition, making the affected system or application unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go standard library\u0027s certificate chain building process. Systems utilizing Go applications that process untrusted TLS certificates or X.509 certificate chains are susceptible to resource exhaustion when presented with an excessive number of intermediate certificates, potentially leading to service unavailability. This flaw impacts applications directly using `crypto/x509` or `crypto/tls`.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32280"
},
{
"category": "external",
"summary": "RHBZ#2456339",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456339"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32280",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32280"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32280",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32280"
},
{
"category": "external",
"summary": "https://go.dev/cl/758320",
"url": "https://go.dev/cl/758320"
},
{
"category": "external",
"summary": "https://go.dev/issue/78282",
"url": "https://go.dev/issue/78282"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4947",
"url": "https://pkg.go.dev/vuln/GO-2026-4947"
}
],
"release_date": "2026-04-08T01:06:58.595000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-06T07:31:01+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:51033"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building"
},
{
"cve": "CVE-2026-32281",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-04-08T02:01:00.930989+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456333"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Go\u0027s `crypto/x509` package. A remote attacker could exploit this by presenting a specially crafted certificate chain containing a large number of policy mappings. This inefficient validation process consumes excessive resources, which can lead to a denial of service (DoS) for applications or systems performing certificate validation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw occurs during the validation of otherwise trusted certificate chains that contain a large number of policy mappings, leading to excessive resource consumption. Exploitation requires an attacker to present a specially crafted, yet trusted, certificate chain which would require the attacker has already compromised a trusted certificate root. Red Hat continuously monitors certificate authorities and curates the set which is trusted by default for Red Hat products.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32281"
},
{
"category": "external",
"summary": "RHBZ#2456333",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456333"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32281",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32281"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32281",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32281"
},
{
"category": "external",
"summary": "https://go.dev/cl/758061",
"url": "https://go.dev/cl/758061"
},
{
"category": "external",
"summary": "https://go.dev/issue/78281",
"url": "https://go.dev/issue/78281"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4946",
"url": "https://pkg.go.dev/vuln/GO-2026-4946"
}
],
"release_date": "2026-04-08T01:06:58.354000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-06T07:31:01+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:51033"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation"
},
{
"cve": "CVE-2026-32282",
"cwe": {
"id": "CWE-367",
"name": "Time-of-check Time-of-use (TOCTOU) Race Condition"
},
"discovery_date": "2026-04-08T02:01:12.683211+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456336"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the internal/syscall/unix package in the Go standard library. If the target of the `Root.Chmod` function is replaced with a symbolic link during execution, specifically after `Root.Chmod` checks the target but before acting, the `chmod` operation will be performed on the file the symbolic link points to. This issue can bypass directory restrictions and lead to unauthorized permission changes on the filesystem.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs access to the system and the required permissions to create a symbolic link. Additionally, the attacker must swap the target file with a symbolic link in the exact window after the `Root.Chmod` function checks its target but before acting. Due to these conditions, this flaw has been rated with a moderate severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32282"
},
{
"category": "external",
"summary": "RHBZ#2456336",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456336"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32282",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32282"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32282",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32282"
},
{
"category": "external",
"summary": "https://go.dev/cl/763761",
"url": "https://go.dev/cl/763761"
},
{
"category": "external",
"summary": "https://go.dev/issue/78293",
"url": "https://go.dev/issue/78293"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4864",
"url": "https://pkg.go.dev/vuln/GO-2026-4864"
}
],
"release_date": "2026-04-08T01:06:55.953000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-06T07:31:01+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:51033"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root"
},
{
"cve": "CVE-2026-33186",
"cwe": {
"id": "CWE-551",
"name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization"
},
"discovery_date": "2026-03-20T23:02:27.802640+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2449833"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "RHBZ#2449833",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449833"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33186",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33186"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3",
"url": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3"
}
],
"release_date": "2026-03-20T22:23:32.147000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-06T07:31:01+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:51033"
},
{
"category": "workaround",
"details": "To mitigate this issue, implement infrastructure-level normalization to ensure all incoming HTTP/2 `:path` headers are properly formatted with a leading slash before reaching the gRPC-Go server. This can be achieved by configuring a reverse proxy or API gateway to validate and normalize the `:path` header. Ensure that any such intermediary is properly configured and restarted to apply the changes, which may temporarily impact service availability.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation"
},
{
"cve": "CVE-2026-33747",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"discovery_date": "2026-03-27T02:01:29.921765+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2452076"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in BuildKit, a toolkit for converting source code to build artifacts. An untrusted BuildKit frontend can be leveraged to craft a malicious API message, allowing files to be written outside of the designated BuildKit state directory. This vulnerability, which is a form of arbitrary file write, could enable an attacker to execute unauthorized code or escalate their privileges on the system. This issue arises when custom BuildKit frontends are used with specific configuration options.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "BuildKit: github.com/moby/buildkit: BuildKit: Arbitrary file write and code execution via untrusted frontend",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33747"
},
{
"category": "external",
"summary": "RHBZ#2452076",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2452076"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33747",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33747"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33747",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33747"
},
{
"category": "external",
"summary": "https://github.com/moby/buildkit/releases/tag/v0.28.1",
"url": "https://github.com/moby/buildkit/releases/tag/v0.28.1"
},
{
"category": "external",
"summary": "https://github.com/moby/buildkit/security/advisories/GHSA-4c29-8rgm-jvjj",
"url": "https://github.com/moby/buildkit/security/advisories/GHSA-4c29-8rgm-jvjj"
}
],
"release_date": "2026-03-27T00:49:06.165000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-06T07:31:01+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:51033"
},
{
"category": "workaround",
"details": "To mitigate this vulnerability, avoid using untrusted BuildKit frontends. Restrict the use of custom BuildKit frontends to only those from verified and trusted sources. Do not specify untrusted frontends via `#syntax` or `--build-arg BUILDKIT_SYNTAX`.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "BuildKit: github.com/moby/buildkit: BuildKit: Arbitrary file write and code execution via untrusted frontend"
},
{
"cve": "CVE-2026-33748",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"discovery_date": "2026-03-27T15:02:00.107493+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2452271"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in BuildKit. Insufficient validation of Git URL fragment subdirectory components may allow a remote attacker to access files outside the checked-out Git repository root. This access is limited to files on the same mounted filesystem. This vulnerability could lead to unauthorized information disclosure.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/moby/buildkit: BuildKit: Unauthorized file access via Git URL fragment subdir components",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33748"
},
{
"category": "external",
"summary": "RHBZ#2452271",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2452271"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33748",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33748"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33748",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33748"
},
{
"category": "external",
"summary": "https://docs.docker.com/build/concepts/context/#url-fragments",
"url": "https://docs.docker.com/build/concepts/context/#url-fragments"
},
{
"category": "external",
"summary": "https://github.com/moby/buildkit/releases/tag/v0.28.1",
"url": "https://github.com/moby/buildkit/releases/tag/v0.28.1"
},
{
"category": "external",
"summary": "https://github.com/moby/buildkit/security/advisories/GHSA-4vrq-3vrq-g6gg",
"url": "https://github.com/moby/buildkit/security/advisories/GHSA-4vrq-3vrq-g6gg"
}
],
"release_date": "2026-03-27T14:00:21.200000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-06T07:31:01+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:51033"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "github.com/moby/buildkit: BuildKit: Unauthorized file access via Git URL fragment subdir components"
},
{
"cve": "CVE-2026-33810",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-04-08T02:01:09.100830+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456335"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `crypto/x509` package within Go (golang). When verifying a certificate chain, excluded DNS (Domain Name System) constraints are not correctly applied to wildcard DNS Subject Alternative Names (SANs) if the case of the SAN differs from the constraint. This oversight could allow an attacker to bypass certificate validation, potentially leading to the acceptance of a malicious certificate that should have been rejected. This issue specifically impacts the validation of trusted certificate chains.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in the Go `crypto/x509` package that could allow an attacker to bypass certificate validation. The vulnerability arises from an incorrect application of excluded DNS constraints to wildcard DNS Subject Alternative Names (SANs) when their case differs from the constraint. This could lead to Red Hat products accepting malicious certificates from otherwise trusted chains, compromising the trust model.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33810"
},
{
"category": "external",
"summary": "RHBZ#2456335",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456335"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33810",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33810"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33810",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33810"
},
{
"category": "external",
"summary": "https://go.dev/cl/763763",
"url": "https://go.dev/cl/763763"
},
{
"category": "external",
"summary": "https://go.dev/issue/78332",
"url": "https://go.dev/issue/78332"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4866",
"url": "https://pkg.go.dev/vuln/GO-2026-4866"
}
],
"release_date": "2026-04-08T01:06:56.546000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-06T07:31:01+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:51033"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application"
},
{
"cve": "CVE-2026-33811",
"cwe": {
"id": "CWE-1341",
"name": "Multiple Releases of Same Resource or Handle"
},
"discovery_date": "2026-05-07T20:01:34.913869+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467822"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net` package, affecting applications configured to use the `cgo` DNS resolver. A remote attacker could trigger a double-free memory error by providing a very long CNAME response, leading to a crash of the vulnerable application and impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "RHBZ#2467822",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467822"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33811",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33811"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://go.dev/cl/767860",
"url": "https://go.dev/cl/767860"
},
{
"category": "external",
"summary": "https://go.dev/issue/78803",
"url": "https://go.dev/issue/78803"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4981",
"url": "https://pkg.go.dev/vuln/GO-2026-4981"
}
],
"release_date": "2026-05-07T19:41:19.285000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-06T07:31:01+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:51033"
},
{
"category": "workaround",
"details": "To mitigate this issue, applications can be configured to use the pure Go DNS resolver instead of the `cgo` DNS resolver. This can be achieved by setting the `GODEBUG` environment variable to `netdns=go`. For example, to run a Go application with this mitigation: `GODEBUG=netdns=go /path/to/your/go/application`. This change may require restarting affected applications or services to take effect. Users should verify that this change does not negatively impact DNS resolution for their specific application environment.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME"
},
{
"cve": "CVE-2026-34986",
"cwe": {
"id": "CWE-131",
"name": "Incorrect Calculation of Buffer Size"
},
"discovery_date": "2026-04-06T17:01:34.639203+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2455470"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Go JOSE, a library for handling JSON Web Encryption (JWE) objects. A remote attacker could exploit this vulnerability by providing a specially crafted JWE object. When decrypting such an object, if a key wrapping algorithm is specified but the encrypted key field is empty, the application can crash. This leads to a denial of service (DoS), making the affected service unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-34986"
},
{
"category": "external",
"summary": "RHBZ#2455470",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2455470"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-34986",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34986"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-34986",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34986"
},
{
"category": "external",
"summary": "https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8",
"url": "https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants",
"url": "https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants"
}
],
"release_date": "2026-04-06T16:22:45.353000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-06T07:31:01+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:51033"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object"
},
{
"cve": "CVE-2026-39820",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-05-07T20:01:27.800929+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467820"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net/mail` package. Applications processing untrusted email inputs via `ParseAddress`, `ParseAddressList`, or `ParseDate` functions are susceptible to excessive resource consumption, which can lead to service unavailability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39820"
},
{
"category": "external",
"summary": "RHBZ#2467820",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467820"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39820",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39820"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820"
},
{
"category": "external",
"summary": "https://go.dev/cl/759940",
"url": "https://go.dev/cl/759940"
},
{
"category": "external",
"summary": "https://go.dev/issue/78566",
"url": "https://go.dev/issue/78566"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4986",
"url": "https://pkg.go.dev/vuln/GO-2026-4986"
}
],
"release_date": "2026-05-07T19:41:19.854000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-06T07:31:01+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:51033"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs"
},
{
"cve": "CVE-2026-39821",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-05-22T16:00:52.844126+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480756"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/net/idna is vulnerable to privilege escalation through incorrect Punycode label handling in ToASCII and ToUnicode. An attacker who can supply a Punycode hostname that passes an ASCII-only authorization check may have it normalized to a restricted ASCII name the application intended to block. Red Hat exposure is broad across products shipping the Go toolchain or bundling golang.org/x/net, including RHEL and RHEL-AI golang RPMs, hummingbird Go runtimes, OpenShift and ODF container builds, and Ceph/OpenShift components compiled against affected x/net versions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "RHBZ#2480756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39821",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39821"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://go.dev/cl/767220",
"url": "https://go.dev/cl/767220"
},
{
"category": "external",
"summary": "https://go.dev/issue/78760",
"url": "https://go.dev/issue/78760"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5026",
"url": "https://pkg.go.dev/vuln/GO-2026-5026"
}
],
"release_date": "2026-05-22T15:01:21.462000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-06T07:31:01+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:51033"
},
{
"category": "workaround",
"details": "Upgrade to a fixed golang.org/x/net release that includes the idna correction, via updated golang or dependent package rebuilds.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing"
},
{
"cve": "CVE-2026-39828",
"cwe": {
"id": "CWE-281",
"name": "Improper Preservation of Permissions"
},
"discovery_date": "2026-05-22T04:01:46.775641+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480687"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote attacker could exploit this vulnerability when an SSH server authentication callback returned a PartialSuccessError with non-nil permissions. This flaw caused these permissions to be silently discarded, potentially bypassing certificate restrictions, such as a force-command, after a second authentication factor succeeded. This could lead to unauthorized command execution or access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important security flaw in the `golang.org/x/crypto/ssh` library. When an SSH server utilizing this library is configured with specific authentication callbacks that return a `PartialSuccessError` with non-nil permissions, an attacker could bypass intended certificate restrictions, such as `force-command`. This bypass could lead to unauthorized command execution or access on affected Red Hat systems configured with multi-factor authentication and certificate-based access controls.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39828"
},
{
"category": "external",
"summary": "RHBZ#2480687",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480687"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39828",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39828"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39828",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39828"
},
{
"category": "external",
"summary": "https://go.dev/cl/781621",
"url": "https://go.dev/cl/781621"
},
{
"category": "external",
"summary": "https://go.dev/issue/79562",
"url": "https://go.dev/issue/79562"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5014",
"url": "https://pkg.go.dev/vuln/GO-2026-5014"
}
],
"release_date": "2026-05-22T02:31:26.883000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-06T07:31:01+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:51033"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions"
},
{
"cve": "CVE-2026-39829",
"cwe": {
"id": "CWE-1284",
"name": "Improper Validation of Specified Quantity in Input"
},
"discovery_date": "2026-05-22T04:01:30.092249+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480681"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during public key authentication. Successful exploitation could lead to a denial of service (DoS) due to prolonged CPU consumption during signature verification.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in golang.org/x/crypto/ssh is rated as Important. An unauthenticated remote attacker could trigger a denial of service by providing a specially crafted public key with excessively large parameters during SSH public key authentication. This could lead to prolonged CPU consumption on the server, impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39829"
},
{
"category": "external",
"summary": "RHBZ#2480681",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480681"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39829",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39829"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39829",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39829"
},
{
"category": "external",
"summary": "https://go.dev/cl/781641",
"url": "https://go.dev/cl/781641"
},
{
"category": "external",
"summary": "https://go.dev/cl/781661",
"url": "https://go.dev/cl/781661"
},
{
"category": "external",
"summary": "https://go.dev/issue/79565",
"url": "https://go.dev/issue/79565"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5018",
"url": "https://pkg.go.dev/vuln/GO-2026-5018"
}
],
"release_date": "2026-05-22T02:31:27.324000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-06T07:31:01+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:51033"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters"
},
{
"cve": "CVE-2026-39830",
"cwe": {
"id": "CWE-772",
"name": "Missing Release of Resource after Effective Lifetime"
},
"discovery_date": "2026-05-22T04:01:38.517202+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480684"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection\u0027s read loop. This prevents the associated resources from being released, leading to a resource leak per connection. The consequence is a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in `golang.org/x/crypto/ssh`. A remote, unauthenticated attacker can exploit this vulnerability by sending unsolicited global request responses to an affected SSH server, leading to resource exhaustion and a denial of service. The impact is considered Important due to the potential for unauthenticated remote disruption of services utilizing the vulnerable SSH library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39830"
},
{
"category": "external",
"summary": "RHBZ#2480684",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480684"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39830",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39830"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39830",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39830"
},
{
"category": "external",
"summary": "https://go.dev/cl/781640",
"url": "https://go.dev/cl/781640"
},
{
"category": "external",
"summary": "https://go.dev/cl/781664",
"url": "https://go.dev/cl/781664"
},
{
"category": "external",
"summary": "https://go.dev/issue/79564",
"url": "https://go.dev/issue/79564"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5017",
"url": "https://pkg.go.dev/vuln/GO-2026-5017"
}
],
"release_date": "2026-05-22T02:31:27.208000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-06T07:31:01+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:51033"
},
{
"category": "workaround",
"details": "To mitigate this denial of service vulnerability, restrict network access to any service that utilizes the `golang.org/x/crypto/ssh` library and is exposed to untrusted networks. Implement firewall rules to allow connections only from trusted hosts or networks. This action limits the ability of malicious peers to send unsolicited global request responses. A restart of the affected service may be necessary for the new network rules to be applied effectively.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses"
},
{
"cve": "CVE-2026-39831",
"cwe": {
"id": "CWE-347",
"name": "Improper Verification of Cryptographic Signature"
},
"discovery_date": "2026-05-22T04:01:12.861178+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480675"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. The Verify() method, responsible for FIDO/U2F security key types, did not properly check for user presence. This allowed signatures to be accepted without requiring a physical touch on the hardware security key. As a result, an attacker could potentially use a hardware security key in an unattended manner, bypassing a critical security control designed to ensure user intent.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Security key bypass due to missing user presence check",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39831"
},
{
"category": "external",
"summary": "RHBZ#2480675",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480675"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39831",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39831"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39831",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39831"
},
{
"category": "external",
"summary": "https://go.dev/cl/781662",
"url": "https://go.dev/cl/781662"
},
{
"category": "external",
"summary": "https://go.dev/issue/79566",
"url": "https://go.dev/issue/79566"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5019",
"url": "https://pkg.go.dev/vuln/GO-2026-5019"
}
],
"release_date": "2026-05-22T02:31:27.436000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-06T07:31:01+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:51033"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Security key bypass due to missing user presence check"
},
{
"cve": "CVE-2026-39835",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"discovery_date": "2026-05-22T04:01:27.279943+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480680"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. SSH servers configured to use CertChecker as a public key callback, without explicitly setting IsUserAuthority or IsHostAuthority, are vulnerable. A remote attacker can exploit this by presenting a specially crafted certificate, causing the server to panic and resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in `golang.org/x/crypto/ssh` affecting SSH servers that utilize `CertChecker` as a public key callback without explicitly configuring `IsUserAuthority` or `IsHostAuthority`. A remote, unauthenticated attacker can trigger a server panic by presenting a specially crafted certificate, leading to service disruption. Exploitation requires a specific, non-default configuration of the `CertChecker`.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39835"
},
{
"category": "external",
"summary": "RHBZ#2480680",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480680"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39835",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39835"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39835",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39835"
},
{
"category": "external",
"summary": "https://go.dev/cl/781660",
"url": "https://go.dev/cl/781660"
},
{
"category": "external",
"summary": "https://go.dev/issue/79563",
"url": "https://go.dev/issue/79563"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5015",
"url": "https://pkg.go.dev/vuln/GO-2026-5015"
}
],
"release_date": "2026-05-22T02:31:26.982000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-06T07:31:01+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:51033"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate"
},
{
"cve": "CVE-2026-42306",
"cwe": {
"id": "CWE-367",
"name": "Time-of-check Time-of-use (TOCTOU) Race Condition"
},
"discovery_date": "2026-06-12T19:01:10.843543+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488484"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Moby container framework. A race condition occurs during the `docker cp` mount setup, which a malicious container can exploit. This vulnerability allows the container to redirect a bind mount target to an arbitrary path on the host system. Consequently, an attacker could overwrite host files, potentially leading to data corruption or a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/docker/docker: github.com/moby/moby: Moby container framework: Host file overwrite via race condition in docker cp mount setup",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in the Moby container framework where a race condition during `docker cp` mount setup could allow a malicious container to overwrite arbitrary host files. Exploitation requires an attacker to have control over a running container, which could lead to data corruption or denial of service on the host system.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42306"
},
{
"category": "external",
"summary": "RHBZ#2488484",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488484"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42306",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42306"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42306",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42306"
},
{
"category": "external",
"summary": "https://github.com/moby/moby/security/advisories/GHSA-rg2x-37c3-w2rh",
"url": "https://github.com/moby/moby/security/advisories/GHSA-rg2x-37c3-w2rh"
}
],
"release_date": "2026-06-12T18:09:22.188000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-06T07:31:01+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:51033"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:N/I:H/A:H",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/docker/docker: github.com/moby/moby: Moby container framework: Host file overwrite via race condition in docker cp mount setup"
},
{
"cve": "CVE-2026-42499",
"cwe": {
"id": "CWE-1046",
"name": "Creation of Immutable Text Using String Concatenation"
},
"discovery_date": "2026-05-07T20:00:51.685602+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467809"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the `net/mail` package of the Go standard library. A remote attacker can exploit this flaw by sending specially crafted email addresses, leading to excessive resource consumption and a denial of service in Go applications that parse email addresses using the affected library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42499"
},
{
"category": "external",
"summary": "RHBZ#2467809",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467809"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42499",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42499"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499"
},
{
"category": "external",
"summary": "https://go.dev/cl/771520",
"url": "https://go.dev/cl/771520"
},
{
"category": "external",
"summary": "https://go.dev/issue/78987",
"url": "https://go.dev/issue/78987"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4977",
"url": "https://pkg.go.dev/vuln/GO-2026-4977"
}
],
"release_date": "2026-05-07T19:41:18.615000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-06T07:31:01+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:51033"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing"
},
{
"cve": "CVE-2026-42508",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-05-22T04:01:49.515058+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480688"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh/knownhosts. This vulnerability occurs because the system did not correctly check for the revocation status of a SignatureKey belonging to a Certificate Authority (CA). A remote attacker could potentially exploit this by presenting a revoked key, leading to the system accepting it as valid. This could allow an attacker to bypass security checks and potentially gain unauthorized access or spoof legitimate entities.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: A flaw in `golang.org/x/crypto/ssh/knownhosts` allows a remote attacker to bypass security checks. This vulnerability arises because the system fails to properly verify the revocation status of a Certificate Authority (CA) `SignatureKey`. In Red Hat environments, this could enable an attacker to present a revoked key, leading to its acceptance as valid and potentially granting unauthorized access or facilitating the spoofing of legitimate entities.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42508"
},
{
"category": "external",
"summary": "RHBZ#2480688",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480688"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42508",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42508"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42508",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42508"
},
{
"category": "external",
"summary": "https://go.dev/cl/781220",
"url": "https://go.dev/cl/781220"
},
{
"category": "external",
"summary": "https://go.dev/issue/79568",
"url": "https://go.dev/issue/79568"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5021",
"url": "https://pkg.go.dev/vuln/GO-2026-5021"
}
],
"release_date": "2026-05-22T02:31:27.644000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-06T07:31:01+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:51033"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey"
},
{
"cve": "CVE-2026-44740",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-06-01T17:01:53.685793+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2483894"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Billy, an interface filesystem abstraction for Go. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by providing crafted or malformed input. The issue arises from insufficient validation and missing safety mechanisms when processing untrusted repository data and filesystem structures, leading to panics, infinite loops, uncontrolled recursion, or excessive resource consumption.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/go-git/go-billy: Billy: Denial of Service via crafted input due to insufficient validation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is rated as an Important severity issue. The `go-billy` library, a Go filesystem abstraction, is vulnerable to a denial of service when processing crafted or malformed input, such as untrusted repository data or filesystem structures. Insufficient validation and missing safety mechanisms can lead to panics, infinite loops, or excessive resource consumption, potentially impacting the availability of applications that rely on this library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44740"
},
{
"category": "external",
"summary": "RHBZ#2483894",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2483894"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44740",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44740"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44740",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44740"
},
{
"category": "external",
"summary": "https://github.com/go-git/go-billy/releases/tag/v5.9.0",
"url": "https://github.com/go-git/go-billy/releases/tag/v5.9.0"
},
{
"category": "external",
"summary": "https://github.com/go-git/go-billy/releases/tag/v6.0.0-alpha.1",
"url": "https://github.com/go-git/go-billy/releases/tag/v6.0.0-alpha.1"
},
{
"category": "external",
"summary": "https://github.com/go-git/go-billy/security/advisories/GHSA-m3xc-h892-ggx6",
"url": "https://github.com/go-git/go-billy/security/advisories/GHSA-m3xc-h892-ggx6"
}
],
"release_date": "2026-06-01T16:04:50.358000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-06T07:31:01+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:51033"
},
{
"category": "workaround",
"details": "To mitigate the issue, we suggest upgrading to versions 5.9.0+ or 6.0.0-alpha.1+",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/go-git/go-billy: Billy: Denial of Service via crafted input due to insufficient validation"
},
{
"cve": "CVE-2026-46595",
"cwe": {
"id": "CWE-303",
"name": "Incorrect Implementation of Authentication Algorithm"
},
"discovery_date": "2026-05-22T04:01:52.215134+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480689"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. Source-address validation can be skipped when an SSH server configuration uses an authentication callback type other than public key, allowing authorization bypass in misconfigured servers. This is a follow-on to incomplete coverage from the CVE-2024-45337 fix.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/crypto/ssh is vulnerable to authorization bypass when SSH server configurations rely on source-address validation alongside non-public-key authentication callbacks. An attacker with low privileges who can authenticate through such a callback path may bypass intended source-address restrictions and gain unauthorized SSH access. Red Hat impact sits in services built with affected x/crypto/ssh, including RHEL golang streams, hummingbird Go toolchains, RHACM/MCE agents, and OpenShift or Ceph components that embed Go SSH servers with mixed callback types.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-46595"
},
{
"category": "external",
"summary": "RHBZ#2480689",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480689"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-46595",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46595"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46595",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46595"
},
{
"category": "external",
"summary": "https://go.dev/cl/781642",
"url": "https://go.dev/cl/781642"
},
{
"category": "external",
"summary": "https://go.dev/issue/79570",
"url": "https://go.dev/issue/79570"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5023",
"url": "https://pkg.go.dev/vuln/GO-2026-5023"
}
],
"release_date": "2026-05-22T02:31:27.894000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-06T07:31:01+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:51033"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation"
},
{
"cve": "CVE-2026-46597",
"cwe": {
"id": "CWE-681",
"name": "Incorrect Conversion between Numeric Types"
},
"discovery_date": "2026-05-22T04:01:21.721980+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480678"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote attacker could send specially crafted inputs to the AES-GCM packet decoder. This could lead to an incorrectly placed cast from bytes to an integer, causing a server-side panic and resulting in a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted AES-GCM packet decoder inputs",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important denial of service flaw in `golang.org/x/crypto/ssh` allows a remote attacker to trigger a server-side panic by sending specially crafted inputs to the AES-GCM packet decoder. This vulnerability could lead to service unavailability in Red Hat products that incorporate and expose SSH services built with the affected `golang.org/x/crypto/ssh` component.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-46597"
},
{
"category": "external",
"summary": "RHBZ#2480678",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480678"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-46597",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46597"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46597",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46597"
},
{
"category": "external",
"summary": "https://go.dev/cl/781620",
"url": "https://go.dev/cl/781620"
},
{
"category": "external",
"summary": "https://go.dev/issue/79561",
"url": "https://go.dev/issue/79561"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5013",
"url": "https://pkg.go.dev/vuln/GO-2026-5013"
}
],
"release_date": "2026-05-22T02:31:26.754000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-06T07:31:01+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:51033"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted AES-GCM packet decoder inputs"
},
{
"cve": "CVE-2026-53488",
"cwe": {
"id": "CWE-78",
"name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
},
"discovery_date": "2026-07-01T02:01:09.589815+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2495815"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in containerd, an open-source container runtime. The Container Runtime Interface (CRI) plugin, which manages container operations, fails to validate labels propagated from an image configuration to a container. This oversight could enable an attacker to execute arbitrary commands on the host system through a plugin that processes these unvalidated labels. The primary impact is host-root command execution, allowing unauthorized control over the underlying system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/containerd/containerd: containerd: Host-root command execution via unvalidated image config labels in CRI plugin",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in containerd where the CRI plugin propagates labels from an image configuration (LABEL instruction in a Dockerfile) to a container without validation. This may result in executing an arbitrary command on the host via a plugin that consumes container labels for operations, such as the restart-monitor binary:// logger. An attacker who can cause a crafted container image to be pulled and run can achieve host-level code execution.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-53488"
},
{
"category": "external",
"summary": "RHBZ#2495815",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2495815"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-53488",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-53488"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-53488",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53488"
},
{
"category": "external",
"summary": "https://github.com/containerd/containerd/security/advisories/GHSA-xhf5-7wjv-pqxp",
"url": "https://github.com/containerd/containerd/security/advisories/GHSA-xhf5-7wjv-pqxp"
}
],
"release_date": "2026-07-01T00:11:20.610000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-06T07:31:01+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:51033"
},
{
"category": "workaround",
"details": "Restrict container image pulls to trusted registries using admission policies or image signature verification. Where containerd is used as the container runtime, disable or restrict the binary:// logger URI scheme in the containerd configuration to prevent the label-to-logger attack path.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/containerd/containerd: containerd: Host-root command execution via unvalidated image config labels in CRI plugin"
},
{
"cve": "CVE-2026-53492",
"cwe": {
"id": "CWE-807",
"name": "Reliance on Untrusted Inputs in a Security Decision"
},
"discovery_date": "2026-07-01T19:01:34.238078+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2496130"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in containerd, an open-source container runtime. The Container Runtime Interface (CRI) implementation, which allows Kubernetes to interact with container runtimes, improperly trusts Container Device Interface (CDI) annotations found within untrusted checkpoint image metadata during container restoration. This vulnerability enables a user with permissions to create pods to bypass standard Kubernetes resource allocation and device plugin enforcement. Consequently, an attacker can inject arbitrary CDI edits, such as device nodes and host mounts, into the restored container, potentially leading to unauthorized resource access or privilege escalation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/containerd/containerd: containerd: Security bypass via Container Device Interface (CDI) annotation smuggling during checkpoint restoration.",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw is rated as Important. In Red Hat OpenShift Container Platform, a user with pod creation permissions could bypass standard Kubernetes resource allocation and device plugin enforcement. This is due to containerd\u0027s Container Runtime Interface (CRI) improperly trusting Container Device Interface (CDI) annotations during container restoration. Exploitation requires CDI to be enabled on the node and a matching host CDI specification for the requested device.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-53492"
},
{
"category": "external",
"summary": "RHBZ#2496130",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2496130"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-53492",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-53492"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-53492",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53492"
},
{
"category": "external",
"summary": "https://github.com/containerd/containerd/security/advisories/GHSA-33vj-92qq-66hc",
"url": "https://github.com/containerd/containerd/security/advisories/GHSA-33vj-92qq-66hc"
}
],
"release_date": "2026-07-01T17:59:12.552000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-06T07:31:01+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:51033"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:31a22af5fb2d2767267b80b3c15dab1ed0c2620eb1d33ffa4c4c24ca57071cf9_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:48a9021e3e559028b47eb049452df977177c93093d59131098ac0b6b10026213_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:56a93ad53df1c0445b3fee293ab42caa375f88b72872d8fb844efeb114869eaa_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:93fa051884d7ca638e8aee7244dc1635e1b1d07d05d7e7098fee24aae642afb4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4d763201b2daa4fe2e7f74fb42671e9752b9c301272b357d9e810420a617aff2_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:4f2300a741dd4e84bf99b1ff738a00fddd52b75db4b69ad42f3faf47e8ae3e75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:956de2cb9012bb5d0cc0eee438e58dab3090f445617aa4f3361dbe7f9f151eb0_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:cf80473217c222c4e5cc7451f5a256422b553e01df03113b758e4172c3a3b5f3_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:93d8ce09a06af1c287ebe7616ebc38f6cf0acb52e11f96dbfbcca583c5e0540f_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:9ef46cc9fe1bb0608aba0b4d72bb1a1479e93e96f8cae8eea01643689fa568c5_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:cc86577f50b381f29b2a065527f227f5968be315908fc1683c89d52bafdf8f60_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:eea354fd6baee1b98e209e06863a04975885a3c12be678f3e33bcdd077549030_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-operator-bundle@sha256:bf818a9af2dc1e22b2c24d07d8e52f65453b529076277fb3eb26069aa4ad3484_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:54db3ee0284dbebea5017981abb6f7c710d7f1c505389931290d39a926cc805e_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:5c0f39a8d788109cf25cee0fa5d0f62024303a7f396b011ea257a4d89ba062cb_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:b38f0ae8f13ad9f9c8088d46b1e38b1348976dbfae03338cacf84c9f3ff7d6a3_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:c2ad30f62435ccf5250dab6e6e8286ca733cd513c8ab98b9d59ae3f20f606d10_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:1f2aa602270f1997e13f242fc75c52356de0c24ba68640b042e5d16280901e44_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:2e742bb7f42f63c253d8c027783f4722e5c140ca9f2fe9872cb874c2886535b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:4c20843755e2706f863274be9159a5e8e07895af8f70518b95bff5daf441e78e_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:b26b7bc0844ba584035ede98486feead55b5066667e068d05fcbeb6cc971b0e6_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:345f3aa4c15440f3a49513a2f49631799a0d9dda8ff1f3cd114adbc1e9d996c5_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:46227e86cc58f7b19655017b313bc8bcdd38f1f78d4f52f4a68428dfc54e3dfc_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:9e2cde3376ceec8f2794102f2b9834298eda10c9f7fe947c56f684fd493d8a75_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-csi-rhel9@sha256:e23a3ed44476b29116abc947f84e0134800ac5a3a97a4d7b6338d02a77940552_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:19b74fe19c3e183f37af9f8db97eb7ab858c46c6c5bf6c10154f622948dd327b_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:43f70e447a16f13fb6f54c3b5b924ca475be3aa6e5af8cc5445728488e2d6025_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fa94619dec5548247a1b304e060094e07878276a6ee1351010d0a4cae5023af1_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:fd943aa4cdb7f56dd2b3a5ed30d4ba635e2c238e4cb5e8577671d301ef3129ab_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:39fc14634b12f9fe479aaf5158d3045fc12df6f5b5b9abb9dbe041b49ac2e330_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:40f8b07eaceb45648f8d8c3c05aea3ea297c7a6ad3fa03d5d584a9794a1e37b2_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:7ec0bb0c482b26eacd316064ab574b4e3222c738bb6fd93c7cdb256a78e9914e_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:bd3c7d05d5fbf4ee07809b5698c80a1a0d36b6f3742210239615221603e3fcb2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:67a46a2e5009d48b84a206a8a6c6ef240356f2eb45aa035e660875601d34f4e4_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6d17bf782abba341a8c1ffe638a498cd6c6e71c2791633d4b01b516702fdadaf_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:7498539ff18032e50df1c8641d1aa0993b0068276fd4770140d844b22dd020b7_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:c612178391540c6f2f29281b01c6bb3abc6c659872b9a8652e599c8f4ee4bfa2_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:36c85ae99ee17573a3e851cf1b3a60c5c75be3789d3ab2ddcfd9faf89b45a352_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:378da075a87da97c186d6b069ceba23b8ce50b8fc183f89bc6775c9a0c93d92c_s390x",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:aebba180f2693a7833fd76168a9eb7b532e026e40076003ceb0a3a9d98e9bc70_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-restic-restore-helper-rhel9@sha256:be6ee9a26cfbc7420c83970f228c1d5fa90cf78ea6c4026e71e2fd0222db8207_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:391767c3af8ae4acb6d1b0fa94e194def61452ba95e3a1e6cd73ef725cf651ca_ppc64le",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:4de257f9bcb8361aeaad6ff569de2c489b2cb2b5cf03eecd5a4f203bea589cc0_amd64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9677eab53d4c0ef23c5e4b62f4a308990f3f14aac9be3b97297861ef7517a296_arm64",
"OpenShift API for Data Protection 1.3:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:9e6cbcb72af1a9b2b3843d69e5fabcc967acb7ad55c377c1c011b2214aacc3c5_s390x"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/containerd/containerd: containerd: Security bypass via Container Device Interface (CDI) annotation smuggling during checkpoint restoration."
}
]
}
RHSA-2026:54531
Vulnerability from csaf_redhat - Published: 2026-08-13 10:51 - Updated: 2026-08-22 08:40Summary
Red Hat Security Advisory: cert-manager Operator for Red Hat OpenShift 1.19.1
Severity
Important
Notes
Topic: cert-manager Operator for Red Hat OpenShift 1.19.1
Details: The cert-manager Operator for Red Hat OpenShift builds on top of Kubernetes, introducing certificate authorities
and certificates as first-class resource types in the Kubernetes API. This makes it possible to provide
certificates-as-a-service to developers working within your Kubernetes cluster.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in golang.org/x/net/html. A remote attacker could exploit this vulnerability by providing specially crafted HTML. When this arbitrary HTML is parsed and rendered, it can result in an unexpected HTML tree, bypassing input sanitization. This can be leveraged to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution in applications that use the affected component.
8.1 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/html. When arbitrary HTML is parsed and then rendered, it can result in an unexpected HTML tree. This allows an attacker to bypass HTML sanitization mechanisms, leading to Cross-Site Scripting (XSS) attacks in applications. Such attacks can result in information disclosure or arbitrary code execution.
8.1 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in the `crypto/x509` package of `golang`. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name (SAN) entries. The certificate verification process, specifically the `VerifyHostname` function, incurs excessive computational overhead due to repeated string operations when processing these entries. This can lead to a significant performance degradation or unresponsiveness of systems validating such certificates.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64 | — |
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64 | — |
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.
9.1 (Critical)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64 | — |
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64 | — |
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64 | — |
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64 | — |
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.
8.2 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64 | — |
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64 | — |
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote attacker could exploit this vulnerability when an SSH server authentication callback returned a PartialSuccessError with non-nil permissions. This flaw caused these permissions to be silently discarded, potentially bypassing certificate restrictions, such as a force-command, after a second authentication factor succeeded. This could lead to unauthorized command execution or access.
8.8 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection's read loop. This prevents the associated resources from being released, leading to a resource leak per connection. The consequence is a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64 | — |
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64 | — |
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/html. This vulnerability allows an attacker to manipulate how HTML is processed and displayed. By providing specially crafted HTML, an attacker can cause an unexpected structure in the rendered output. This can lead to Cross-Site Scripting (XSS) attacks, where malicious scripts are executed in a user's web browser, potentially compromising user data or taking control of their session.
6.1 (Medium)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in the Golang MIME (Multipurpose Internet Mail Extensions) package. A remote attacker could exploit this vulnerability by sending a maliciously-crafted MIME header containing many invalid encoded-words. This could lead to excessive CPU consumption, resulting in a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64 | — |
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64 | — |
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. Source-address validation can be skipped when an SSH server configuration uses an authentication callback type other than public key, allowing authorization bypass in misconfigured servers. This is a follow-on to incomplete coverage from the CVE-2024-45337 fix.
7.1 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64 | — |
Vendor Fix
fix
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64 | — | ||
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64 | — | ||
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le | — | ||
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x | — |
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote attacker could send specially crafted inputs to the AES-GCM packet decoder. This could lead to an incorrectly placed cast from bytes to an integer, causing a server-side panic and resulting in a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
References
111 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "cert-manager Operator for Red Hat OpenShift 1.19.1",
"title": "Topic"
},
{
"category": "general",
"text": "The cert-manager Operator for Red Hat OpenShift builds on top of Kubernetes, introducing certificate authorities\nand certificates as first-class resource types in the Kubernetes API. This makes it possible to provide\ncertificates-as-a-service to developers working within your Kubernetes cluster.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:54531",
"url": "https://access.redhat.com/errata/RHSA-2026:54531"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-25681",
"url": "https://access.redhat.com/security/cve/CVE-2026-25681"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-27136",
"url": "https://access.redhat.com/security/cve/CVE-2026-27136"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-27145",
"url": "https://access.redhat.com/security/cve/CVE-2026-27145"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33186",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39820",
"url": "https://access.redhat.com/security/cve/CVE-2026-39820"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39821",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39828",
"url": "https://access.redhat.com/security/cve/CVE-2026-39828"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39830",
"url": "https://access.redhat.com/security/cve/CVE-2026-39830"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42499",
"url": "https://access.redhat.com/security/cve/CVE-2026-42499"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42502",
"url": "https://access.redhat.com/security/cve/CVE-2026-42502"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42504",
"url": "https://access.redhat.com/security/cve/CVE-2026-42504"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-46595",
"url": "https://access.redhat.com/security/cve/CVE-2026-46595"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-46597",
"url": "https://access.redhat.com/security/cve/CVE-2026-46597"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "external",
"summary": "https://docs.openshift.com/container-platform/latest/security/cert_manager_operator/index.html",
"url": "https://docs.openshift.com/container-platform/latest/security/cert_manager_operator/index.html"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_54531.json"
}
],
"title": "Red Hat Security Advisory: cert-manager Operator for Red Hat OpenShift 1.19.1",
"tracking": {
"current_release_date": "2026-08-22T08:40:58+00:00",
"generator": {
"date": "2026-08-22T08:40:58+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.16"
}
},
"id": "RHSA-2026:54531",
"initial_release_date": "2026-08-13T10:51:40+00:00",
"revision_history": [
{
"date": "2026-08-13T10:51:40+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-15T05:55:47+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-22T08:40:58+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Cert Manager support for Red Hat OpenShift release 1.19",
"product": {
"name": "Cert Manager support for Red Hat OpenShift release 1.19",
"product_id": "Cert Manager support for Red Hat OpenShift release 1.19",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:cert_manager:1.19::el9"
}
}
}
],
"category": "product_family",
"name": "Cert Manager support for Red Hat OpenShift release"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64",
"product": {
"name": "registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64",
"product_id": "registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64",
"product_identification_helper": {
"purl": "pkg:oci/jetstack-cert-manager-rhel9@sha256%3A82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2?arch=amd64\u0026repository_url=registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9\u0026tag=1786613805"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"product": {
"name": "registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"product_id": "registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"product_identification_helper": {
"purl": "pkg:oci/jetstack-cert-manager-acmesolver-rhel9@sha256%3A0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2?arch=amd64\u0026repository_url=registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9\u0026tag=1786613805"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"product": {
"name": "registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"product_id": "registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"product_identification_helper": {
"purl": "pkg:oci/jetstack-cert-manager-rhel9@sha256%3A6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd?arch=s390x\u0026repository_url=registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9\u0026tag=1786613805"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x",
"product": {
"name": "registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x",
"product_id": "registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x",
"product_identification_helper": {
"purl": "pkg:oci/jetstack-cert-manager-acmesolver-rhel9@sha256%3Ab574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3?arch=s390x\u0026repository_url=registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9\u0026tag=1786613805"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"product": {
"name": "registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"product_id": "registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/jetstack-cert-manager-rhel9@sha256%3A60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da?arch=ppc64le\u0026repository_url=registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9\u0026tag=1786613805"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"product": {
"name": "registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"product_id": "registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/jetstack-cert-manager-acmesolver-rhel9@sha256%3Aa16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6?arch=ppc64le\u0026repository_url=registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9\u0026tag=1786613805"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"product": {
"name": "registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"product_id": "registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"product_identification_helper": {
"purl": "pkg:oci/jetstack-cert-manager-rhel9@sha256%3A79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4?arch=arm64\u0026repository_url=registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9\u0026tag=1786613805"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"product": {
"name": "registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"product_id": "registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"product_identification_helper": {
"purl": "pkg:oci/jetstack-cert-manager-acmesolver-rhel9@sha256%3A5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90?arch=arm64\u0026repository_url=registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9\u0026tag=1786613805"
}
}
}
],
"category": "architecture",
"name": "arm64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64 as a component of Cert Manager support for Red Hat OpenShift release 1.19",
"product_id": "Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64"
},
"product_reference": "registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"relates_to_product_reference": "Cert Manager support for Red Hat OpenShift release 1.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64 as a component of Cert Manager support for Red Hat OpenShift release 1.19",
"product_id": "Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64"
},
"product_reference": "registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"relates_to_product_reference": "Cert Manager support for Red Hat OpenShift release 1.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le as a component of Cert Manager support for Red Hat OpenShift release 1.19",
"product_id": "Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le"
},
"product_reference": "registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"relates_to_product_reference": "Cert Manager support for Red Hat OpenShift release 1.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x as a component of Cert Manager support for Red Hat OpenShift release 1.19",
"product_id": "Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x"
},
"product_reference": "registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x",
"relates_to_product_reference": "Cert Manager support for Red Hat OpenShift release 1.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le as a component of Cert Manager support for Red Hat OpenShift release 1.19",
"product_id": "Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le"
},
"product_reference": "registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"relates_to_product_reference": "Cert Manager support for Red Hat OpenShift release 1.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x as a component of Cert Manager support for Red Hat OpenShift release 1.19",
"product_id": "Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x"
},
"product_reference": "registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"relates_to_product_reference": "Cert Manager support for Red Hat OpenShift release 1.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64 as a component of Cert Manager support for Red Hat OpenShift release 1.19",
"product_id": "Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64"
},
"product_reference": "registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"relates_to_product_reference": "Cert Manager support for Red Hat OpenShift release 1.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64 as a component of Cert Manager support for Red Hat OpenShift release 1.19",
"product_id": "Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64"
},
"product_reference": "registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64",
"relates_to_product_reference": "Cert Manager support for Red Hat OpenShift release 1.19"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-25681",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-05-22T16:01:08.177603+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480761"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/html. A remote attacker could exploit this vulnerability by providing specially crafted HTML. When this arbitrary HTML is parsed and rendered, it can result in an unexpected HTML tree, bypassing input sanitization. This can be leveraged to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution in applications that use the affected component.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in `golang.org/x/net/html` could enable remote attackers to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution. The flaw allows specially crafted HTML to bypass input sanitization during parsing and rendering. Red Hat products are affected if they process untrusted HTML content using the vulnerable component without additional output encoding or robust content security policies.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-25681"
},
{
"category": "external",
"summary": "RHBZ#2480761",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480761"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-25681",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25681"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25681",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25681"
},
{
"category": "external",
"summary": "https://go.dev/cl/781703",
"url": "https://go.dev/cl/781703"
},
{
"category": "external",
"summary": "https://go.dev/issue/79574",
"url": "https://go.dev/issue/79574"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5029",
"url": "https://pkg.go.dev/vuln/GO-2026-5029"
}
],
"release_date": "2026-05-22T15:01:21.975000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-13T10:51:40+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nThe steps to apply the upgraded images are different depending on the installation plan approval policy you used\nwhen installing the cert-manager Operator for Red Hat OpenShift.\n\n- If the approval policy is set to `Automatic`, then the Operator will be upgraded automatically when there is a\nnew version of the Operator. No further action is required to upgrade. This is the default setting.\n\n- If you changed the approval policy to `Manual`, then you must manually approve the upgrade to the Operator.\n\nSee https://docs.openshift.com/container-platform/latest/security/cert_manager_operator/index.html for additional\ninformation.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54531"
},
{
"category": "workaround",
"details": "To mitigate this flaw, applications processing untrusted HTML input must implement strict input sanitization and ensure all output is properly encoded before rendering. Deploying a comprehensive Content Security Policy (CSP) can restrict script execution, further reducing the attack surface. Administrators should review application configurations to ensure adequate protection against XSS.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting"
},
{
"cve": "CVE-2026-27136",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-05-22T16:00:56.609820+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480757"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/html. When arbitrary HTML is parsed and then rendered, it can result in an unexpected HTML tree. This allows an attacker to bypass HTML sanitization mechanisms, leading to Cross-Site Scripting (XSS) attacks in applications. Such attacks can result in information disclosure or arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in `golang.org/x/net/html` is rated as Important. It allows for Cross-Site Scripting (XSS) attacks by enabling an attacker to bypass HTML sanitization mechanisms when arbitrary HTML is parsed and rendered. This can lead to information disclosure or arbitrary code execution in affected applications. Exploitation typically requires user interaction, where a user processes specially crafted malicious HTML content.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27136"
},
{
"category": "external",
"summary": "RHBZ#2480757",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480757"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27136",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27136"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27136",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27136"
},
{
"category": "external",
"summary": "https://go.dev/cl/781685",
"url": "https://go.dev/cl/781685"
},
{
"category": "external",
"summary": "https://go.dev/issue/79575",
"url": "https://go.dev/issue/79575"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5030",
"url": "https://pkg.go.dev/vuln/GO-2026-5030"
}
],
"release_date": "2026-05-22T15:01:22.111000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-13T10:51:40+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nThe steps to apply the upgraded images are different depending on the installation plan approval policy you used\nwhen installing the cert-manager Operator for Red Hat OpenShift.\n\n- If the approval policy is set to `Automatic`, then the Operator will be upgraded automatically when there is a\nnew version of the Operator. No further action is required to upgrade. This is the default setting.\n\n- If you changed the approval policy to `Manual`, then you must manually approve the upgrade to the Operator.\n\nSee https://docs.openshift.com/container-platform/latest/security/cert_manager_operator/index.html for additional\ninformation.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54531"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass"
},
{
"cve": "CVE-2026-27145",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-06-02T23:01:08.992540+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2484207"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `crypto/x509` package of `golang`. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name (SAN) entries. The certificate verification process, specifically the `VerifyHostname` function, incurs excessive computational overhead due to repeated string operations when processing these entries. This can lead to a significant performance degradation or unresponsiveness of systems validating such certificates.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in the Go standard library crypto/x509 package. When verifying a TLS certificate hostname, VerifyHostname processed each DNS Subject Alternative Name (SAN) entry in a loop and repeatedly split the candidate hostname on \".\" characters. For certificates with a very large DNS SAN list, CPU use could grow quadratically with the number of SAN entries and hostname labels. Because hostname verification runs before the certificate chain is built, this overhead can occur even when the certificate is not trusted.\n\nRed Hat rates this issue as Important. It affects Red Hat products that include the Go standard library crypto/x509 code from an affected Go toolchain version (before Go 1.25.11, or from Go 1.26.0 through Go 1.26.3). Applications and container images built with a fixed Go release (1.25.11 or later, or 1.26.4 or later) are not affected. Community distributions such as Fedora are also affected.\n\nUpstream fix: Go 1.25.11 and Go 1.26.4 (GO-2026-5037).",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64"
],
"known_not_affected": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27145"
},
{
"category": "external",
"summary": "RHBZ#2484207",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484207"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27145",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27145"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27145",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27145"
},
{
"category": "external",
"summary": "https://go.dev/cl/783621",
"url": "https://go.dev/cl/783621"
},
{
"category": "external",
"summary": "https://go.dev/issue/79694",
"url": "https://go.dev/issue/79694"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw",
"url": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5037",
"url": "https://pkg.go.dev/vuln/GO-2026-5037"
}
],
"release_date": "2026-06-02T22:01:36.954000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-13T10:51:40+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nThe steps to apply the upgraded images are different depending on the installation plan approval policy you used\nwhen installing the cert-manager Operator for Red Hat OpenShift.\n\n- If the approval policy is set to `Automatic`, then the Operator will be upgraded automatically when there is a\nnew version of the Operator. No further action is required to upgrade. This is the default setting.\n\n- If you changed the approval policy to `Manual`, then you must manually approve the upgrade to the Operator.\n\nSee https://docs.openshift.com/container-platform/latest/security/cert_manager_operator/index.html for additional\ninformation.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54531"
},
{
"category": "workaround",
"details": "A flaw was found in the Go standard library crypto/x509 package. When verifying a TLS certificate hostname, VerifyHostname processed each DNS Subject Alternative Name (SAN) entry in a loop and repeatedly split the candidate hostname on \".\" characters. For certificates with a very large DNS SAN list, CPU use could grow quadratically with the number of SAN entries and hostname labels. Because hostname verification runs before the certificate chain is built, this overhead can occur even when the certificate is not trusted.\n\nRed Hat rates this issue as Important. It affects Red Hat products that include the Go standard library crypto/x509 code from an affected Go toolchain version (before Go 1.25.11, or from Go 1.26.0 through Go 1.26.3). Applications and container images built with a fixed Go release (1.25.11 or later, or 1.26.4 or later) are not affected. Community distributions such as Fedora are also affected.\n\nUpstream fix: Go 1.25.11 and Go 1.26.4 (GO-2026-5037).",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries"
},
{
"cve": "CVE-2026-33186",
"cwe": {
"id": "CWE-551",
"name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization"
},
"discovery_date": "2026-03-20T23:02:27.802640+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2449833"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64"
],
"known_not_affected": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "RHBZ#2449833",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449833"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33186",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33186"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3",
"url": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3"
}
],
"release_date": "2026-03-20T22:23:32.147000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-13T10:51:40+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nThe steps to apply the upgraded images are different depending on the installation plan approval policy you used\nwhen installing the cert-manager Operator for Red Hat OpenShift.\n\n- If the approval policy is set to `Automatic`, then the Operator will be upgraded automatically when there is a\nnew version of the Operator. No further action is required to upgrade. This is the default setting.\n\n- If you changed the approval policy to `Manual`, then you must manually approve the upgrade to the Operator.\n\nSee https://docs.openshift.com/container-platform/latest/security/cert_manager_operator/index.html for additional\ninformation.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54531"
},
{
"category": "workaround",
"details": "To mitigate this issue, implement infrastructure-level normalization to ensure all incoming HTTP/2 `:path` headers are properly formatted with a leading slash before reaching the gRPC-Go server. This can be achieved by configuring a reverse proxy or API gateway to validate and normalize the `:path` header. Ensure that any such intermediary is properly configured and restarted to apply the changes, which may temporarily impact service availability.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation"
},
{
"cve": "CVE-2026-39820",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-05-07T20:01:27.800929+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467820"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net/mail` package. Applications processing untrusted email inputs via `ParseAddress`, `ParseAddressList`, or `ParseDate` functions are susceptible to excessive resource consumption, which can lead to service unavailability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64"
],
"known_not_affected": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39820"
},
{
"category": "external",
"summary": "RHBZ#2467820",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467820"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39820",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39820"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820"
},
{
"category": "external",
"summary": "https://go.dev/cl/759940",
"url": "https://go.dev/cl/759940"
},
{
"category": "external",
"summary": "https://go.dev/issue/78566",
"url": "https://go.dev/issue/78566"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4986",
"url": "https://pkg.go.dev/vuln/GO-2026-4986"
}
],
"release_date": "2026-05-07T19:41:19.854000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-13T10:51:40+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nThe steps to apply the upgraded images are different depending on the installation plan approval policy you used\nwhen installing the cert-manager Operator for Red Hat OpenShift.\n\n- If the approval policy is set to `Automatic`, then the Operator will be upgraded automatically when there is a\nnew version of the Operator. No further action is required to upgrade. This is the default setting.\n\n- If you changed the approval policy to `Manual`, then you must manually approve the upgrade to the Operator.\n\nSee https://docs.openshift.com/container-platform/latest/security/cert_manager_operator/index.html for additional\ninformation.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54531"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs"
},
{
"cve": "CVE-2026-39821",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-05-22T16:00:52.844126+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480756"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/net/idna is vulnerable to privilege escalation through incorrect Punycode label handling in ToASCII and ToUnicode. An attacker who can supply a Punycode hostname that passes an ASCII-only authorization check may have it normalized to a restricted ASCII name the application intended to block. Red Hat exposure is broad across products shipping the Go toolchain or bundling golang.org/x/net, including RHEL and RHEL-AI golang RPMs, hummingbird Go runtimes, OpenShift and ODF container builds, and Ceph/OpenShift components compiled against affected x/net versions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64"
],
"known_not_affected": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "RHBZ#2480756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39821",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39821"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://go.dev/cl/767220",
"url": "https://go.dev/cl/767220"
},
{
"category": "external",
"summary": "https://go.dev/issue/78760",
"url": "https://go.dev/issue/78760"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5026",
"url": "https://pkg.go.dev/vuln/GO-2026-5026"
}
],
"release_date": "2026-05-22T15:01:21.462000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-13T10:51:40+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nThe steps to apply the upgraded images are different depending on the installation plan approval policy you used\nwhen installing the cert-manager Operator for Red Hat OpenShift.\n\n- If the approval policy is set to `Automatic`, then the Operator will be upgraded automatically when there is a\nnew version of the Operator. No further action is required to upgrade. This is the default setting.\n\n- If you changed the approval policy to `Manual`, then you must manually approve the upgrade to the Operator.\n\nSee https://docs.openshift.com/container-platform/latest/security/cert_manager_operator/index.html for additional\ninformation.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54531"
},
{
"category": "workaround",
"details": "Upgrade to a fixed golang.org/x/net release that includes the idna correction, via updated golang or dependent package rebuilds.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing"
},
{
"cve": "CVE-2026-39828",
"cwe": {
"id": "CWE-281",
"name": "Improper Preservation of Permissions"
},
"discovery_date": "2026-05-22T04:01:46.775641+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480687"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote attacker could exploit this vulnerability when an SSH server authentication callback returned a PartialSuccessError with non-nil permissions. This flaw caused these permissions to be silently discarded, potentially bypassing certificate restrictions, such as a force-command, after a second authentication factor succeeded. This could lead to unauthorized command execution or access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important security flaw in the `golang.org/x/crypto/ssh` library. When an SSH server utilizing this library is configured with specific authentication callbacks that return a `PartialSuccessError` with non-nil permissions, an attacker could bypass intended certificate restrictions, such as `force-command`. This bypass could lead to unauthorized command execution or access on affected Red Hat systems configured with multi-factor authentication and certificate-based access controls.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39828"
},
{
"category": "external",
"summary": "RHBZ#2480687",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480687"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39828",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39828"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39828",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39828"
},
{
"category": "external",
"summary": "https://go.dev/cl/781621",
"url": "https://go.dev/cl/781621"
},
{
"category": "external",
"summary": "https://go.dev/issue/79562",
"url": "https://go.dev/issue/79562"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5014",
"url": "https://pkg.go.dev/vuln/GO-2026-5014"
}
],
"release_date": "2026-05-22T02:31:26.883000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-13T10:51:40+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nThe steps to apply the upgraded images are different depending on the installation plan approval policy you used\nwhen installing the cert-manager Operator for Red Hat OpenShift.\n\n- If the approval policy is set to `Automatic`, then the Operator will be upgraded automatically when there is a\nnew version of the Operator. No further action is required to upgrade. This is the default setting.\n\n- If you changed the approval policy to `Manual`, then you must manually approve the upgrade to the Operator.\n\nSee https://docs.openshift.com/container-platform/latest/security/cert_manager_operator/index.html for additional\ninformation.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54531"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions"
},
{
"cve": "CVE-2026-39830",
"cwe": {
"id": "CWE-772",
"name": "Missing Release of Resource after Effective Lifetime"
},
"discovery_date": "2026-05-22T04:01:38.517202+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480684"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection\u0027s read loop. This prevents the associated resources from being released, leading to a resource leak per connection. The consequence is a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in `golang.org/x/crypto/ssh`. A remote, unauthenticated attacker can exploit this vulnerability by sending unsolicited global request responses to an affected SSH server, leading to resource exhaustion and a denial of service. The impact is considered Important due to the potential for unauthenticated remote disruption of services utilizing the vulnerable SSH library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39830"
},
{
"category": "external",
"summary": "RHBZ#2480684",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480684"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39830",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39830"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39830",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39830"
},
{
"category": "external",
"summary": "https://go.dev/cl/781640",
"url": "https://go.dev/cl/781640"
},
{
"category": "external",
"summary": "https://go.dev/cl/781664",
"url": "https://go.dev/cl/781664"
},
{
"category": "external",
"summary": "https://go.dev/issue/79564",
"url": "https://go.dev/issue/79564"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5017",
"url": "https://pkg.go.dev/vuln/GO-2026-5017"
}
],
"release_date": "2026-05-22T02:31:27.208000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-13T10:51:40+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nThe steps to apply the upgraded images are different depending on the installation plan approval policy you used\nwhen installing the cert-manager Operator for Red Hat OpenShift.\n\n- If the approval policy is set to `Automatic`, then the Operator will be upgraded automatically when there is a\nnew version of the Operator. No further action is required to upgrade. This is the default setting.\n\n- If you changed the approval policy to `Manual`, then you must manually approve the upgrade to the Operator.\n\nSee https://docs.openshift.com/container-platform/latest/security/cert_manager_operator/index.html for additional\ninformation.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54531"
},
{
"category": "workaround",
"details": "To mitigate this denial of service vulnerability, restrict network access to any service that utilizes the `golang.org/x/crypto/ssh` library and is exposed to untrusted networks. Implement firewall rules to allow connections only from trusted hosts or networks. This action limits the ability of malicious peers to send unsolicited global request responses. A restart of the affected service may be necessary for the new network rules to be applied effectively.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses"
},
{
"cve": "CVE-2026-42499",
"cwe": {
"id": "CWE-1046",
"name": "Creation of Immutable Text Using String Concatenation"
},
"discovery_date": "2026-05-07T20:00:51.685602+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467809"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the `net/mail` package of the Go standard library. A remote attacker can exploit this flaw by sending specially crafted email addresses, leading to excessive resource consumption and a denial of service in Go applications that parse email addresses using the affected library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64"
],
"known_not_affected": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42499"
},
{
"category": "external",
"summary": "RHBZ#2467809",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467809"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42499",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42499"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499"
},
{
"category": "external",
"summary": "https://go.dev/cl/771520",
"url": "https://go.dev/cl/771520"
},
{
"category": "external",
"summary": "https://go.dev/issue/78987",
"url": "https://go.dev/issue/78987"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4977",
"url": "https://pkg.go.dev/vuln/GO-2026-4977"
}
],
"release_date": "2026-05-07T19:41:18.615000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-13T10:51:40+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nThe steps to apply the upgraded images are different depending on the installation plan approval policy you used\nwhen installing the cert-manager Operator for Red Hat OpenShift.\n\n- If the approval policy is set to `Automatic`, then the Operator will be upgraded automatically when there is a\nnew version of the Operator. No further action is required to upgrade. This is the default setting.\n\n- If you changed the approval policy to `Manual`, then you must manually approve the upgrade to the Operator.\n\nSee https://docs.openshift.com/container-platform/latest/security/cert_manager_operator/index.html for additional\ninformation.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54531"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing"
},
{
"cve": "CVE-2026-42502",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-05-22T16:01:11.151484+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480762"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/html. This vulnerability allows an attacker to manipulate how HTML is processed and displayed. By providing specially crafted HTML, an attacker can cause an unexpected structure in the rendered output. This can lead to Cross-Site Scripting (XSS) attacks, where malicious scripts are executed in a user\u0027s web browser, potentially compromising user data or taking control of their session.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via unexpected HTML tree rendering",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw in golang.org/x/net/html can lead to Cross-Site Scripting (XSS) in applications that parse and render untrusted HTML, even with sanitization attempts. This is due to an unexpected HTML tree structure, allowing malicious scripts to execute in a user\u0027s browser.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42502"
},
{
"category": "external",
"summary": "RHBZ#2480762",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480762"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42502",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42502"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42502",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42502"
},
{
"category": "external",
"summary": "https://go.dev/cl/781701",
"url": "https://go.dev/cl/781701"
},
{
"category": "external",
"summary": "https://go.dev/issue/79572",
"url": "https://go.dev/issue/79572"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5027",
"url": "https://pkg.go.dev/vuln/GO-2026-5027"
}
],
"release_date": "2026-05-22T15:01:21.649000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-13T10:51:40+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nThe steps to apply the upgraded images are different depending on the installation plan approval policy you used\nwhen installing the cert-manager Operator for Red Hat OpenShift.\n\n- If the approval policy is set to `Automatic`, then the Operator will be upgraded automatically when there is a\nnew version of the Operator. No further action is required to upgrade. This is the default setting.\n\n- If you changed the approval policy to `Manual`, then you must manually approve the upgrade to the Operator.\n\nSee https://docs.openshift.com/container-platform/latest/security/cert_manager_operator/index.html for additional\ninformation.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54531"
},
{
"category": "workaround",
"details": "Applications utilizing `golang.org/x/net/html` should implement robust sanitization of all untrusted HTML input before rendering to prevent the creation of unexpected HTML structures that could facilitate XSS attacks. If an application does not require rendering arbitrary HTML, it should avoid processing such input.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via unexpected HTML tree rendering"
},
{
"cve": "CVE-2026-42504",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-06-02T23:01:00.320527+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2484204"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Golang MIME (Multipurpose Internet Mail Extensions) package. A remote attacker could exploit this vulnerability by sending a maliciously-crafted MIME header containing many invalid encoded-words. This could lead to excessive CPU consumption, resulting in a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is rated as an Important severity flaw. A remote attacker could trigger a Denial of Service by sending a crafted MIME header with numerous invalid encoded-words to an application utilizing the affected Golang MIME package. This could lead to excessive CPU consumption on the system processing the malformed header, impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64"
],
"known_not_affected": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42504"
},
{
"category": "external",
"summary": "RHBZ#2484204",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484204"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42504",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42504"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42504",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42504"
},
{
"category": "external",
"summary": "https://go.dev/cl/774481",
"url": "https://go.dev/cl/774481"
},
{
"category": "external",
"summary": "https://go.dev/issue/79217",
"url": "https://go.dev/issue/79217"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw",
"url": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5038",
"url": "https://pkg.go.dev/vuln/GO-2026-5038"
}
],
"release_date": "2026-06-02T22:01:37.219000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-13T10:51:40+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nThe steps to apply the upgraded images are different depending on the installation plan approval policy you used\nwhen installing the cert-manager Operator for Red Hat OpenShift.\n\n- If the approval policy is set to `Automatic`, then the Operator will be upgraded automatically when there is a\nnew version of the Operator. No further action is required to upgrade. This is the default setting.\n\n- If you changed the approval policy to `Manual`, then you must manually approve the upgrade to the Operator.\n\nSee https://docs.openshift.com/container-platform/latest/security/cert_manager_operator/index.html for additional\ninformation.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54531"
},
{
"category": "workaround",
"details": "To mitigate this issue, restrict network access to services that process MIME headers from untrusted sources. Implement input validation and sanitization for all incoming data, especially MIME headers, to prevent maliciously crafted content from being processed by applications utilizing the vulnerable Golang MIME package.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header"
},
{
"cve": "CVE-2026-46595",
"cwe": {
"id": "CWE-303",
"name": "Incorrect Implementation of Authentication Algorithm"
},
"discovery_date": "2026-05-22T04:01:52.215134+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480689"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. Source-address validation can be skipped when an SSH server configuration uses an authentication callback type other than public key, allowing authorization bypass in misconfigured servers. This is a follow-on to incomplete coverage from the CVE-2024-45337 fix.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/crypto/ssh is vulnerable to authorization bypass when SSH server configurations rely on source-address validation alongside non-public-key authentication callbacks. An attacker with low privileges who can authenticate through such a callback path may bypass intended source-address restrictions and gain unauthorized SSH access. Red Hat impact sits in services built with affected x/crypto/ssh, including RHEL golang streams, hummingbird Go toolchains, RHACM/MCE agents, and OpenShift or Ceph components that embed Go SSH servers with mixed callback types.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64"
],
"known_not_affected": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-46595"
},
{
"category": "external",
"summary": "RHBZ#2480689",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480689"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-46595",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46595"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46595",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46595"
},
{
"category": "external",
"summary": "https://go.dev/cl/781642",
"url": "https://go.dev/cl/781642"
},
{
"category": "external",
"summary": "https://go.dev/issue/79570",
"url": "https://go.dev/issue/79570"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5023",
"url": "https://pkg.go.dev/vuln/GO-2026-5023"
}
],
"release_date": "2026-05-22T02:31:27.894000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-13T10:51:40+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nThe steps to apply the upgraded images are different depending on the installation plan approval policy you used\nwhen installing the cert-manager Operator for Red Hat OpenShift.\n\n- If the approval policy is set to `Automatic`, then the Operator will be upgraded automatically when there is a\nnew version of the Operator. No further action is required to upgrade. This is the default setting.\n\n- If you changed the approval policy to `Manual`, then you must manually approve the upgrade to the Operator.\n\nSee https://docs.openshift.com/container-platform/latest/security/cert_manager_operator/index.html for additional\ninformation.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54531"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L",
"version": "3.1"
},
"products": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation"
},
{
"cve": "CVE-2026-46597",
"cwe": {
"id": "CWE-681",
"name": "Incorrect Conversion between Numeric Types"
},
"discovery_date": "2026-05-22T04:01:21.721980+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480678"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote attacker could send specially crafted inputs to the AES-GCM packet decoder. This could lead to an incorrectly placed cast from bytes to an integer, causing a server-side panic and resulting in a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted AES-GCM packet decoder inputs",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important denial of service flaw in `golang.org/x/crypto/ssh` allows a remote attacker to trigger a server-side panic by sending specially crafted inputs to the AES-GCM packet decoder. This vulnerability could lead to service unavailability in Red Hat products that incorporate and expose SSH services built with the affected `golang.org/x/crypto/ssh` component.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-46597"
},
{
"category": "external",
"summary": "RHBZ#2480678",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480678"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-46597",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46597"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46597",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46597"
},
{
"category": "external",
"summary": "https://go.dev/cl/781620",
"url": "https://go.dev/cl/781620"
},
{
"category": "external",
"summary": "https://go.dev/issue/79561",
"url": "https://go.dev/issue/79561"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5013",
"url": "https://pkg.go.dev/vuln/GO-2026-5013"
}
],
"release_date": "2026-05-22T02:31:26.754000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-13T10:51:40+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\n\nThe steps to apply the upgraded images are different depending on the installation plan approval policy you used\nwhen installing the cert-manager Operator for Red Hat OpenShift.\n\n- If the approval policy is set to `Automatic`, then the Operator will be upgraded automatically when there is a\nnew version of the Operator. No further action is required to upgrade. This is the default setting.\n\n- If you changed the approval policy to `Manual`, then you must manually approve the upgrade to the Operator.\n\nSee https://docs.openshift.com/container-platform/latest/security/cert_manager_operator/index.html for additional\ninformation.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:54531"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:0e4493d95443c137e4fe2e5b81cdf3d6a9b7b5d74c9162c3f32909a331dc07f2_amd64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:5074228e3df2095b082e468b4c99d285203313133e208ca1893b2ae966fbee90_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:a16ba6a9cb55a5c6e0743cf8d38742c346c22518e02c1e045b017bed380863b6_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-acmesolver-rhel9@sha256:b574ad0711134be333ae87c25dcc910c5f4847ce454779eda9ea0125230777f3_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:60f97a1218b94ccb0e21bb5677bf906be3369b79ff81fa35050de1f4385027da_ppc64le",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:6dd44adc300558e1a9bee074347bc394e9335de4cab7ca3a32cc8a403cdad5dd_s390x",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:79091d478d6c09140474f2707e4dad555f393c9bdc866d567265b747ad7cc9a4_arm64",
"Cert Manager support for Red Hat OpenShift release 1.19:registry.redhat.io/cert-manager/jetstack-cert-manager-rhel9@sha256:82461a011b7698c367b21a0866ac8c73a44fb3d5f21527cb34ed1495383207c2_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted AES-GCM packet decoder inputs"
}
]
}
SUSE-SU-2026:22065-1
Vulnerability from csaf_suse - Published: 2026-06-10 08:12 - Updated: 2026-06-10 08:12Summary
Security update for elemental-toolkit
Severity
Important
Notes
Title of the patch: Security update for elemental-toolkit
Description of the patch: This update for elemental-toolkit fixes the following issue
- CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2 :path pseudo-
header (bsc#1260277).
Changes for elemental-toolkit:
- Update to version 2.1.6:
* Bump golang.org/x/net to v0.55.0 (bsc#1267168)
* Bump golang.org/x/crypto to v0.52.0 (bsc#1266187)
* Update orange flavor
* Install hugo from the OS repositories
* Bump actions/upload-artifact to v7
* Bump actions/cache to v5
* Bump golangci/golangci-lint-action to v9
* Bump github.com/spf13/cobra library
* Bump github.com/jaypipes/ghw library
* Bump github.com/bramvdbogaerde/go-scp library
* Bump google.golang.org/grpc library (bsc#1260277 CVE-2026-33186)
* Bump github.com/ulikunitz/xz library
* Do not clean cache on PRs from forks
Patchnames: SUSE-SLE-Micro-6.0-749
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
7.5 (High)
Affected products
Recommended
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:elemental-toolkit-2.1.6-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:elemental-toolkit-2.1.6-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
6.1 (Medium)
Affected products
Recommended
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:elemental-toolkit-2.1.6-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:elemental-toolkit-2.1.6-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
6.1 (Medium)
Affected products
Recommended
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:elemental-toolkit-2.1.6-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:elemental-toolkit-2.1.6-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
8.1 (High)
Affected products
Recommended
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:elemental-toolkit-2.1.6-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:elemental-toolkit-2.1.6-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
6.5 (Medium)
Affected products
Recommended
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:elemental-toolkit-2.1.6-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:elemental-toolkit-2.1.6-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
8.1 (High)
Affected products
Recommended
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:elemental-toolkit-2.1.6-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:elemental-toolkit-2.1.6-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.5 (High)
Affected products
Recommended
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:elemental-toolkit-2.1.6-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:elemental-toolkit-2.1.6-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
6.5 (Medium)
Affected products
Recommended
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:elemental-toolkit-2.1.6-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:elemental-toolkit-2.1.6-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
8.1 (High)
Affected products
Recommended
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:elemental-toolkit-2.1.6-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:elemental-toolkit-2.1.6-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
8.4 (High)
Affected products
Recommended
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:elemental-toolkit-2.1.6-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:elemental-toolkit-2.1.6-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.7 (High)
Affected products
Recommended
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:elemental-toolkit-2.1.6-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:elemental-toolkit-2.1.6-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.5 (High)
Affected products
Recommended
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:elemental-toolkit-2.1.6-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:elemental-toolkit-2.1.6-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.5 (High)
Affected products
Recommended
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:elemental-toolkit-2.1.6-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:elemental-toolkit-2.1.6-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
6.1 (Medium)
Affected products
Recommended
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:elemental-toolkit-2.1.6-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:elemental-toolkit-2.1.6-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
6.1 (Medium)
Affected products
Recommended
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:elemental-toolkit-2.1.6-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:elemental-toolkit-2.1.6-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
8.1 (High)
Affected products
Recommended
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:elemental-toolkit-2.1.6-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:elemental-toolkit-2.1.6-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
8.1 (High)
Affected products
Recommended
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:elemental-toolkit-2.1.6-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:elemental-toolkit-2.1.6-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.5 (High)
Affected products
Recommended
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:elemental-toolkit-2.1.6-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:elemental-toolkit-2.1.6-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.5 (High)
Affected products
Recommended
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.0:elemental-toolkit-2.1.6-1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.0:elemental-toolkit-2.1.6-1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
References
64 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for elemental-toolkit",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for elemental-toolkit fixes the following issue\n\n- CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2 :path pseudo-\n header (bsc#1260277).\n\nChanges for elemental-toolkit:\n\n- Update to version 2.1.6:\n * Bump golang.org/x/net to v0.55.0 (bsc#1267168)\n * Bump golang.org/x/crypto to v0.52.0 (bsc#1266187)\n * Update orange flavor\n * Install hugo from the OS repositories\n * Bump actions/upload-artifact to v7\n * Bump actions/cache to v5\n * Bump golangci/golangci-lint-action to v9\n * Bump github.com/spf13/cobra library\n * Bump github.com/jaypipes/ghw library\n * Bump github.com/bramvdbogaerde/go-scp library\n * Bump google.golang.org/grpc library (bsc#1260277 CVE-2026-33186)\n * Bump github.com/ulikunitz/xz library\n * Do not clean cache on PRs from forks\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-SLE-Micro-6.0-749",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_22065-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2026:22065-1",
"url": "https://www.suse.com/support/update/announcement/2026/suse-su-202622065-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2026:22065-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-June/026725.html"
},
{
"category": "self",
"summary": "SUSE Bug 1260277",
"url": "https://bugzilla.suse.com/1260277"
},
{
"category": "self",
"summary": "SUSE Bug 1266187",
"url": "https://bugzilla.suse.com/1266187"
},
{
"category": "self",
"summary": "SUSE Bug 1267168",
"url": "https://bugzilla.suse.com/1267168"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-25680 page",
"url": "https://www.suse.com/security/cve/CVE-2026-25680/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-25681 page",
"url": "https://www.suse.com/security/cve/CVE-2026-25681/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-27136 page",
"url": "https://www.suse.com/security/cve/CVE-2026-27136/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-33186 page",
"url": "https://www.suse.com/security/cve/CVE-2026-33186/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-39827 page",
"url": "https://www.suse.com/security/cve/CVE-2026-39827/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-39828 page",
"url": "https://www.suse.com/security/cve/CVE-2026-39828/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-39829 page",
"url": "https://www.suse.com/security/cve/CVE-2026-39829/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-39830 page",
"url": "https://www.suse.com/security/cve/CVE-2026-39830/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-39831 page",
"url": "https://www.suse.com/security/cve/CVE-2026-39831/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-39832 page",
"url": "https://www.suse.com/security/cve/CVE-2026-39832/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-39833 page",
"url": "https://www.suse.com/security/cve/CVE-2026-39833/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-39834 page",
"url": "https://www.suse.com/security/cve/CVE-2026-39834/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-39835 page",
"url": "https://www.suse.com/security/cve/CVE-2026-39835/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-42502 page",
"url": "https://www.suse.com/security/cve/CVE-2026-42502/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-42506 page",
"url": "https://www.suse.com/security/cve/CVE-2026-42506/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-42508 page",
"url": "https://www.suse.com/security/cve/CVE-2026-42508/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46595 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46595/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46597 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46597/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46598 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46598/"
}
],
"title": "Security update for elemental-toolkit",
"tracking": {
"current_release_date": "2026-06-10T08:12:23Z",
"generator": {
"date": "2026-06-10T08:12:23Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2026:22065-1",
"initial_release_date": "2026-06-10T08:12:23Z",
"revision_history": [
{
"date": "2026-06-10T08:12:23Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "elemental-toolkit-2.1.6-1.1.aarch64",
"product": {
"name": "elemental-toolkit-2.1.6-1.1.aarch64",
"product_id": "elemental-toolkit-2.1.6-1.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "elemental-toolkit-2.1.6-1.1.x86_64",
"product": {
"name": "elemental-toolkit-2.1.6-1.1.x86_64",
"product_id": "elemental-toolkit-2.1.6-1.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Micro 6.0",
"product": {
"name": "SUSE Linux Micro 6.0",
"product_id": "SUSE Linux Micro 6.0",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sl-micro:6.0"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "elemental-toolkit-2.1.6-1.1.aarch64 as component of SUSE Linux Micro 6.0",
"product_id": "SUSE Linux Micro 6.0:elemental-toolkit-2.1.6-1.1.aarch64"
},
"product_reference": "elemental-toolkit-2.1.6-1.1.aarch64",
"relates_to_product_reference": "SUSE Linux Micro 6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "elemental-toolkit-2.1.6-1.1.x86_64 as component of SUSE Linux Micro 6.0",
"product_id": "SUSE Linux Micro 6.0:elemental-toolkit-2.1.6-1.1.x86_64"
},
"product_reference": "elemental-toolkit-2.1.6-1.1.x86_64",
"relates_to_product_reference": "SUSE Linux Micro 6.0"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-25680",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-25680"
}
],
"notes": [
{
"category": "general",
"text": "Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:elemental-toolkit-2.1.6-1.1.aarch64",
"SUSE Linux Micro 6.0:elemental-toolkit-2.1.6-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-25680",
"url": "https://www.suse.com/security/cve/CVE-2026-25680"
},
{
"category": "external",
"summary": "SUSE Bug 1267044 for CVE-2026-25680",
"url": "https://bugzilla.suse.com/1267044"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:elemental-toolkit-2.1.6-1.1.aarch64",
"SUSE Linux Micro 6.0:elemental-toolkit-2.1.6-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:elemental-toolkit-2.1.6-1.1.aarch64",
"SUSE Linux Micro 6.0:elemental-toolkit-2.1.6-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-10T08:12:23Z",
"details": "important"
}
],
"title": "CVE-2026-25680"
},
{
"cve": "CVE-2026-25681",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-25681"
}
],
"notes": [
{
"category": "general",
"text": "Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:elemental-toolkit-2.1.6-1.1.aarch64",
"SUSE Linux Micro 6.0:elemental-toolkit-2.1.6-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-25681",
"url": "https://www.suse.com/security/cve/CVE-2026-25681"
},
{
"category": "external",
"summary": "SUSE Bug 1267044 for CVE-2026-25681",
"url": "https://bugzilla.suse.com/1267044"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:elemental-toolkit-2.1.6-1.1.aarch64",
"SUSE Linux Micro 6.0:elemental-toolkit-2.1.6-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:elemental-toolkit-2.1.6-1.1.aarch64",
"SUSE Linux Micro 6.0:elemental-toolkit-2.1.6-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-10T08:12:23Z",
"details": "important"
}
],
"title": "CVE-2026-25681"
},
{
"cve": "CVE-2026-27136",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-27136"
}
],
"notes": [
{
"category": "general",
"text": "Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:elemental-toolkit-2.1.6-1.1.aarch64",
"SUSE Linux Micro 6.0:elemental-toolkit-2.1.6-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-27136",
"url": "https://www.suse.com/security/cve/CVE-2026-27136"
},
{
"category": "external",
"summary": "SUSE Bug 1267044 for CVE-2026-27136",
"url": "https://bugzilla.suse.com/1267044"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:elemental-toolkit-2.1.6-1.1.aarch64",
"SUSE Linux Micro 6.0:elemental-toolkit-2.1.6-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:elemental-toolkit-2.1.6-1.1.aarch64",
"SUSE Linux Micro 6.0:elemental-toolkit-2.1.6-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-10T08:12:23Z",
"details": "important"
}
],
"title": "CVE-2026-27136"
},
{
"cve": "CVE-2026-33186",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-33186"
}
],
"notes": [
{
"category": "general",
"text": "gRPC-Go is the Go language implementation of gRPC. Versions prior to 1.79.3 have an authorization bypass resulting from improper input validation of the HTTP/2 `:path` pseudo-header. The gRPC-Go server was too lenient in its routing logic, accepting requests where the `:path` omitted the mandatory leading slash (e.g., `Service/Method` instead of `/Service/Method`). While the server successfully routed these requests to the correct handler, authorization interceptors (including the official `grpc/authz` package) evaluated the raw, non-canonical path string. Consequently, \"deny\" rules defined using canonical paths (starting with `/`) failed to match the incoming request, allowing it to bypass the policy if a fallback \"allow\" rule was present. This affects gRPC-Go servers that use path-based authorization interceptors, such as the official RBAC implementation in `google.golang.org/grpc/authz` or custom interceptors relying on `info.FullMethod` or `grpc.Method(ctx)`; AND that have a security policy contains specific \"deny\" rules for canonical paths but allows other requests by default (a fallback \"allow\" rule). The vulnerability is exploitable by an attacker who can send raw HTTP/2 frames with malformed `:path` headers directly to the gRPC server. The fix in version 1.79.3 ensures that any request with a `:path` that does not start with a leading slash is immediately rejected with a `codes.Unimplemented` error, preventing it from reaching authorization interceptors or handlers with a non-canonical path string. While upgrading is the most secure and recommended path, users can mitigate the vulnerability using one of the following methods: Use a validating interceptor (recommended mitigation); infrastructure-level normalization; and/or policy hardening.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:elemental-toolkit-2.1.6-1.1.aarch64",
"SUSE Linux Micro 6.0:elemental-toolkit-2.1.6-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-33186",
"url": "https://www.suse.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "SUSE Bug 1260085 for CVE-2026-33186",
"url": "https://bugzilla.suse.com/1260085"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:elemental-toolkit-2.1.6-1.1.aarch64",
"SUSE Linux Micro 6.0:elemental-toolkit-2.1.6-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:elemental-toolkit-2.1.6-1.1.aarch64",
"SUSE Linux Micro 6.0:elemental-toolkit-2.1.6-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-10T08:12:23Z",
"details": "important"
}
],
"title": "CVE-2026-33186"
},
{
"cve": "CVE-2026-39827",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-39827"
}
],
"notes": [
{
"category": "general",
"text": "An authenticated SSH client that repeatedly opened channels which were rejected by the server caused unbounded memory growth, eventually crashing the server process and affecting all connected users. Rejected channels are now properly removed from the connection\u0027s internal state and released for garbage collection.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:elemental-toolkit-2.1.6-1.1.aarch64",
"SUSE Linux Micro 6.0:elemental-toolkit-2.1.6-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-39827",
"url": "https://www.suse.com/security/cve/CVE-2026-39827"
},
{
"category": "external",
"summary": "SUSE Bug 1266049 for CVE-2026-39827",
"url": "https://bugzilla.suse.com/1266049"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:elemental-toolkit-2.1.6-1.1.aarch64",
"SUSE Linux Micro 6.0:elemental-toolkit-2.1.6-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:elemental-toolkit-2.1.6-1.1.aarch64",
"SUSE Linux Micro 6.0:elemental-toolkit-2.1.6-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-10T08:12:23Z",
"details": "important"
}
],
"title": "CVE-2026-39827"
},
{
"cve": "CVE-2026-39828",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-39828"
}
],
"notes": [
{
"category": "general",
"text": "When an SSH server authentication callback returned PartialSuccessError with non-nil Permissions, those permissions were silently discarded, potentially dropping certificate restrictions such as force-command after a second factor succeeded. Returning non-nil Permissions with PartialSuccessError now results in a connection error.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:elemental-toolkit-2.1.6-1.1.aarch64",
"SUSE Linux Micro 6.0:elemental-toolkit-2.1.6-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-39828",
"url": "https://www.suse.com/security/cve/CVE-2026-39828"
},
{
"category": "external",
"summary": "SUSE Bug 1266049 for CVE-2026-39828",
"url": "https://bugzilla.suse.com/1266049"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:elemental-toolkit-2.1.6-1.1.aarch64",
"SUSE Linux Micro 6.0:elemental-toolkit-2.1.6-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:elemental-toolkit-2.1.6-1.1.aarch64",
"SUSE Linux Micro 6.0:elemental-toolkit-2.1.6-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-10T08:12:23Z",
"details": "important"
}
],
"title": "CVE-2026-39828"
},
{
"cve": "CVE-2026-39829",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-39829"
}
],
"notes": [
{
"category": "general",
"text": "The RSA and DSA public key parsers did not enforce size limits on key parameters. A crafted public key with an excessively large modulus or DSA parameter could cause several minutes of CPU consumption during signature verification. This could be triggered by unauthenticated clients during public key authentication. RSA moduli are now limited to 8192 bits, and DSA parameters are validated per FIPS 186-2.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:elemental-toolkit-2.1.6-1.1.aarch64",
"SUSE Linux Micro 6.0:elemental-toolkit-2.1.6-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-39829",
"url": "https://www.suse.com/security/cve/CVE-2026-39829"
},
{
"category": "external",
"summary": "SUSE Bug 1266049 for CVE-2026-39829",
"url": "https://bugzilla.suse.com/1266049"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:elemental-toolkit-2.1.6-1.1.aarch64",
"SUSE Linux Micro 6.0:elemental-toolkit-2.1.6-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:elemental-toolkit-2.1.6-1.1.aarch64",
"SUSE Linux Micro 6.0:elemental-toolkit-2.1.6-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-10T08:12:23Z",
"details": "important"
}
],
"title": "CVE-2026-39829"
},
{
"cve": "CVE-2026-39830",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-39830"
}
],
"notes": [
{
"category": "general",
"text": "A malicious SSH peer could send unsolicited global request responses to fill an internal buffer, blocking the connection\u0027s read loop. The blocked goroutine could not be released by calling Close(), resulting in a resource leak per connection. Unsolicited global responses are now discarded.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:elemental-toolkit-2.1.6-1.1.aarch64",
"SUSE Linux Micro 6.0:elemental-toolkit-2.1.6-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-39830",
"url": "https://www.suse.com/security/cve/CVE-2026-39830"
},
{
"category": "external",
"summary": "SUSE Bug 1266049 for CVE-2026-39830",
"url": "https://bugzilla.suse.com/1266049"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:elemental-toolkit-2.1.6-1.1.aarch64",
"SUSE Linux Micro 6.0:elemental-toolkit-2.1.6-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:elemental-toolkit-2.1.6-1.1.aarch64",
"SUSE Linux Micro 6.0:elemental-toolkit-2.1.6-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-10T08:12:23Z",
"details": "important"
}
],
"title": "CVE-2026-39830"
},
{
"cve": "CVE-2026-39831",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-39831"
}
],
"notes": [
{
"category": "general",
"text": "The Verify() method for FIDO/U2F security key types (sk-ecdsa-sha2-nistp256@openssh.com, sk-ssh-ed25519@openssh.com) did not check the User Presence flag. Signatures generated without physical touch were accepted, allowing unattended use of a hardware security key. To restore the previous behavior, return a \"no-touch-required\" extension in Permissions.Extensions from PublicKeyCallback.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:elemental-toolkit-2.1.6-1.1.aarch64",
"SUSE Linux Micro 6.0:elemental-toolkit-2.1.6-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-39831",
"url": "https://www.suse.com/security/cve/CVE-2026-39831"
},
{
"category": "external",
"summary": "SUSE Bug 1266049 for CVE-2026-39831",
"url": "https://bugzilla.suse.com/1266049"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:elemental-toolkit-2.1.6-1.1.aarch64",
"SUSE Linux Micro 6.0:elemental-toolkit-2.1.6-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:elemental-toolkit-2.1.6-1.1.aarch64",
"SUSE Linux Micro 6.0:elemental-toolkit-2.1.6-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-10T08:12:23Z",
"details": "important"
}
],
"title": "CVE-2026-39831"
},
{
"cve": "CVE-2026-39832",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-39832"
}
],
"notes": [
{
"category": "general",
"text": "When adding a key to a remote agent constraint extensions such as restrict-destination-v00@openssh.com were not serialized in the request. Destination restrictions were silently stripped when forwarding keys, allowing unrestricted use of the key on the remote host. The client now serializes all constraint extensions. Additionally, the in-memory keyring returned by NewKeyring() now rejects keys with unsupported constraint extensions instead of silently ignoring them.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:elemental-toolkit-2.1.6-1.1.aarch64",
"SUSE Linux Micro 6.0:elemental-toolkit-2.1.6-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-39832",
"url": "https://www.suse.com/security/cve/CVE-2026-39832"
},
{
"category": "external",
"summary": "SUSE Bug 1266049 for CVE-2026-39832",
"url": "https://bugzilla.suse.com/1266049"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:elemental-toolkit-2.1.6-1.1.aarch64",
"SUSE Linux Micro 6.0:elemental-toolkit-2.1.6-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:elemental-toolkit-2.1.6-1.1.aarch64",
"SUSE Linux Micro 6.0:elemental-toolkit-2.1.6-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-10T08:12:23Z",
"details": "important"
}
],
"title": "CVE-2026-39832"
},
{
"cve": "CVE-2026-39833",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-39833"
}
],
"notes": [
{
"category": "general",
"text": "The in-memory keyring returned by NewKeyring() silently accepted keys with the ConfirmBeforeUse constraint but never enforced it. The key would sign without any confirmation prompt, with no indication to the caller that the constraint was not in effect. NewKeyring() now returns an error when unsupported constraints are requested.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:elemental-toolkit-2.1.6-1.1.aarch64",
"SUSE Linux Micro 6.0:elemental-toolkit-2.1.6-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-39833",
"url": "https://www.suse.com/security/cve/CVE-2026-39833"
},
{
"category": "external",
"summary": "SUSE Bug 1266049 for CVE-2026-39833",
"url": "https://bugzilla.suse.com/1266049"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:elemental-toolkit-2.1.6-1.1.aarch64",
"SUSE Linux Micro 6.0:elemental-toolkit-2.1.6-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:elemental-toolkit-2.1.6-1.1.aarch64",
"SUSE Linux Micro 6.0:elemental-toolkit-2.1.6-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-10T08:12:23Z",
"details": "important"
}
],
"title": "CVE-2026-39833"
},
{
"cve": "CVE-2026-39834",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-39834"
}
],
"notes": [
{
"category": "general",
"text": "When writing data larger than 4GB in a single Write call on an SSH channel, an integer overflow in the internal payload size calculation caused the write loop to spin indefinitely, sending empty packets without making progress. The size comparison now uses int64 to prevent truncation.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:elemental-toolkit-2.1.6-1.1.aarch64",
"SUSE Linux Micro 6.0:elemental-toolkit-2.1.6-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-39834",
"url": "https://www.suse.com/security/cve/CVE-2026-39834"
},
{
"category": "external",
"summary": "SUSE Bug 1266049 for CVE-2026-39834",
"url": "https://bugzilla.suse.com/1266049"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:elemental-toolkit-2.1.6-1.1.aarch64",
"SUSE Linux Micro 6.0:elemental-toolkit-2.1.6-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:elemental-toolkit-2.1.6-1.1.aarch64",
"SUSE Linux Micro 6.0:elemental-toolkit-2.1.6-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-10T08:12:23Z",
"details": "important"
}
],
"title": "CVE-2026-39834"
},
{
"cve": "CVE-2026-39835",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-39835"
}
],
"notes": [
{
"category": "general",
"text": "SSH servers which use CertChecker as a public key callback without setting IsUserAuthority or IsHostAuthority could be caused to panic by a client presenting a certificate. CertChecker now returns an error instead of panicking when these callbacks are nil.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:elemental-toolkit-2.1.6-1.1.aarch64",
"SUSE Linux Micro 6.0:elemental-toolkit-2.1.6-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-39835",
"url": "https://www.suse.com/security/cve/CVE-2026-39835"
},
{
"category": "external",
"summary": "SUSE Bug 1266049 for CVE-2026-39835",
"url": "https://bugzilla.suse.com/1266049"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:elemental-toolkit-2.1.6-1.1.aarch64",
"SUSE Linux Micro 6.0:elemental-toolkit-2.1.6-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:elemental-toolkit-2.1.6-1.1.aarch64",
"SUSE Linux Micro 6.0:elemental-toolkit-2.1.6-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-10T08:12:23Z",
"details": "important"
}
],
"title": "CVE-2026-39835"
},
{
"cve": "CVE-2026-42502",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-42502"
}
],
"notes": [
{
"category": "general",
"text": "Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:elemental-toolkit-2.1.6-1.1.aarch64",
"SUSE Linux Micro 6.0:elemental-toolkit-2.1.6-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-42502",
"url": "https://www.suse.com/security/cve/CVE-2026-42502"
},
{
"category": "external",
"summary": "SUSE Bug 1267044 for CVE-2026-42502",
"url": "https://bugzilla.suse.com/1267044"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:elemental-toolkit-2.1.6-1.1.aarch64",
"SUSE Linux Micro 6.0:elemental-toolkit-2.1.6-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:elemental-toolkit-2.1.6-1.1.aarch64",
"SUSE Linux Micro 6.0:elemental-toolkit-2.1.6-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-10T08:12:23Z",
"details": "important"
}
],
"title": "CVE-2026-42502"
},
{
"cve": "CVE-2026-42506",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-42506"
}
],
"notes": [
{
"category": "general",
"text": "Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:elemental-toolkit-2.1.6-1.1.aarch64",
"SUSE Linux Micro 6.0:elemental-toolkit-2.1.6-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-42506",
"url": "https://www.suse.com/security/cve/CVE-2026-42506"
},
{
"category": "external",
"summary": "SUSE Bug 1267044 for CVE-2026-42506",
"url": "https://bugzilla.suse.com/1267044"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:elemental-toolkit-2.1.6-1.1.aarch64",
"SUSE Linux Micro 6.0:elemental-toolkit-2.1.6-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:elemental-toolkit-2.1.6-1.1.aarch64",
"SUSE Linux Micro 6.0:elemental-toolkit-2.1.6-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-10T08:12:23Z",
"details": "important"
}
],
"title": "CVE-2026-42506"
},
{
"cve": "CVE-2026-42508",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-42508"
}
],
"notes": [
{
"category": "general",
"text": "Previously, a revoked \u0027SignatureKey\u0027 belonging to a CA was not correctly checked for revocation. Now, both the \u0027key\u0027 and \u0027key.SignatureKey\u0027 are checked for @revoked.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:elemental-toolkit-2.1.6-1.1.aarch64",
"SUSE Linux Micro 6.0:elemental-toolkit-2.1.6-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-42508",
"url": "https://www.suse.com/security/cve/CVE-2026-42508"
},
{
"category": "external",
"summary": "SUSE Bug 1266049 for CVE-2026-42508",
"url": "https://bugzilla.suse.com/1266049"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:elemental-toolkit-2.1.6-1.1.aarch64",
"SUSE Linux Micro 6.0:elemental-toolkit-2.1.6-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:elemental-toolkit-2.1.6-1.1.aarch64",
"SUSE Linux Micro 6.0:elemental-toolkit-2.1.6-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-10T08:12:23Z",
"details": "important"
}
],
"title": "CVE-2026-42508"
},
{
"cve": "CVE-2026-46595",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46595"
}
],
"notes": [
{
"category": "general",
"text": "Previously, CVE-2024-45337 fixed an authorization bypass for misused ssh server configurations; if any other type of callback is passed other than public key, then the source-address validation would be skipped.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:elemental-toolkit-2.1.6-1.1.aarch64",
"SUSE Linux Micro 6.0:elemental-toolkit-2.1.6-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46595",
"url": "https://www.suse.com/security/cve/CVE-2026-46595"
},
{
"category": "external",
"summary": "SUSE Bug 1266049 for CVE-2026-46595",
"url": "https://bugzilla.suse.com/1266049"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:elemental-toolkit-2.1.6-1.1.aarch64",
"SUSE Linux Micro 6.0:elemental-toolkit-2.1.6-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:elemental-toolkit-2.1.6-1.1.aarch64",
"SUSE Linux Micro 6.0:elemental-toolkit-2.1.6-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-10T08:12:23Z",
"details": "important"
}
],
"title": "CVE-2026-46595"
},
{
"cve": "CVE-2026-46597",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46597"
}
],
"notes": [
{
"category": "general",
"text": "An incorrectly placed cast from bytes to int allowed for server-side panic in the AES-GCM packet decoder for well-crafted inputs.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:elemental-toolkit-2.1.6-1.1.aarch64",
"SUSE Linux Micro 6.0:elemental-toolkit-2.1.6-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46597",
"url": "https://www.suse.com/security/cve/CVE-2026-46597"
},
{
"category": "external",
"summary": "SUSE Bug 1266049 for CVE-2026-46597",
"url": "https://bugzilla.suse.com/1266049"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:elemental-toolkit-2.1.6-1.1.aarch64",
"SUSE Linux Micro 6.0:elemental-toolkit-2.1.6-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:elemental-toolkit-2.1.6-1.1.aarch64",
"SUSE Linux Micro 6.0:elemental-toolkit-2.1.6-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-10T08:12:23Z",
"details": "important"
}
],
"title": "CVE-2026-46597"
},
{
"cve": "CVE-2026-46598",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46598"
}
],
"notes": [
{
"category": "general",
"text": "For certain crafted inputs, a \u0027ed25519.PrivateKey\u0027 was created by casting malformed wire bytes, leading to a panic when used.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.0:elemental-toolkit-2.1.6-1.1.aarch64",
"SUSE Linux Micro 6.0:elemental-toolkit-2.1.6-1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46598",
"url": "https://www.suse.com/security/cve/CVE-2026-46598"
},
{
"category": "external",
"summary": "SUSE Bug 1266049 for CVE-2026-46598",
"url": "https://bugzilla.suse.com/1266049"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.0:elemental-toolkit-2.1.6-1.1.aarch64",
"SUSE Linux Micro 6.0:elemental-toolkit-2.1.6-1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.0:elemental-toolkit-2.1.6-1.1.aarch64",
"SUSE Linux Micro 6.0:elemental-toolkit-2.1.6-1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-10T08:12:23Z",
"details": "important"
}
],
"title": "CVE-2026-46598"
}
]
}
SUSE-SU-2026:22074-1
Vulnerability from csaf_suse - Published: 2026-06-10 07:44 - Updated: 2026-06-10 07:44Summary
Security update for elemental-toolkit
Severity
Important
Notes
Title of the patch: Security update for elemental-toolkit
Description of the patch: This update for elemental-toolkit fixes the following issue
- CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2 :path pseudo-
header (bsc#1260277).
Changes for elemental-toolkit:
- Update to v2.2.9:
* 0e33b2bc Bump golang.org/x/net to v0.55.0 (bsc#1267168)
* 4f5423b9 Bump golang.org/x/crypto to v0.52.0 (bsc#1266187)
- Update to v2.2.8:
* 3f38ae3e Avoid pulling binaries with curl
* ef3f97a0 Bump golangci/golangci-lint-action to v9
* 34f9ed84 Bump github.com/spf13/cobra library
* dff54d9a Bump github.com/jaypipes/ghw library
* 7b7ba7ac github.com/bramvdbogaerde/go-scp libary
* ac19e71c Bump google.golang.org/grpc library (bsc#1260277 CVE-2026-33186)
* 55761782 Bump github.com/ulikunitz/xz library
* d04e480d Update headers to 2026
* bb7974f4 Switch from TW to Leap 16.0 for green flavor
Patchnames: SUSE-SLE-Micro-6.1-570
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
7.5 (High)
Affected products
Recommended
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.1:elemental-toolkit-2.2.9-slfo.1.1_1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:elemental-toolkit-2.2.9-slfo.1.1_1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
6.1 (Medium)
Affected products
Recommended
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.1:elemental-toolkit-2.2.9-slfo.1.1_1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:elemental-toolkit-2.2.9-slfo.1.1_1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
6.1 (Medium)
Affected products
Recommended
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.1:elemental-toolkit-2.2.9-slfo.1.1_1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:elemental-toolkit-2.2.9-slfo.1.1_1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
8.1 (High)
Affected products
Recommended
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.1:elemental-toolkit-2.2.9-slfo.1.1_1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:elemental-toolkit-2.2.9-slfo.1.1_1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
6.5 (Medium)
Affected products
Recommended
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.1:elemental-toolkit-2.2.9-slfo.1.1_1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:elemental-toolkit-2.2.9-slfo.1.1_1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
8.1 (High)
Affected products
Recommended
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.1:elemental-toolkit-2.2.9-slfo.1.1_1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:elemental-toolkit-2.2.9-slfo.1.1_1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.5 (High)
Affected products
Recommended
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.1:elemental-toolkit-2.2.9-slfo.1.1_1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:elemental-toolkit-2.2.9-slfo.1.1_1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
6.5 (Medium)
Affected products
Recommended
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.1:elemental-toolkit-2.2.9-slfo.1.1_1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:elemental-toolkit-2.2.9-slfo.1.1_1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
8.1 (High)
Affected products
Recommended
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.1:elemental-toolkit-2.2.9-slfo.1.1_1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:elemental-toolkit-2.2.9-slfo.1.1_1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
8.4 (High)
Affected products
Recommended
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.1:elemental-toolkit-2.2.9-slfo.1.1_1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:elemental-toolkit-2.2.9-slfo.1.1_1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.7 (High)
Affected products
Recommended
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.1:elemental-toolkit-2.2.9-slfo.1.1_1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:elemental-toolkit-2.2.9-slfo.1.1_1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.5 (High)
Affected products
Recommended
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.1:elemental-toolkit-2.2.9-slfo.1.1_1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:elemental-toolkit-2.2.9-slfo.1.1_1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.5 (High)
Affected products
Recommended
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.1:elemental-toolkit-2.2.9-slfo.1.1_1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:elemental-toolkit-2.2.9-slfo.1.1_1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
6.1 (Medium)
Affected products
Recommended
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.1:elemental-toolkit-2.2.9-slfo.1.1_1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:elemental-toolkit-2.2.9-slfo.1.1_1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
6.1 (Medium)
Affected products
Recommended
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.1:elemental-toolkit-2.2.9-slfo.1.1_1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:elemental-toolkit-2.2.9-slfo.1.1_1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
8.1 (High)
Affected products
Recommended
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.1:elemental-toolkit-2.2.9-slfo.1.1_1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:elemental-toolkit-2.2.9-slfo.1.1_1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
8.1 (High)
Affected products
Recommended
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.1:elemental-toolkit-2.2.9-slfo.1.1_1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:elemental-toolkit-2.2.9-slfo.1.1_1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.5 (High)
Affected products
Recommended
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.1:elemental-toolkit-2.2.9-slfo.1.1_1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:elemental-toolkit-2.2.9-slfo.1.1_1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.5 (High)
Affected products
Recommended
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Micro 6.1:elemental-toolkit-2.2.9-slfo.1.1_1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Micro 6.1:elemental-toolkit-2.2.9-slfo.1.1_1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
References
64 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for elemental-toolkit",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for elemental-toolkit fixes the following issue\n\n- CVE-2026-33186: google.golang.org/grpc: authorization bypass due to improper validation of the HTTP/2 :path pseudo-\n header (bsc#1260277).\n\nChanges for elemental-toolkit:\n\n- Update to v2.2.9:\n * 0e33b2bc Bump golang.org/x/net to v0.55.0 (bsc#1267168)\n * 4f5423b9 Bump golang.org/x/crypto to v0.52.0 (bsc#1266187)\n- Update to v2.2.8:\n * 3f38ae3e Avoid pulling binaries with curl\n * ef3f97a0 Bump golangci/golangci-lint-action to v9\n * 34f9ed84 Bump github.com/spf13/cobra library\n * dff54d9a Bump github.com/jaypipes/ghw library\n * 7b7ba7ac github.com/bramvdbogaerde/go-scp libary\n * ac19e71c Bump google.golang.org/grpc library (bsc#1260277 CVE-2026-33186)\n * 55761782 Bump github.com/ulikunitz/xz library\n * d04e480d Update headers to 2026\n * bb7974f4 Switch from TW to Leap 16.0 for green flavor\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-SLE-Micro-6.1-570",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_22074-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2026:22074-1",
"url": "https://www.suse.com/support/update/announcement/2026/suse-su-202622074-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2026:22074-1",
"url": "https://lists.suse.com/pipermail/sle-updates/2026-June/047276.html"
},
{
"category": "self",
"summary": "SUSE Bug 1260277",
"url": "https://bugzilla.suse.com/1260277"
},
{
"category": "self",
"summary": "SUSE Bug 1266187",
"url": "https://bugzilla.suse.com/1266187"
},
{
"category": "self",
"summary": "SUSE Bug 1267168",
"url": "https://bugzilla.suse.com/1267168"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-25680 page",
"url": "https://www.suse.com/security/cve/CVE-2026-25680/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-25681 page",
"url": "https://www.suse.com/security/cve/CVE-2026-25681/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-27136 page",
"url": "https://www.suse.com/security/cve/CVE-2026-27136/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-33186 page",
"url": "https://www.suse.com/security/cve/CVE-2026-33186/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-39827 page",
"url": "https://www.suse.com/security/cve/CVE-2026-39827/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-39828 page",
"url": "https://www.suse.com/security/cve/CVE-2026-39828/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-39829 page",
"url": "https://www.suse.com/security/cve/CVE-2026-39829/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-39830 page",
"url": "https://www.suse.com/security/cve/CVE-2026-39830/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-39831 page",
"url": "https://www.suse.com/security/cve/CVE-2026-39831/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-39832 page",
"url": "https://www.suse.com/security/cve/CVE-2026-39832/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-39833 page",
"url": "https://www.suse.com/security/cve/CVE-2026-39833/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-39834 page",
"url": "https://www.suse.com/security/cve/CVE-2026-39834/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-39835 page",
"url": "https://www.suse.com/security/cve/CVE-2026-39835/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-42502 page",
"url": "https://www.suse.com/security/cve/CVE-2026-42502/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-42506 page",
"url": "https://www.suse.com/security/cve/CVE-2026-42506/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-42508 page",
"url": "https://www.suse.com/security/cve/CVE-2026-42508/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46595 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46595/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46597 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46597/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46598 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46598/"
}
],
"title": "Security update for elemental-toolkit",
"tracking": {
"current_release_date": "2026-06-10T07:44:30Z",
"generator": {
"date": "2026-06-10T07:44:30Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2026:22074-1",
"initial_release_date": "2026-06-10T07:44:30Z",
"revision_history": [
{
"date": "2026-06-10T07:44:30Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "elemental-toolkit-2.2.9-slfo.1.1_1.1.aarch64",
"product": {
"name": "elemental-toolkit-2.2.9-slfo.1.1_1.1.aarch64",
"product_id": "elemental-toolkit-2.2.9-slfo.1.1_1.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "elemental-toolkit-2.2.9-slfo.1.1_1.1.x86_64",
"product": {
"name": "elemental-toolkit-2.2.9-slfo.1.1_1.1.x86_64",
"product_id": "elemental-toolkit-2.2.9-slfo.1.1_1.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Micro 6.1",
"product": {
"name": "SUSE Linux Micro 6.1",
"product_id": "SUSE Linux Micro 6.1",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sl-micro:6.1"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "elemental-toolkit-2.2.9-slfo.1.1_1.1.aarch64 as component of SUSE Linux Micro 6.1",
"product_id": "SUSE Linux Micro 6.1:elemental-toolkit-2.2.9-slfo.1.1_1.1.aarch64"
},
"product_reference": "elemental-toolkit-2.2.9-slfo.1.1_1.1.aarch64",
"relates_to_product_reference": "SUSE Linux Micro 6.1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "elemental-toolkit-2.2.9-slfo.1.1_1.1.x86_64 as component of SUSE Linux Micro 6.1",
"product_id": "SUSE Linux Micro 6.1:elemental-toolkit-2.2.9-slfo.1.1_1.1.x86_64"
},
"product_reference": "elemental-toolkit-2.2.9-slfo.1.1_1.1.x86_64",
"relates_to_product_reference": "SUSE Linux Micro 6.1"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-25680",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-25680"
}
],
"notes": [
{
"category": "general",
"text": "Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:elemental-toolkit-2.2.9-slfo.1.1_1.1.aarch64",
"SUSE Linux Micro 6.1:elemental-toolkit-2.2.9-slfo.1.1_1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-25680",
"url": "https://www.suse.com/security/cve/CVE-2026-25680"
},
{
"category": "external",
"summary": "SUSE Bug 1267044 for CVE-2026-25680",
"url": "https://bugzilla.suse.com/1267044"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:elemental-toolkit-2.2.9-slfo.1.1_1.1.aarch64",
"SUSE Linux Micro 6.1:elemental-toolkit-2.2.9-slfo.1.1_1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:elemental-toolkit-2.2.9-slfo.1.1_1.1.aarch64",
"SUSE Linux Micro 6.1:elemental-toolkit-2.2.9-slfo.1.1_1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-10T07:44:30Z",
"details": "important"
}
],
"title": "CVE-2026-25680"
},
{
"cve": "CVE-2026-25681",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-25681"
}
],
"notes": [
{
"category": "general",
"text": "Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:elemental-toolkit-2.2.9-slfo.1.1_1.1.aarch64",
"SUSE Linux Micro 6.1:elemental-toolkit-2.2.9-slfo.1.1_1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-25681",
"url": "https://www.suse.com/security/cve/CVE-2026-25681"
},
{
"category": "external",
"summary": "SUSE Bug 1267044 for CVE-2026-25681",
"url": "https://bugzilla.suse.com/1267044"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:elemental-toolkit-2.2.9-slfo.1.1_1.1.aarch64",
"SUSE Linux Micro 6.1:elemental-toolkit-2.2.9-slfo.1.1_1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:elemental-toolkit-2.2.9-slfo.1.1_1.1.aarch64",
"SUSE Linux Micro 6.1:elemental-toolkit-2.2.9-slfo.1.1_1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-10T07:44:30Z",
"details": "important"
}
],
"title": "CVE-2026-25681"
},
{
"cve": "CVE-2026-27136",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-27136"
}
],
"notes": [
{
"category": "general",
"text": "Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:elemental-toolkit-2.2.9-slfo.1.1_1.1.aarch64",
"SUSE Linux Micro 6.1:elemental-toolkit-2.2.9-slfo.1.1_1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-27136",
"url": "https://www.suse.com/security/cve/CVE-2026-27136"
},
{
"category": "external",
"summary": "SUSE Bug 1267044 for CVE-2026-27136",
"url": "https://bugzilla.suse.com/1267044"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:elemental-toolkit-2.2.9-slfo.1.1_1.1.aarch64",
"SUSE Linux Micro 6.1:elemental-toolkit-2.2.9-slfo.1.1_1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:elemental-toolkit-2.2.9-slfo.1.1_1.1.aarch64",
"SUSE Linux Micro 6.1:elemental-toolkit-2.2.9-slfo.1.1_1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-10T07:44:30Z",
"details": "important"
}
],
"title": "CVE-2026-27136"
},
{
"cve": "CVE-2026-33186",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-33186"
}
],
"notes": [
{
"category": "general",
"text": "gRPC-Go is the Go language implementation of gRPC. Versions prior to 1.79.3 have an authorization bypass resulting from improper input validation of the HTTP/2 `:path` pseudo-header. The gRPC-Go server was too lenient in its routing logic, accepting requests where the `:path` omitted the mandatory leading slash (e.g., `Service/Method` instead of `/Service/Method`). While the server successfully routed these requests to the correct handler, authorization interceptors (including the official `grpc/authz` package) evaluated the raw, non-canonical path string. Consequently, \"deny\" rules defined using canonical paths (starting with `/`) failed to match the incoming request, allowing it to bypass the policy if a fallback \"allow\" rule was present. This affects gRPC-Go servers that use path-based authorization interceptors, such as the official RBAC implementation in `google.golang.org/grpc/authz` or custom interceptors relying on `info.FullMethod` or `grpc.Method(ctx)`; AND that have a security policy contains specific \"deny\" rules for canonical paths but allows other requests by default (a fallback \"allow\" rule). The vulnerability is exploitable by an attacker who can send raw HTTP/2 frames with malformed `:path` headers directly to the gRPC server. The fix in version 1.79.3 ensures that any request with a `:path` that does not start with a leading slash is immediately rejected with a `codes.Unimplemented` error, preventing it from reaching authorization interceptors or handlers with a non-canonical path string. While upgrading is the most secure and recommended path, users can mitigate the vulnerability using one of the following methods: Use a validating interceptor (recommended mitigation); infrastructure-level normalization; and/or policy hardening.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:elemental-toolkit-2.2.9-slfo.1.1_1.1.aarch64",
"SUSE Linux Micro 6.1:elemental-toolkit-2.2.9-slfo.1.1_1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-33186",
"url": "https://www.suse.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "SUSE Bug 1260085 for CVE-2026-33186",
"url": "https://bugzilla.suse.com/1260085"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:elemental-toolkit-2.2.9-slfo.1.1_1.1.aarch64",
"SUSE Linux Micro 6.1:elemental-toolkit-2.2.9-slfo.1.1_1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:elemental-toolkit-2.2.9-slfo.1.1_1.1.aarch64",
"SUSE Linux Micro 6.1:elemental-toolkit-2.2.9-slfo.1.1_1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-10T07:44:30Z",
"details": "important"
}
],
"title": "CVE-2026-33186"
},
{
"cve": "CVE-2026-39827",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-39827"
}
],
"notes": [
{
"category": "general",
"text": "An authenticated SSH client that repeatedly opened channels which were rejected by the server caused unbounded memory growth, eventually crashing the server process and affecting all connected users. Rejected channels are now properly removed from the connection\u0027s internal state and released for garbage collection.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:elemental-toolkit-2.2.9-slfo.1.1_1.1.aarch64",
"SUSE Linux Micro 6.1:elemental-toolkit-2.2.9-slfo.1.1_1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-39827",
"url": "https://www.suse.com/security/cve/CVE-2026-39827"
},
{
"category": "external",
"summary": "SUSE Bug 1266049 for CVE-2026-39827",
"url": "https://bugzilla.suse.com/1266049"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:elemental-toolkit-2.2.9-slfo.1.1_1.1.aarch64",
"SUSE Linux Micro 6.1:elemental-toolkit-2.2.9-slfo.1.1_1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:elemental-toolkit-2.2.9-slfo.1.1_1.1.aarch64",
"SUSE Linux Micro 6.1:elemental-toolkit-2.2.9-slfo.1.1_1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-10T07:44:30Z",
"details": "important"
}
],
"title": "CVE-2026-39827"
},
{
"cve": "CVE-2026-39828",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-39828"
}
],
"notes": [
{
"category": "general",
"text": "When an SSH server authentication callback returned PartialSuccessError with non-nil Permissions, those permissions were silently discarded, potentially dropping certificate restrictions such as force-command after a second factor succeeded. Returning non-nil Permissions with PartialSuccessError now results in a connection error.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:elemental-toolkit-2.2.9-slfo.1.1_1.1.aarch64",
"SUSE Linux Micro 6.1:elemental-toolkit-2.2.9-slfo.1.1_1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-39828",
"url": "https://www.suse.com/security/cve/CVE-2026-39828"
},
{
"category": "external",
"summary": "SUSE Bug 1266049 for CVE-2026-39828",
"url": "https://bugzilla.suse.com/1266049"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:elemental-toolkit-2.2.9-slfo.1.1_1.1.aarch64",
"SUSE Linux Micro 6.1:elemental-toolkit-2.2.9-slfo.1.1_1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:elemental-toolkit-2.2.9-slfo.1.1_1.1.aarch64",
"SUSE Linux Micro 6.1:elemental-toolkit-2.2.9-slfo.1.1_1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-10T07:44:30Z",
"details": "important"
}
],
"title": "CVE-2026-39828"
},
{
"cve": "CVE-2026-39829",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-39829"
}
],
"notes": [
{
"category": "general",
"text": "The RSA and DSA public key parsers did not enforce size limits on key parameters. A crafted public key with an excessively large modulus or DSA parameter could cause several minutes of CPU consumption during signature verification. This could be triggered by unauthenticated clients during public key authentication. RSA moduli are now limited to 8192 bits, and DSA parameters are validated per FIPS 186-2.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:elemental-toolkit-2.2.9-slfo.1.1_1.1.aarch64",
"SUSE Linux Micro 6.1:elemental-toolkit-2.2.9-slfo.1.1_1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-39829",
"url": "https://www.suse.com/security/cve/CVE-2026-39829"
},
{
"category": "external",
"summary": "SUSE Bug 1266049 for CVE-2026-39829",
"url": "https://bugzilla.suse.com/1266049"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:elemental-toolkit-2.2.9-slfo.1.1_1.1.aarch64",
"SUSE Linux Micro 6.1:elemental-toolkit-2.2.9-slfo.1.1_1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:elemental-toolkit-2.2.9-slfo.1.1_1.1.aarch64",
"SUSE Linux Micro 6.1:elemental-toolkit-2.2.9-slfo.1.1_1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-10T07:44:30Z",
"details": "important"
}
],
"title": "CVE-2026-39829"
},
{
"cve": "CVE-2026-39830",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-39830"
}
],
"notes": [
{
"category": "general",
"text": "A malicious SSH peer could send unsolicited global request responses to fill an internal buffer, blocking the connection\u0027s read loop. The blocked goroutine could not be released by calling Close(), resulting in a resource leak per connection. Unsolicited global responses are now discarded.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:elemental-toolkit-2.2.9-slfo.1.1_1.1.aarch64",
"SUSE Linux Micro 6.1:elemental-toolkit-2.2.9-slfo.1.1_1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-39830",
"url": "https://www.suse.com/security/cve/CVE-2026-39830"
},
{
"category": "external",
"summary": "SUSE Bug 1266049 for CVE-2026-39830",
"url": "https://bugzilla.suse.com/1266049"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:elemental-toolkit-2.2.9-slfo.1.1_1.1.aarch64",
"SUSE Linux Micro 6.1:elemental-toolkit-2.2.9-slfo.1.1_1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:elemental-toolkit-2.2.9-slfo.1.1_1.1.aarch64",
"SUSE Linux Micro 6.1:elemental-toolkit-2.2.9-slfo.1.1_1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-10T07:44:30Z",
"details": "important"
}
],
"title": "CVE-2026-39830"
},
{
"cve": "CVE-2026-39831",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-39831"
}
],
"notes": [
{
"category": "general",
"text": "The Verify() method for FIDO/U2F security key types (sk-ecdsa-sha2-nistp256@openssh.com, sk-ssh-ed25519@openssh.com) did not check the User Presence flag. Signatures generated without physical touch were accepted, allowing unattended use of a hardware security key. To restore the previous behavior, return a \"no-touch-required\" extension in Permissions.Extensions from PublicKeyCallback.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:elemental-toolkit-2.2.9-slfo.1.1_1.1.aarch64",
"SUSE Linux Micro 6.1:elemental-toolkit-2.2.9-slfo.1.1_1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-39831",
"url": "https://www.suse.com/security/cve/CVE-2026-39831"
},
{
"category": "external",
"summary": "SUSE Bug 1266049 for CVE-2026-39831",
"url": "https://bugzilla.suse.com/1266049"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:elemental-toolkit-2.2.9-slfo.1.1_1.1.aarch64",
"SUSE Linux Micro 6.1:elemental-toolkit-2.2.9-slfo.1.1_1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:elemental-toolkit-2.2.9-slfo.1.1_1.1.aarch64",
"SUSE Linux Micro 6.1:elemental-toolkit-2.2.9-slfo.1.1_1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-10T07:44:30Z",
"details": "important"
}
],
"title": "CVE-2026-39831"
},
{
"cve": "CVE-2026-39832",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-39832"
}
],
"notes": [
{
"category": "general",
"text": "When adding a key to a remote agent constraint extensions such as restrict-destination-v00@openssh.com were not serialized in the request. Destination restrictions were silently stripped when forwarding keys, allowing unrestricted use of the key on the remote host. The client now serializes all constraint extensions. Additionally, the in-memory keyring returned by NewKeyring() now rejects keys with unsupported constraint extensions instead of silently ignoring them.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:elemental-toolkit-2.2.9-slfo.1.1_1.1.aarch64",
"SUSE Linux Micro 6.1:elemental-toolkit-2.2.9-slfo.1.1_1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-39832",
"url": "https://www.suse.com/security/cve/CVE-2026-39832"
},
{
"category": "external",
"summary": "SUSE Bug 1266049 for CVE-2026-39832",
"url": "https://bugzilla.suse.com/1266049"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:elemental-toolkit-2.2.9-slfo.1.1_1.1.aarch64",
"SUSE Linux Micro 6.1:elemental-toolkit-2.2.9-slfo.1.1_1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:elemental-toolkit-2.2.9-slfo.1.1_1.1.aarch64",
"SUSE Linux Micro 6.1:elemental-toolkit-2.2.9-slfo.1.1_1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-10T07:44:30Z",
"details": "important"
}
],
"title": "CVE-2026-39832"
},
{
"cve": "CVE-2026-39833",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-39833"
}
],
"notes": [
{
"category": "general",
"text": "The in-memory keyring returned by NewKeyring() silently accepted keys with the ConfirmBeforeUse constraint but never enforced it. The key would sign without any confirmation prompt, with no indication to the caller that the constraint was not in effect. NewKeyring() now returns an error when unsupported constraints are requested.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:elemental-toolkit-2.2.9-slfo.1.1_1.1.aarch64",
"SUSE Linux Micro 6.1:elemental-toolkit-2.2.9-slfo.1.1_1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-39833",
"url": "https://www.suse.com/security/cve/CVE-2026-39833"
},
{
"category": "external",
"summary": "SUSE Bug 1266049 for CVE-2026-39833",
"url": "https://bugzilla.suse.com/1266049"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:elemental-toolkit-2.2.9-slfo.1.1_1.1.aarch64",
"SUSE Linux Micro 6.1:elemental-toolkit-2.2.9-slfo.1.1_1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:elemental-toolkit-2.2.9-slfo.1.1_1.1.aarch64",
"SUSE Linux Micro 6.1:elemental-toolkit-2.2.9-slfo.1.1_1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-10T07:44:30Z",
"details": "important"
}
],
"title": "CVE-2026-39833"
},
{
"cve": "CVE-2026-39834",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-39834"
}
],
"notes": [
{
"category": "general",
"text": "When writing data larger than 4GB in a single Write call on an SSH channel, an integer overflow in the internal payload size calculation caused the write loop to spin indefinitely, sending empty packets without making progress. The size comparison now uses int64 to prevent truncation.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:elemental-toolkit-2.2.9-slfo.1.1_1.1.aarch64",
"SUSE Linux Micro 6.1:elemental-toolkit-2.2.9-slfo.1.1_1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-39834",
"url": "https://www.suse.com/security/cve/CVE-2026-39834"
},
{
"category": "external",
"summary": "SUSE Bug 1266049 for CVE-2026-39834",
"url": "https://bugzilla.suse.com/1266049"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:elemental-toolkit-2.2.9-slfo.1.1_1.1.aarch64",
"SUSE Linux Micro 6.1:elemental-toolkit-2.2.9-slfo.1.1_1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:elemental-toolkit-2.2.9-slfo.1.1_1.1.aarch64",
"SUSE Linux Micro 6.1:elemental-toolkit-2.2.9-slfo.1.1_1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-10T07:44:30Z",
"details": "important"
}
],
"title": "CVE-2026-39834"
},
{
"cve": "CVE-2026-39835",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-39835"
}
],
"notes": [
{
"category": "general",
"text": "SSH servers which use CertChecker as a public key callback without setting IsUserAuthority or IsHostAuthority could be caused to panic by a client presenting a certificate. CertChecker now returns an error instead of panicking when these callbacks are nil.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:elemental-toolkit-2.2.9-slfo.1.1_1.1.aarch64",
"SUSE Linux Micro 6.1:elemental-toolkit-2.2.9-slfo.1.1_1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-39835",
"url": "https://www.suse.com/security/cve/CVE-2026-39835"
},
{
"category": "external",
"summary": "SUSE Bug 1266049 for CVE-2026-39835",
"url": "https://bugzilla.suse.com/1266049"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:elemental-toolkit-2.2.9-slfo.1.1_1.1.aarch64",
"SUSE Linux Micro 6.1:elemental-toolkit-2.2.9-slfo.1.1_1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:elemental-toolkit-2.2.9-slfo.1.1_1.1.aarch64",
"SUSE Linux Micro 6.1:elemental-toolkit-2.2.9-slfo.1.1_1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-10T07:44:30Z",
"details": "important"
}
],
"title": "CVE-2026-39835"
},
{
"cve": "CVE-2026-42502",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-42502"
}
],
"notes": [
{
"category": "general",
"text": "Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:elemental-toolkit-2.2.9-slfo.1.1_1.1.aarch64",
"SUSE Linux Micro 6.1:elemental-toolkit-2.2.9-slfo.1.1_1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-42502",
"url": "https://www.suse.com/security/cve/CVE-2026-42502"
},
{
"category": "external",
"summary": "SUSE Bug 1267044 for CVE-2026-42502",
"url": "https://bugzilla.suse.com/1267044"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:elemental-toolkit-2.2.9-slfo.1.1_1.1.aarch64",
"SUSE Linux Micro 6.1:elemental-toolkit-2.2.9-slfo.1.1_1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:elemental-toolkit-2.2.9-slfo.1.1_1.1.aarch64",
"SUSE Linux Micro 6.1:elemental-toolkit-2.2.9-slfo.1.1_1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-10T07:44:30Z",
"details": "important"
}
],
"title": "CVE-2026-42502"
},
{
"cve": "CVE-2026-42506",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-42506"
}
],
"notes": [
{
"category": "general",
"text": "Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before rendering.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:elemental-toolkit-2.2.9-slfo.1.1_1.1.aarch64",
"SUSE Linux Micro 6.1:elemental-toolkit-2.2.9-slfo.1.1_1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-42506",
"url": "https://www.suse.com/security/cve/CVE-2026-42506"
},
{
"category": "external",
"summary": "SUSE Bug 1267044 for CVE-2026-42506",
"url": "https://bugzilla.suse.com/1267044"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:elemental-toolkit-2.2.9-slfo.1.1_1.1.aarch64",
"SUSE Linux Micro 6.1:elemental-toolkit-2.2.9-slfo.1.1_1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:elemental-toolkit-2.2.9-slfo.1.1_1.1.aarch64",
"SUSE Linux Micro 6.1:elemental-toolkit-2.2.9-slfo.1.1_1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-10T07:44:30Z",
"details": "important"
}
],
"title": "CVE-2026-42506"
},
{
"cve": "CVE-2026-42508",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-42508"
}
],
"notes": [
{
"category": "general",
"text": "Previously, a revoked \u0027SignatureKey\u0027 belonging to a CA was not correctly checked for revocation. Now, both the \u0027key\u0027 and \u0027key.SignatureKey\u0027 are checked for @revoked.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:elemental-toolkit-2.2.9-slfo.1.1_1.1.aarch64",
"SUSE Linux Micro 6.1:elemental-toolkit-2.2.9-slfo.1.1_1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-42508",
"url": "https://www.suse.com/security/cve/CVE-2026-42508"
},
{
"category": "external",
"summary": "SUSE Bug 1266049 for CVE-2026-42508",
"url": "https://bugzilla.suse.com/1266049"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:elemental-toolkit-2.2.9-slfo.1.1_1.1.aarch64",
"SUSE Linux Micro 6.1:elemental-toolkit-2.2.9-slfo.1.1_1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:elemental-toolkit-2.2.9-slfo.1.1_1.1.aarch64",
"SUSE Linux Micro 6.1:elemental-toolkit-2.2.9-slfo.1.1_1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-10T07:44:30Z",
"details": "important"
}
],
"title": "CVE-2026-42508"
},
{
"cve": "CVE-2026-46595",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46595"
}
],
"notes": [
{
"category": "general",
"text": "Previously, CVE-2024-45337 fixed an authorization bypass for misused ssh server configurations; if any other type of callback is passed other than public key, then the source-address validation would be skipped.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:elemental-toolkit-2.2.9-slfo.1.1_1.1.aarch64",
"SUSE Linux Micro 6.1:elemental-toolkit-2.2.9-slfo.1.1_1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46595",
"url": "https://www.suse.com/security/cve/CVE-2026-46595"
},
{
"category": "external",
"summary": "SUSE Bug 1266049 for CVE-2026-46595",
"url": "https://bugzilla.suse.com/1266049"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:elemental-toolkit-2.2.9-slfo.1.1_1.1.aarch64",
"SUSE Linux Micro 6.1:elemental-toolkit-2.2.9-slfo.1.1_1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:elemental-toolkit-2.2.9-slfo.1.1_1.1.aarch64",
"SUSE Linux Micro 6.1:elemental-toolkit-2.2.9-slfo.1.1_1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-10T07:44:30Z",
"details": "important"
}
],
"title": "CVE-2026-46595"
},
{
"cve": "CVE-2026-46597",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46597"
}
],
"notes": [
{
"category": "general",
"text": "An incorrectly placed cast from bytes to int allowed for server-side panic in the AES-GCM packet decoder for well-crafted inputs.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:elemental-toolkit-2.2.9-slfo.1.1_1.1.aarch64",
"SUSE Linux Micro 6.1:elemental-toolkit-2.2.9-slfo.1.1_1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46597",
"url": "https://www.suse.com/security/cve/CVE-2026-46597"
},
{
"category": "external",
"summary": "SUSE Bug 1266049 for CVE-2026-46597",
"url": "https://bugzilla.suse.com/1266049"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:elemental-toolkit-2.2.9-slfo.1.1_1.1.aarch64",
"SUSE Linux Micro 6.1:elemental-toolkit-2.2.9-slfo.1.1_1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:elemental-toolkit-2.2.9-slfo.1.1_1.1.aarch64",
"SUSE Linux Micro 6.1:elemental-toolkit-2.2.9-slfo.1.1_1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-10T07:44:30Z",
"details": "important"
}
],
"title": "CVE-2026-46597"
},
{
"cve": "CVE-2026-46598",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46598"
}
],
"notes": [
{
"category": "general",
"text": "For certain crafted inputs, a \u0027ed25519.PrivateKey\u0027 was created by casting malformed wire bytes, leading to a panic when used.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Micro 6.1:elemental-toolkit-2.2.9-slfo.1.1_1.1.aarch64",
"SUSE Linux Micro 6.1:elemental-toolkit-2.2.9-slfo.1.1_1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46598",
"url": "https://www.suse.com/security/cve/CVE-2026-46598"
},
{
"category": "external",
"summary": "SUSE Bug 1266049 for CVE-2026-46598",
"url": "https://bugzilla.suse.com/1266049"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Micro 6.1:elemental-toolkit-2.2.9-slfo.1.1_1.1.aarch64",
"SUSE Linux Micro 6.1:elemental-toolkit-2.2.9-slfo.1.1_1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Micro 6.1:elemental-toolkit-2.2.9-slfo.1.1_1.1.aarch64",
"SUSE Linux Micro 6.1:elemental-toolkit-2.2.9-slfo.1.1_1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-10T07:44:30Z",
"details": "important"
}
],
"title": "CVE-2026-46598"
}
]
}
SUSE-SU-2026:22157-1
Vulnerability from csaf_suse - Published: 2026-06-17 16:31 - Updated: 2026-06-17 16:31Summary
Security update for amazon-ssm-agent
Severity
Important
Notes
Title of the patch: Security update for amazon-ssm-agent
Description of the patch: This update for amazon-ssm-agent fixes the following issues
Update to version 3.3.4624.0:
- CVE-2025-22869: golang.org/x/crypto/ssh: Denial of Service in the Key Exchange of golang.org/x/crypto/ssh
(bsc#1239342).
- CVE-2025-22870: golang.org/x/net/proxy: proxy bypass using IPv6 zone IDs (bsc#1238702).
- CVE-2025-47913: golang.org/x/crypto/ssh/agent: client process termination when receiving an unexpected message type in
response to a key listing or signing request (bsc#1253611).
- CVE-2026-1229: the CombinedMult function in the ecc/p384 package produces an incorrect value for specific inputs
(bsc#1265474).
- CVE-2026-25934: github.com/go-git/go-git/v5: improper verification of data integrity values for .pack and .idx files
can lead to the consumption of corrupted files (bsc#1258095).
- CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation
bypass and privilege esca (bsc#1266781).
- CVE-2026-41506: github.com/go-git/go-git/v5: HTTP authentication credential leak when following redirects during
smart-HTTP clone and fetch operations (bsc#1264952).
- CVE-2026-44740: github.com/go-git/go-billy/v5: improper input handling in many components can lead to DoS via infinite
loops, panics or resource consumption (bsc#1267332).
- CVE-2026-39827: Invoking memory leak when rejecting channels can lead to DoS in golang.org/x/crypto/ssh (bsc#1266200).
- CVE-2026-39828: Invoking bypass of certificate restrictions in golang.org/x/crypto/ssh (bsc#1266200).
- CVE-2026-39829: Invoking pathological RSA/DSA parameters may cause DoS in golang.org/x/crypto/ssh (bsc#1266200).
- CVE-2026-39830: Invoking client can cause server deadlock on unexpected responses in golang.org/x/crypto/ssh
(bsc#1266200).
- CVE-2026-39831: Invoking bypass of FIDO/U2F security keys physical interaction in golang.org/x/crypto/ssh
(bsc#1266200).
- CVE-2026-39832: Invoking agent constraints dropped when forwarding keys in golang.org/x/crypto/ssh/agent
(bsc#1266200).
- CVE-2026-39833: Invoking key constraints not enforced in golang.org/x/crypto/ssh/agent (bsc#1266200).
- CVE-2026-39834: Invoking infinite loop on large channel writes in golang.org/x/crypto/ssh (bsc#1266200).
- CVE-2026-39835: Invoking server panic during CheckHostKey/Authenticate in golang.org/x/crypto/ssh (bsc#1266200).
- CVE-2026-42508: Invoking auth bypass via unenforced @revoked status in golang.org/x/crypto/ssh/knownhosts
(bsc#1266200).
- CVE-2026-46595: Invoking VerifiedPublicKeyCallback permissions skip enforcement in golang.org/x/crypto/ssh
(bsc#1266200).
- CVE-2026-46597: Invoking byte arithmetic causes underflow and panic in golang.org/x/crypto/ssh (bsc#1266200).
- CVE-2026-46598: Invoking pathological inputs can lead to client panic in golang.org/x/crypto/ssh/agent (bsc#1266200).
Changes:
* Bump golang.org/x/crypto from v0.51.0 to v0.52.0
* Bump golang.org/x/net from v0.54.0 to v0.55.0
* Enforce directory boundary in BuildSafePath
* Fix visibility issue with Bottlerocket OS in document output
* Update go-git from v5.17.1 to v5.19.1 (bsc#1264952, CVE-2026-41506), this
also updates go-billy from v5.8.0 to v5.9.0 (bsc#1267332, CVE-2026-44740)
* Bump golang.org/x/net from v0.48.0 to v0.53.0 (bsc#1266781, CVE-2026-39821)
* Quit if sysprep failed and log its current state
* Remove attached legacy cloudwatch plugin packages
* Upgrade Go version to 1.25.10
* Use BuildSafePath wherever it is applicable
* Add OOM killer protection to systemd service files
* Apply more sanitation to file and registry inventory gatherers
* Bump go-git to v5.17.1
* Deprecate legacy cloudwatch plugin
* Preserve network error details in credential refresher SSM API failures
* Upgrade Go version to 1.25.9
* Add SSM Distributor support for Bottlerocket OS
* Implement flush credentials command in ssm-cli
* Log ec2messages access denied as debug instead of error to reduce log noise
* Make credential refresher refresh cache quickly in case of credential flush
* Make Greengrass component registration resilient with retry
* Add EnforceWorkspaceRootOwnership configuration to support disable
hardening of agent workspace
* Add reboot comment to Windows shutdown command for SSM Agent traceability
* Update privilege access check to verify ownership and permissions
of document state files
* Add read-only version check prior to install and uninstall
in case of occupied package manager locks
* Add ANSI processing for CloudWatch and S3 log
* Upgrade go-git to v5.17.0 and cloudflare/circl to v1.6.3
to fix CVE-2026-1229
- Switch to systemd-tmpfiles to store runtime data (jsc#PED-14843)
* Disable Go 1.25 container-aware GOMAXPROCS to prevent holding
cgroup file descriptors open
* Upgrade Go version to 1.25.8
* Document CommandWorkerBufferLimit config
* Include package update in Dockerfile
* Reduce CloudWatch event message length threshold
* Upgrade Go version to 1.25.7
* Update github.com/go-git/go-git/v5 to 5.16.5 (bsc#1258095, CVE-2026-25934)
* Update greengrass version
* Update Golang version to 1.24.12
* Updating golang.org/x/crypto from v0.37.0 to v0.47.0, golang.org/x/net
from v0.39.0 to v0.48.0 and golang.org/x/sys from v0.32.0 to v0.40.0
(bsc#1253611, CVE-2025-47913)
* Categorize integration tests by adding new tags to split fast and slow ones
* Fix bug where IP field being empty string and causing UII API failure
* Allow Patch execution to persist across reboots not registered to SSM Agent
* Fix ENV_VAR interpolation to work correctly with parameter store value
* Implement immediate retries for failed reply messages to MGS for RunCommand documents
* Improve ssm-cli get-diagnostics command log output
* Support DomainJoin endpoint for EU sovereign cloud
* Support dualstack S3 endpoint for distributor packages
* Upgrade Go version to 1.24.11
* Add initial IPv6 support with UseDualStackEndpoint configuration option
* Fix CPU utilization issue for instances with thousands of network interfaces
* Add IMDS retry count to account for EC2 droplet refresh
* Fix duplicate uid error logging in MDS module
* Update aws:Domainjoin plugin logging from Log4Net to NLog
* Upgrade Go version to 1.24.7
* Update github.com/go-git/go-git/v5 to 5.15.0
* Update golang.org/x/crypto to v0.37.0 (bsc#1238702, CVE-2025-22870)
* Update golang.org/x/net to v0.39.0
* Update golang.org/x/sys to v0.32.0
* Add EU sovereign cloud S3 endpoint for DownloadContent plugin
* Add configurable credential rotation max backoff interval
* Migrate from twinj/uuid to google/uuid library
* Allow newer agent versions to be installed when deploying on Greengrass
* Harden function to remove non-admin run command documents in execution path
* Fix macOS credential refresher test issue due to missing Debugf from serialport skip file
* Enhance testability of custom certificate usage in debug SSM Agent builds
* Decouple serial port from startup and add credential refresher serialport logging
* Add GlobalEnhancedTelemetryEnabled config to README
* Add cloudwatch logs endpoint configuration to optional config for agent
* Update Greengrass component version
* Add file privilege check before processing document state file
* Storing AWS document interpolation ENV_VAR types as environment variables
* Throw explicit error when running local cli as non-priviledged user
* Harden telemetry dynamic config folder permissions
* Add configuration option for HandshakeTimeout
* Improve unit tests
* Add setup for emitting telemetry logs and metrics
* Add initial selection of error logs to emit to telemetry
* Simplify checkstyle and import organization in build scripts
* Update golang.org/x/net from v0.37.0 to v0.38.0
* Agent hibernation reason is logged to EC2 system logs
* Add metrics for the EC2Detector and IMDS EC2 status findings
* Change Linux DomainJoin plugin parameter KeepHostName to accept
both boolean and string
* Upgrade GoLang to version 1.23.8
* Update golang.org/x/crypto from v0.32.0 to v0.36.0 (bsc#1239342, CVE-2025-22869)
Patchnames: SUSE-SLES-16.0-943
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
7.5 (High)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
4.4 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
7.5 (High)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
4.3 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
7.4 (High)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
6.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
8.1 (High)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.5 (High)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
6.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
8.1 (High)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
8.4 (High)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.7 (High)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.5 (High)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.5 (High)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
6.5 (Medium)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
8.1 (High)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.5 (High)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
8.1 (High)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.5 (High)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
7.5 (High)
Affected products
Recommended
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
References
77 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for amazon-ssm-agent",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for amazon-ssm-agent fixes the following issues\n\nUpdate to version 3.3.4624.0:\n\n- CVE-2025-22869: golang.org/x/crypto/ssh: Denial of Service in the Key Exchange of golang.org/x/crypto/ssh\n (bsc#1239342).\n- CVE-2025-22870: golang.org/x/net/proxy: proxy bypass using IPv6 zone IDs (bsc#1238702).\n- CVE-2025-47913: golang.org/x/crypto/ssh/agent: client process termination when receiving an unexpected message type in\n response to a key listing or signing request (bsc#1253611).\n- CVE-2026-1229: the CombinedMult function in the ecc/p384 package produces an incorrect value for specific inputs\n (bsc#1265474).\n- CVE-2026-25934: github.com/go-git/go-git/v5: improper verification of data integrity values for .pack and .idx files\n can lead to the consumption of corrupted files (bsc#1258095).\n- CVE-2026-39821: golang.org/x/net/idna: failure to reject ASCII-only Punycode-encoded labels allows for validation\n bypass and privilege esca (bsc#1266781).\n- CVE-2026-41506: github.com/go-git/go-git/v5: HTTP authentication credential leak when following redirects during\n smart-HTTP clone and fetch operations (bsc#1264952).\n- CVE-2026-44740: github.com/go-git/go-billy/v5: improper input handling in many components can lead to DoS via infinite\n loops, panics or resource consumption (bsc#1267332).\n- CVE-2026-39827: Invoking memory leak when rejecting channels can lead to DoS in golang.org/x/crypto/ssh (bsc#1266200).\n- CVE-2026-39828: Invoking bypass of certificate restrictions in golang.org/x/crypto/ssh (bsc#1266200).\n- CVE-2026-39829: Invoking pathological RSA/DSA parameters may cause DoS in golang.org/x/crypto/ssh (bsc#1266200).\n- CVE-2026-39830: Invoking client can cause server deadlock on unexpected responses in golang.org/x/crypto/ssh\n (bsc#1266200).\n- CVE-2026-39831: Invoking bypass of FIDO/U2F security keys physical interaction in golang.org/x/crypto/ssh\n (bsc#1266200).\n- CVE-2026-39832: Invoking agent constraints dropped when forwarding keys in golang.org/x/crypto/ssh/agent\n (bsc#1266200).\n- CVE-2026-39833: Invoking key constraints not enforced in golang.org/x/crypto/ssh/agent (bsc#1266200).\n- CVE-2026-39834: Invoking infinite loop on large channel writes in golang.org/x/crypto/ssh (bsc#1266200).\n- CVE-2026-39835: Invoking server panic during CheckHostKey/Authenticate in golang.org/x/crypto/ssh (bsc#1266200).\n- CVE-2026-42508: Invoking auth bypass via unenforced @revoked status in golang.org/x/crypto/ssh/knownhosts\n (bsc#1266200).\n- CVE-2026-46595: Invoking VerifiedPublicKeyCallback permissions skip enforcement in golang.org/x/crypto/ssh\n (bsc#1266200).\n- CVE-2026-46597: Invoking byte arithmetic causes underflow and panic in golang.org/x/crypto/ssh (bsc#1266200).\n- CVE-2026-46598: Invoking pathological inputs can lead to client panic in golang.org/x/crypto/ssh/agent (bsc#1266200).\n\nChanges:\n\n * Bump golang.org/x/crypto from v0.51.0 to v0.52.0\n * Bump golang.org/x/net from v0.54.0 to v0.55.0\n * Enforce directory boundary in BuildSafePath\n * Fix visibility issue with Bottlerocket OS in document output\n * Update go-git from v5.17.1 to v5.19.1 (bsc#1264952, CVE-2026-41506), this\n also updates go-billy from v5.8.0 to v5.9.0 (bsc#1267332, CVE-2026-44740)\n * Bump golang.org/x/net from v0.48.0 to v0.53.0 (bsc#1266781, CVE-2026-39821)\n * Quit if sysprep failed and log its current state\n * Remove attached legacy cloudwatch plugin packages\n * Upgrade Go version to 1.25.10\n * Use BuildSafePath wherever it is applicable\n * Add OOM killer protection to systemd service files\n * Apply more sanitation to file and registry inventory gatherers\n * Bump go-git to v5.17.1\n * Deprecate legacy cloudwatch plugin\n * Preserve network error details in credential refresher SSM API failures\n * Upgrade Go version to 1.25.9\n * Add SSM Distributor support for Bottlerocket OS\n * Implement flush credentials command in ssm-cli\n * Log ec2messages access denied as debug instead of error to reduce log noise\n * Make credential refresher refresh cache quickly in case of credential flush\n * Make Greengrass component registration resilient with retry\n * Add EnforceWorkspaceRootOwnership configuration to support disable\n hardening of agent workspace\n * Add reboot comment to Windows shutdown command for SSM Agent traceability\n * Update privilege access check to verify ownership and permissions\n of document state files\n * Add read-only version check prior to install and uninstall\n in case of occupied package manager locks\n * Add ANSI processing for CloudWatch and S3 log\n * Upgrade go-git to v5.17.0 and cloudflare/circl to v1.6.3\n to fix CVE-2026-1229\n- Switch to systemd-tmpfiles to store runtime data (jsc#PED-14843)\n * Disable Go 1.25 container-aware GOMAXPROCS to prevent holding\n cgroup file descriptors open\n * Upgrade Go version to 1.25.8\n * Document CommandWorkerBufferLimit config\n * Include package update in Dockerfile\n * Reduce CloudWatch event message length threshold\n * Upgrade Go version to 1.25.7\n * Update github.com/go-git/go-git/v5 to 5.16.5 (bsc#1258095, CVE-2026-25934)\n * Update greengrass version\n * Update Golang version to 1.24.12\n * Updating golang.org/x/crypto from v0.37.0 to v0.47.0, golang.org/x/net\n from v0.39.0 to v0.48.0 and golang.org/x/sys from v0.32.0 to v0.40.0\n (bsc#1253611, CVE-2025-47913)\n * Categorize integration tests by adding new tags to split fast and slow ones\n * Fix bug where IP field being empty string and causing UII API failure\n * Allow Patch execution to persist across reboots not registered to SSM Agent\n * Fix ENV_VAR interpolation to work correctly with parameter store value\n * Implement immediate retries for failed reply messages to MGS for RunCommand documents\n * Improve ssm-cli get-diagnostics command log output\n * Support DomainJoin endpoint for EU sovereign cloud\n * Support dualstack S3 endpoint for distributor packages\n * Upgrade Go version to 1.24.11\n * Add initial IPv6 support with UseDualStackEndpoint configuration option\n * Fix CPU utilization issue for instances with thousands of network interfaces\n * Add IMDS retry count to account for EC2 droplet refresh\n * Fix duplicate uid error logging in MDS module\n * Update aws:Domainjoin plugin logging from Log4Net to NLog\n * Upgrade Go version to 1.24.7\n * Update github.com/go-git/go-git/v5 to 5.15.0\n * Update golang.org/x/crypto to v0.37.0 (bsc#1238702, CVE-2025-22870)\n * Update golang.org/x/net to v0.39.0\n * Update golang.org/x/sys to v0.32.0\n * Add EU sovereign cloud S3 endpoint for DownloadContent plugin\n * Add configurable credential rotation max backoff interval\n * Migrate from twinj/uuid to google/uuid library\n * Allow newer agent versions to be installed when deploying on Greengrass\n * Harden function to remove non-admin run command documents in execution path\n * Fix macOS credential refresher test issue due to missing Debugf from serialport skip file\n * Enhance testability of custom certificate usage in debug SSM Agent builds\n * Decouple serial port from startup and add credential refresher serialport logging\n * Add GlobalEnhancedTelemetryEnabled config to README\n * Add cloudwatch logs endpoint configuration to optional config for agent\n * Update Greengrass component version\n * Add file privilege check before processing document state file\n * Storing AWS document interpolation ENV_VAR types as environment variables\n * Throw explicit error when running local cli as non-priviledged user\n * Harden telemetry dynamic config folder permissions\n * Add configuration option for HandshakeTimeout\n * Improve unit tests\n * Add setup for emitting telemetry logs and metrics\n * Add initial selection of error logs to emit to telemetry\n * Simplify checkstyle and import organization in build scripts\n * Update golang.org/x/net from v0.37.0 to v0.38.0\n * Agent hibernation reason is logged to EC2 system logs\n * Add metrics for the EC2Detector and IMDS EC2 status findings\n * Change Linux DomainJoin plugin parameter KeepHostName to accept\n both boolean and string\n * Upgrade GoLang to version 1.23.8\n * Update golang.org/x/crypto from v0.32.0 to v0.36.0 (bsc#1239342, CVE-2025-22869)\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-SLES-16.0-943",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_22157-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2026:22157-1",
"url": "https://www.suse.com/support/update/announcement/2026/suse-su-202622157-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2026:22157-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-June/026930.html"
},
{
"category": "self",
"summary": "SUSE Bug 1238702",
"url": "https://bugzilla.suse.com/1238702"
},
{
"category": "self",
"summary": "SUSE Bug 1239342",
"url": "https://bugzilla.suse.com/1239342"
},
{
"category": "self",
"summary": "SUSE Bug 1253611",
"url": "https://bugzilla.suse.com/1253611"
},
{
"category": "self",
"summary": "SUSE Bug 1258095",
"url": "https://bugzilla.suse.com/1258095"
},
{
"category": "self",
"summary": "SUSE Bug 1264952",
"url": "https://bugzilla.suse.com/1264952"
},
{
"category": "self",
"summary": "SUSE Bug 1265474",
"url": "https://bugzilla.suse.com/1265474"
},
{
"category": "self",
"summary": "SUSE Bug 1266200",
"url": "https://bugzilla.suse.com/1266200"
},
{
"category": "self",
"summary": "SUSE Bug 1266781",
"url": "https://bugzilla.suse.com/1266781"
},
{
"category": "self",
"summary": "SUSE Bug 1267332",
"url": "https://bugzilla.suse.com/1267332"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-22869 page",
"url": "https://www.suse.com/security/cve/CVE-2025-22869/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-22870 page",
"url": "https://www.suse.com/security/cve/CVE-2025-22870/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2025-47913 page",
"url": "https://www.suse.com/security/cve/CVE-2025-47913/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-1229 page",
"url": "https://www.suse.com/security/cve/CVE-2026-1229/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-25934 page",
"url": "https://www.suse.com/security/cve/CVE-2026-25934/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-39821 page",
"url": "https://www.suse.com/security/cve/CVE-2026-39821/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-39827 page",
"url": "https://www.suse.com/security/cve/CVE-2026-39827/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-39828 page",
"url": "https://www.suse.com/security/cve/CVE-2026-39828/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-39829 page",
"url": "https://www.suse.com/security/cve/CVE-2026-39829/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-39830 page",
"url": "https://www.suse.com/security/cve/CVE-2026-39830/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-39831 page",
"url": "https://www.suse.com/security/cve/CVE-2026-39831/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-39832 page",
"url": "https://www.suse.com/security/cve/CVE-2026-39832/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-39833 page",
"url": "https://www.suse.com/security/cve/CVE-2026-39833/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-39834 page",
"url": "https://www.suse.com/security/cve/CVE-2026-39834/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-39835 page",
"url": "https://www.suse.com/security/cve/CVE-2026-39835/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-41506 page",
"url": "https://www.suse.com/security/cve/CVE-2026-41506/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-42508 page",
"url": "https://www.suse.com/security/cve/CVE-2026-42508/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-44740 page",
"url": "https://www.suse.com/security/cve/CVE-2026-44740/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46595 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46595/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46597 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46597/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-46598 page",
"url": "https://www.suse.com/security/cve/CVE-2026-46598/"
}
],
"title": "Security update for amazon-ssm-agent",
"tracking": {
"current_release_date": "2026-06-17T16:31:19Z",
"generator": {
"date": "2026-06-17T16:31:19Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2026:22157-1",
"initial_release_date": "2026-06-17T16:31:19Z",
"revision_history": [
{
"date": "2026-06-17T16:31:19Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64",
"product": {
"name": "amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64",
"product_id": "amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64",
"product": {
"name": "amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64",
"product_id": "amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 16.0",
"product": {
"name": "SUSE Linux Enterprise Server 16.0",
"product_id": "SUSE Linux Enterprise Server 16.0",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles:16:16.0:server"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP applications 16.0",
"product": {
"name": "SUSE Linux Enterprise Server for SAP applications 16.0",
"product_id": "SUSE Linux Enterprise Server for SAP applications 16.0",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles:16:16.0:server-sap"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64 as component of SUSE Linux Enterprise Server 16.0",
"product_id": "SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64"
},
"product_reference": "amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64 as component of SUSE Linux Enterprise Server 16.0",
"product_id": "SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64"
},
"product_reference": "amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64 as component of SUSE Linux Enterprise Server for SAP applications 16.0",
"product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64"
},
"product_reference": "amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64 as component of SUSE Linux Enterprise Server for SAP applications 16.0",
"product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64"
},
"product_reference": "amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-22869",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-22869"
}
],
"notes": [
{
"category": "general",
"text": "SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchange slowly, or not at all, causing pending content to be read into memory, but never transmitted.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-22869",
"url": "https://www.suse.com/security/cve/CVE-2025-22869"
},
{
"category": "external",
"summary": "SUSE Bug 1239322 for CVE-2025-22869",
"url": "https://bugzilla.suse.com/1239322"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-17T16:31:19Z",
"details": "important"
}
],
"title": "CVE-2025-22869"
},
{
"cve": "CVE-2025-22870",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-22870"
}
],
"notes": [
{
"category": "general",
"text": "Matching of hosts against proxy patterns can improperly treat an IPv6 zone ID as a hostname component. For example, when the NO_PROXY environment variable is set to \"*.example.com\", a request to \"[::1%25.example.com]:80` will incorrectly match and not be proxied.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-22870",
"url": "https://www.suse.com/security/cve/CVE-2025-22870"
},
{
"category": "external",
"summary": "SUSE Bug 1238572 for CVE-2025-22870",
"url": "https://bugzilla.suse.com/1238572"
},
{
"category": "external",
"summary": "SUSE Bug 1238611 for CVE-2025-22870",
"url": "https://bugzilla.suse.com/1238611"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-17T16:31:19Z",
"details": "moderate"
}
],
"title": "CVE-2025-22870"
},
{
"cve": "CVE-2025-47913",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2025-47913"
}
],
"notes": [
{
"category": "general",
"text": "SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2025-47913",
"url": "https://www.suse.com/security/cve/CVE-2025-47913"
},
{
"category": "external",
"summary": "SUSE Bug 1253506 for CVE-2025-47913",
"url": "https://bugzilla.suse.com/1253506"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-17T16:31:19Z",
"details": "important"
}
],
"title": "CVE-2025-47913"
},
{
"cve": "CVE-2026-1229",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-1229"
}
],
"notes": [
{
"category": "general",
"text": "The CombinedMult function in the CIRCL ecc/p384 package (secp384r1 curve) produces an incorrect value for specific inputs. The issue is fixed by using complete addition formulas.\nECDH and ECDSA signing relying on this curve are not affected.\n\nThe bug was fixed in v1.6.3 https://github.com/cloudflare/circl/releases/tag/v1.6.3 .",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-1229",
"url": "https://www.suse.com/security/cve/CVE-2026-1229"
},
{
"category": "external",
"summary": "SUSE Bug 1265416 for CVE-2026-1229",
"url": "https://bugzilla.suse.com/1265416"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-17T16:31:19Z",
"details": "important"
}
],
"title": "CVE-2026-1229"
},
{
"cve": "CVE-2026-25934",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-25934"
}
],
"notes": [
{
"category": "general",
"text": "go-git is a highly extensible git implementation library written in pure Go. Prior to 5.16.5, a vulnerability was discovered in go-git whereby data integrity values for .pack and .idx files were not properly verified. This resulted in go-git potentially consuming corrupted files, which would likely result in unexpected errors such as object not found. For context, clients fetch packfiles from upstream Git servers. Those files contain a checksum of their contents, so that clients can perform integrity checks before consuming it. The pack indexes (.idx) are generated locally by go-git, or the git cli, when new .pack files are received and processed. The integrity checks for both files were not being verified correctly. This vulnerability is fixed in 5.16.5.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-25934",
"url": "https://www.suse.com/security/cve/CVE-2026-25934"
},
{
"category": "external",
"summary": "SUSE Bug 1258093 for CVE-2026-25934",
"url": "https://bugzilla.suse.com/1258093"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-17T16:31:19Z",
"details": "moderate"
}
],
"title": "CVE-2026-25934"
},
{
"cve": "CVE-2026-39821",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-39821"
}
],
"notes": [
{
"category": "general",
"text": "The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. For example, ToUnicode(\"xn--example-.com\") incorrectly returns the name \"example.com\" rather than an error. This behavior can lead to privilege escalation in programs using the idna package. For example, a program which performs privilege checks on the ASCII hostname may reject \"example.com\" but permit \"xn--example-.com\". If that program subsequently converts the ASCII hostname to Unicode, it will inadvertently permits access to the Unicode name \"example.com\".",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-39821",
"url": "https://www.suse.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "SUSE Bug 1266474 for CVE-2026-39821",
"url": "https://bugzilla.suse.com/1266474"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-17T16:31:19Z",
"details": "important"
}
],
"title": "CVE-2026-39821"
},
{
"cve": "CVE-2026-39827",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-39827"
}
],
"notes": [
{
"category": "general",
"text": "An authenticated SSH client that repeatedly opened channels which were rejected by the server caused unbounded memory growth, eventually crashing the server process and affecting all connected users. Rejected channels are now properly removed from the connection\u0027s internal state and released for garbage collection.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-39827",
"url": "https://www.suse.com/security/cve/CVE-2026-39827"
},
{
"category": "external",
"summary": "SUSE Bug 1266049 for CVE-2026-39827",
"url": "https://bugzilla.suse.com/1266049"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-17T16:31:19Z",
"details": "important"
}
],
"title": "CVE-2026-39827"
},
{
"cve": "CVE-2026-39828",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-39828"
}
],
"notes": [
{
"category": "general",
"text": "When an SSH server authentication callback returned PartialSuccessError with non-nil Permissions, those permissions were silently discarded, potentially dropping certificate restrictions such as force-command after a second factor succeeded. Returning non-nil Permissions with PartialSuccessError now results in a connection error.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-39828",
"url": "https://www.suse.com/security/cve/CVE-2026-39828"
},
{
"category": "external",
"summary": "SUSE Bug 1266049 for CVE-2026-39828",
"url": "https://bugzilla.suse.com/1266049"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-17T16:31:19Z",
"details": "important"
}
],
"title": "CVE-2026-39828"
},
{
"cve": "CVE-2026-39829",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-39829"
}
],
"notes": [
{
"category": "general",
"text": "The RSA and DSA public key parsers did not enforce size limits on key parameters. A crafted public key with an excessively large modulus or DSA parameter could cause several minutes of CPU consumption during signature verification. This could be triggered by unauthenticated clients during public key authentication. RSA moduli are now limited to 8192 bits, and DSA parameters are validated per FIPS 186-2.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-39829",
"url": "https://www.suse.com/security/cve/CVE-2026-39829"
},
{
"category": "external",
"summary": "SUSE Bug 1266049 for CVE-2026-39829",
"url": "https://bugzilla.suse.com/1266049"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-17T16:31:19Z",
"details": "important"
}
],
"title": "CVE-2026-39829"
},
{
"cve": "CVE-2026-39830",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-39830"
}
],
"notes": [
{
"category": "general",
"text": "A malicious SSH peer could send unsolicited global request responses to fill an internal buffer, blocking the connection\u0027s read loop. The blocked goroutine could not be released by calling Close(), resulting in a resource leak per connection. Unsolicited global responses are now discarded.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-39830",
"url": "https://www.suse.com/security/cve/CVE-2026-39830"
},
{
"category": "external",
"summary": "SUSE Bug 1266049 for CVE-2026-39830",
"url": "https://bugzilla.suse.com/1266049"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-17T16:31:19Z",
"details": "important"
}
],
"title": "CVE-2026-39830"
},
{
"cve": "CVE-2026-39831",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-39831"
}
],
"notes": [
{
"category": "general",
"text": "The Verify() method for FIDO/U2F security key types (sk-ecdsa-sha2-nistp256@openssh.com, sk-ssh-ed25519@openssh.com) did not check the User Presence flag. Signatures generated without physical touch were accepted, allowing unattended use of a hardware security key. To restore the previous behavior, return a \"no-touch-required\" extension in Permissions.Extensions from PublicKeyCallback.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-39831",
"url": "https://www.suse.com/security/cve/CVE-2026-39831"
},
{
"category": "external",
"summary": "SUSE Bug 1266049 for CVE-2026-39831",
"url": "https://bugzilla.suse.com/1266049"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-17T16:31:19Z",
"details": "important"
}
],
"title": "CVE-2026-39831"
},
{
"cve": "CVE-2026-39832",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-39832"
}
],
"notes": [
{
"category": "general",
"text": "When adding a key to a remote agent constraint extensions such as restrict-destination-v00@openssh.com were not serialized in the request. Destination restrictions were silently stripped when forwarding keys, allowing unrestricted use of the key on the remote host. The client now serializes all constraint extensions. Additionally, the in-memory keyring returned by NewKeyring() now rejects keys with unsupported constraint extensions instead of silently ignoring them.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-39832",
"url": "https://www.suse.com/security/cve/CVE-2026-39832"
},
{
"category": "external",
"summary": "SUSE Bug 1266049 for CVE-2026-39832",
"url": "https://bugzilla.suse.com/1266049"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-17T16:31:19Z",
"details": "important"
}
],
"title": "CVE-2026-39832"
},
{
"cve": "CVE-2026-39833",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-39833"
}
],
"notes": [
{
"category": "general",
"text": "The in-memory keyring returned by NewKeyring() silently accepted keys with the ConfirmBeforeUse constraint but never enforced it. The key would sign without any confirmation prompt, with no indication to the caller that the constraint was not in effect. NewKeyring() now returns an error when unsupported constraints are requested.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-39833",
"url": "https://www.suse.com/security/cve/CVE-2026-39833"
},
{
"category": "external",
"summary": "SUSE Bug 1266049 for CVE-2026-39833",
"url": "https://bugzilla.suse.com/1266049"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-17T16:31:19Z",
"details": "important"
}
],
"title": "CVE-2026-39833"
},
{
"cve": "CVE-2026-39834",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-39834"
}
],
"notes": [
{
"category": "general",
"text": "When writing data larger than 4GB in a single Write call on an SSH channel, an integer overflow in the internal payload size calculation caused the write loop to spin indefinitely, sending empty packets without making progress. The size comparison now uses int64 to prevent truncation.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-39834",
"url": "https://www.suse.com/security/cve/CVE-2026-39834"
},
{
"category": "external",
"summary": "SUSE Bug 1266049 for CVE-2026-39834",
"url": "https://bugzilla.suse.com/1266049"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-17T16:31:19Z",
"details": "important"
}
],
"title": "CVE-2026-39834"
},
{
"cve": "CVE-2026-39835",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-39835"
}
],
"notes": [
{
"category": "general",
"text": "SSH servers which use CertChecker as a public key callback without setting IsUserAuthority or IsHostAuthority could be caused to panic by a client presenting a certificate. CertChecker now returns an error instead of panicking when these callbacks are nil.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-39835",
"url": "https://www.suse.com/security/cve/CVE-2026-39835"
},
{
"category": "external",
"summary": "SUSE Bug 1266049 for CVE-2026-39835",
"url": "https://bugzilla.suse.com/1266049"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-17T16:31:19Z",
"details": "important"
}
],
"title": "CVE-2026-39835"
},
{
"cve": "CVE-2026-41506",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-41506"
}
],
"notes": [
{
"category": "general",
"text": "go-git is an extensible git implementation library written in pure Go. Prior to versions 5.18.0 and 6.0.0-alpha.2, go-git may leak HTTP authentication credentials when following redirects during smart-HTTP clone and fetch operations. This issue has been patched in versions 5.18.0 and 6.0.0-alpha.2.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-41506",
"url": "https://www.suse.com/security/cve/CVE-2026-41506"
},
{
"category": "external",
"summary": "SUSE Bug 1264854 for CVE-2026-41506",
"url": "https://bugzilla.suse.com/1264854"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-17T16:31:19Z",
"details": "moderate"
}
],
"title": "CVE-2026-41506"
},
{
"cve": "CVE-2026-42508",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-42508"
}
],
"notes": [
{
"category": "general",
"text": "Previously, a revoked \u0027SignatureKey\u0027 belonging to a CA was not correctly checked for revocation. Now, both the \u0027key\u0027 and \u0027key.SignatureKey\u0027 are checked for @revoked.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-42508",
"url": "https://www.suse.com/security/cve/CVE-2026-42508"
},
{
"category": "external",
"summary": "SUSE Bug 1266049 for CVE-2026-42508",
"url": "https://bugzilla.suse.com/1266049"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-17T16:31:19Z",
"details": "important"
}
],
"title": "CVE-2026-42508"
},
{
"cve": "CVE-2026-44740",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-44740"
}
],
"notes": [
{
"category": "general",
"text": "Billy is an interface filesystem abstraction for Go. Prior to versions 5.9.0 and 6.0.0-alpha.1, multiple components may improperly handle crafted or malformed input, resulting in panics, infinite loops, uncontrolled recursion, or excessive resource consumption. These issues arise from insufficient validation and missing safety mechanisms such as cycle detection, recursion limits, or defensive handling of unexpected states when processing untrusted repository data and filesystem structures. This issue has been patched in versions 5.9.0 and 6.0.0-alpha.1.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-44740",
"url": "https://www.suse.com/security/cve/CVE-2026-44740"
},
{
"category": "external",
"summary": "SUSE Bug 1267264 for CVE-2026-44740",
"url": "https://bugzilla.suse.com/1267264"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-17T16:31:19Z",
"details": "important"
}
],
"title": "CVE-2026-44740"
},
{
"cve": "CVE-2026-46595",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46595"
}
],
"notes": [
{
"category": "general",
"text": "Previously, CVE-2024-45337 fixed an authorization bypass for misused ssh server configurations; if any other type of callback is passed other than public key, then the source-address validation would be skipped.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46595",
"url": "https://www.suse.com/security/cve/CVE-2026-46595"
},
{
"category": "external",
"summary": "SUSE Bug 1266049 for CVE-2026-46595",
"url": "https://bugzilla.suse.com/1266049"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-17T16:31:19Z",
"details": "important"
}
],
"title": "CVE-2026-46595"
},
{
"cve": "CVE-2026-46597",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46597"
}
],
"notes": [
{
"category": "general",
"text": "An incorrectly placed cast from bytes to int allowed for server-side panic in the AES-GCM packet decoder for well-crafted inputs.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46597",
"url": "https://www.suse.com/security/cve/CVE-2026-46597"
},
{
"category": "external",
"summary": "SUSE Bug 1266049 for CVE-2026-46597",
"url": "https://bugzilla.suse.com/1266049"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-17T16:31:19Z",
"details": "important"
}
],
"title": "CVE-2026-46597"
},
{
"cve": "CVE-2026-46598",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-46598"
}
],
"notes": [
{
"category": "general",
"text": "For certain crafted inputs, a \u0027ed25519.PrivateKey\u0027 was created by casting malformed wire bytes, leading to a panic when used.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-46598",
"url": "https://www.suse.com/security/cve/CVE-2026-46598"
},
{
"category": "external",
"summary": "SUSE Bug 1266049 for CVE-2026-46598",
"url": "https://bugzilla.suse.com/1266049"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:amazon-ssm-agent-3.3.4624.0-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-17T16:31:19Z",
"details": "important"
}
],
"title": "CVE-2026-46598"
}
]
}
Loading…
Trend slope:
-
(linear fit over daily sighting counts)
Show additional events:
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Loading…
Loading…