Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2026-30922 (GCVE-0-2026-30922)
Vulnerability from cvelistv5 – Published: 2026-03-18 02:29 – Updated: 2026-07-17 12:04
VLAI
EPSS
VEX
Title
pyasn1 Vulnerable to Denial of Service via Unbounded Recursion
Summary
pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.3, the `pyasn1` library is vulnerable to a Denial of Service (DoS) attack caused by uncontrolled recursion when decoding ASN.1 data with deeply nested structures. An attacker can supply a crafted payload containing thousands of nested `SEQUENCE` (`0x30`) or `SET` (`0x31`) tags with "Indefinite Length" (`0x80`) markers. This forces the decoder to recursively call itself until the Python interpreter crashes with a `RecursionError` or consumes all available memory (OOM), crashing the host application. This is a distinct vulnerability from CVE-2026-23490 (which addressed integer overflows in OID decoding). The fix for CVE-2026-23490 (`MAX_OID_ARC_CONTINUATION_OCTETS`) does not mitigate this recursion issue. Version 0.6.3 fixes this specific issue.
Severity
7.5 (High)
SSVC
Exploitation: poc
Automatable: yes
Technical Impact: partial
CISA Coordinator (v2.0.3)
CWE
Assigner
References
42 references
Impacted products
75 products
| Vendor | Product | Version | |
|---|---|---|---|
| pyasn1 | pyasn1 |
Affected:
< 0.6.3
|
|
| Red Hat | Red Hat Ansible Automation Platform 2.5 for RHEL 8 |
Unaffected:
0:0.6.3-1.el8ap , < *
(rpm)
cpe:/a:redhat:ansible_automation_platform:2.5::el8 |
|
| Red Hat | Red Hat Ansible Automation Platform 2.5 for RHEL 8 |
Unaffected:
0:4.6.29-2.el8ap , < *
(rpm)
cpe:/a:redhat:ansible_automation_platform:2.5::el8 |
|
| Red Hat | Red Hat Ansible Automation Platform 2.5 for RHEL 9 |
Unaffected:
0:0.6.3-1.el9ap , < *
(rpm)
cpe:/a:redhat:ansible_automation_platform:2.5::el9 |
|
| Red Hat | Red Hat Ansible Automation Platform 2.5 for RHEL 9 |
Unaffected:
0:4.6.29-2.el9ap , < *
(rpm)
cpe:/a:redhat:ansible_automation_platform:2.5::el9 |
|
| Red Hat | Red Hat Ansible Automation Platform 2.6 for RHEL 9 |
Unaffected:
0:0.6.3-1.el9ap , < *
(rpm)
cpe:/a:redhat:ansible_automation_platform:2.6::el9 |
|
| Red Hat | Red Hat Ansible Automation Platform 2.6 for RHEL 9 |
Unaffected:
0:4.7.12-1.el9ap , < *
(rpm)
cpe:/a:redhat:ansible_automation_platform:2.6::el9 |
|
| Red Hat | Red Hat Enterprise Linux 10 |
Unaffected:
0:4.16.0-13.el10_1.4 , < *
(rpm)
Unaffected: 0:4.16.0-21.el10_2.1 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.1 cpe:/o:redhat:enterprise_linux:10.2 |
|
| Red Hat | Red Hat Enterprise Linux 10.0 Extended Update Support |
Unaffected:
0:4.16.0-5.el10_0.9 , < *
(rpm)
cpe:/o:redhat:enterprise_linux_eus:10.0 |
|
| Red Hat | Red Hat Enterprise Linux 8 |
Unaffected:
0:4.2.1-129.el8_10.25 , < *
(rpm)
cpe:/a:redhat:enterprise_linux:8 |
|
| Red Hat | Red Hat Enterprise Linux 8 |
Unaffected:
0:4.9.0-54.el8_10.33 , < *
(rpm)
cpe:/a:redhat:enterprise_linux:8::highavailability |
|
| Red Hat | Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support |
Unaffected:
0:4.2.1-65.el8_4.28 , < *
(rpm)
cpe:/a:redhat:rhel_aus:8.4 |
|
| Red Hat | Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support |
Unaffected:
0:4.1.1-90.el8_4.25 , < *
(rpm)
cpe:/a:redhat:rhel_aus:8.4::highavailability |
|
| Red Hat | Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On |
Unaffected:
0:4.2.1-65.el8_4.28 , < *
(rpm)
cpe:/a:redhat:rhel_eus_long_life:8.4 |
|
| Red Hat | Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On |
Unaffected:
0:4.1.1-90.el8_4.25 , < *
(rpm)
cpe:/a:redhat:rhel_eus_long_life:8.4::highavailability |
|
| Red Hat | Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support |
Unaffected:
0:4.2.1-89.el8_6.22 , < *
(rpm)
cpe:/a:redhat:rhel_aus:8.6 |
|
| Red Hat | Red Hat Enterprise Linux 8.6 Telecommunications Update Service |
Unaffected:
0:4.2.1-89.el8_6.22 , < *
(rpm)
cpe:/a:redhat:rhel_tus:8.6 |
|
| Red Hat | Red Hat Enterprise Linux 8.6 Telecommunications Update Service |
Unaffected:
0:4.9.0-16.el8_6.22 , < *
(rpm)
cpe:/a:redhat:rhel_tus:8.6::highavailability |
|
| Red Hat | Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions |
Unaffected:
0:4.2.1-89.el8_6.22 , < *
(rpm)
cpe:/a:redhat:rhel_e4s:8.6 |
|
| Red Hat | Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions |
Unaffected:
0:4.9.0-16.el8_6.22 , < *
(rpm)
cpe:/a:redhat:rhel_e4s:8.6::highavailability |
|
| Red Hat | Red Hat Enterprise Linux 8.8 Telecommunications Update Service |
Unaffected:
0:4.2.1-112.el8_8.17 , < *
(rpm)
cpe:/a:redhat:rhel_tus:8.8 |
|
| Red Hat | Red Hat Enterprise Linux 8.8 Telecommunications Update Service |
Unaffected:
0:4.9.0-40.el8_8.19 , < *
(rpm)
cpe:/a:redhat:rhel_tus:8.8::highavailability |
|
| Red Hat | Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions |
Unaffected:
0:4.2.1-112.el8_8.17 , < *
(rpm)
cpe:/a:redhat:rhel_e4s:8.8 |
|
| Red Hat | Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions |
Unaffected:
0:4.9.0-40.el8_8.19 , < *
(rpm)
cpe:/a:redhat:rhel_e4s:8.8::highavailability |
|
| Red Hat | Red Hat Enterprise Linux 9 |
Unaffected:
0:4.10.0-110.el9_8.2 , < *
(rpm)
Unaffected: 0:4.10.0-98.el9_7.13 , < * (rpm) cpe:/a:redhat:enterprise_linux:9 |
|
| Red Hat | Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions |
Unaffected:
0:4.10.0-43.el9_2.22 , < *
(rpm)
cpe:/a:redhat:rhel_e4s:9.2 |
|
| Red Hat | Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions |
Unaffected:
0:4.10.0-62.el9_4.25 , < *
(rpm)
cpe:/a:redhat:rhel_e4s:9.4 |
|
| Red Hat | Red Hat Enterprise Linux 9.6 Extended Update Support |
Unaffected:
0:4.10.0-86.el9_6.17 , < *
(rpm)
cpe:/a:redhat:rhel_eus:9.6 |
|
| Red Hat | Red Hat AI Inference Server 3.3 |
Unaffected:
1778244531 , < *
(rpm)
cpe:/a:redhat:ai_inference_server:3.3::el9 |
|
| Red Hat | Red Hat Ansible Automation Platform 2.5 |
Unaffected:
1777398315 , < *
(rpm)
cpe:/a:redhat:ansible_automation_platform:2.5::el8 |
|
| Red Hat | Red Hat Ansible Automation Platform 2.5 |
Unaffected:
1777403872 , < *
(rpm)
cpe:/a:redhat:ansible_automation_platform:2.5::el8 |
|
| Red Hat | Red Hat Ansible Automation Platform 2.5 |
Unaffected:
1777402264 , < *
(rpm)
cpe:/a:redhat:ansible_automation_platform:2.5::el8 |
|
| Red Hat | Red Hat Ansible Automation Platform 2.6 |
Unaffected:
1777296732 , < *
(rpm)
cpe:/a:redhat:ansible_automation_platform:2.6::el9 |
|
| Red Hat | Red Hat Ansible Automation Platform 2.6 |
Unaffected:
1777311120 , < *
(rpm)
cpe:/a:redhat:ansible_automation_platform:2.6::el9 |
|
| Red Hat | Red Hat Ansible Automation Platform 2.6 |
Unaffected:
1777387242 , < *
(rpm)
cpe:/a:redhat:ansible_automation_platform:2.6::el9 |
|
| Red Hat | Red Hat Ansible Automation Platform 2.6 |
Unaffected:
1774417022 , < *
(rpm)
cpe:/a:redhat:ansible_automation_platform:2.6::el9 |
|
| Red Hat | Red Hat Enterprise Linux AI 3.3 |
Unaffected:
1778677745 , < *
(rpm)
cpe:/a:redhat:enterprise_linux_ai:3.3::el9 |
|
| Red Hat | Red Hat Enterprise Linux AI 3.3 |
Unaffected:
1778666124 , < *
(rpm)
cpe:/a:redhat:enterprise_linux_ai:3.3::el9 |
|
| Red Hat | Red Hat OpenShift AI 2.25 |
Unaffected:
1776343111 , < *
(rpm)
cpe:/a:redhat:openshift_ai:2.25::el9 |
|
| Red Hat | Red Hat OpenShift AI 3.3 |
Unaffected:
1778263407 , < *
(rpm)
cpe:/a:redhat:openshift_ai:3.3::el9 |
|
| Red Hat | Red Hat OpenShift AI 3.3 |
Unaffected:
1782471672 , < *
(rpm)
cpe:/a:redhat:openshift_ai:3.3::el9 |
|
| Red Hat | Red Hat OpenShift AI 3.3 |
Unaffected:
1782471731 , < *
(rpm)
cpe:/a:redhat:openshift_ai:3.3::el9 |
|
| Red Hat | Red Hat OpenShift AI 3.3 |
Unaffected:
1782471849 , < *
(rpm)
cpe:/a:redhat:openshift_ai:3.3::el9 |
|
| Red Hat | Red Hat OpenShift AI 3.3 |
Unaffected:
1782471734 , < *
(rpm)
cpe:/a:redhat:openshift_ai:3.3::el9 |
|
| Red Hat | Red Hat OpenShift AI 3.3 |
Unaffected:
1782471879 , < *
(rpm)
cpe:/a:redhat:openshift_ai:3.3::el9 |
|
| Red Hat | Red Hat OpenShift AI 3.3 |
Unaffected:
1782472374 , < *
(rpm)
cpe:/a:redhat:openshift_ai:3.3::el9 |
|
| Red Hat | Red Hat OpenShift AI 3.3 |
Unaffected:
1782471606 , < *
(rpm)
cpe:/a:redhat:openshift_ai:3.3::el9 |
|
| Red Hat | Red Hat OpenShift AI 3.3 |
Unaffected:
1782471796 , < *
(rpm)
cpe:/a:redhat:openshift_ai:3.3::el9 |
|
| Red Hat | Red Hat OpenShift AI 3.3 |
Unaffected:
1782471661 , < *
(rpm)
cpe:/a:redhat:openshift_ai:3.3::el9 |
|
| Red Hat | Red Hat OpenShift AI 3.3 |
Unaffected:
1782471753 , < *
(rpm)
cpe:/a:redhat:openshift_ai:3.3::el9 |
|
| Red Hat | Red Hat OpenShift AI 3.3 |
Unaffected:
1782471740 , < *
(rpm)
cpe:/a:redhat:openshift_ai:3.3::el9 |
|
| Red Hat | Red Hat OpenShift AI 3.3 |
Unaffected:
1782471834 , < *
(rpm)
cpe:/a:redhat:openshift_ai:3.3::el9 |
|
| Red Hat | Red Hat OpenShift AI 3.3 |
Unaffected:
1782471730 , < *
(rpm)
cpe:/a:redhat:openshift_ai:3.3::el9 |
|
| Red Hat | Red Hat OpenShift AI 3.3 |
Unaffected:
1782471835 , < *
(rpm)
cpe:/a:redhat:openshift_ai:3.3::el9 |
|
| Red Hat | Red Hat OpenShift AI 3.3 |
Unaffected:
1782471697 , < *
(rpm)
cpe:/a:redhat:openshift_ai:3.3::el9 |
|
| Red Hat | Red Hat OpenStack 1.5 |
Unaffected:
1777452540 , < *
(rpm)
cpe:/a:redhat:stf:1.5::el9 |
|
| Red Hat | Red Hat OpenStack 1.5 |
Unaffected:
1777407251 , < *
(rpm)
cpe:/a:redhat:stf:1.5::el9 |
|
| Red Hat | Red Hat OpenStack 1.5 |
Unaffected:
1777436150 , < *
(rpm)
cpe:/a:redhat:stf:1.5::el9 |
|
| Red Hat | Red Hat Quay 3.10 |
Unaffected:
1775169155 , < *
(rpm)
cpe:/a:redhat:quay:3.10::el8 |
|
| Red Hat | Red Hat Quay 3.12 |
Unaffected:
1775253092 , < *
(rpm)
cpe:/a:redhat:quay:3.12::el8 |
|
| Red Hat | Red Hat Quay 3.15 |
Unaffected:
1775169219 , < *
(rpm)
cpe:/a:redhat:quay:3.15::el8 |
|
| Red Hat | Red Hat Quay 3.16 |
Unaffected:
1779204086 , < *
(rpm)
cpe:/a:redhat:quay:3.16::el9 |
|
| Red Hat | Red Hat Quay 3.9 |
Unaffected:
1775169218 , < *
(rpm)
cpe:/a:redhat:quay:3.9::el8 |
|
| Red Hat | Red Hat Trusted Artifact Signer 1.4 |
Unaffected:
1775815407 , < *
(rpm)
cpe:/a:redhat:trusted_artifact_signer:1.4::el9 |
|
| Red Hat | Migration Toolkit for Containers |
cpe:/a:redhat:rhmt:1 |
|
| Red Hat | Migration Toolkit for Virtualization |
cpe:/a:redhat:migration_toolkit_virtualization:2 |
|
| Red Hat | OpenShift Lightspeed |
cpe:/a:redhat:openshift_lightspeed |
|
| Red Hat | OpenShift Service Mesh 3 |
cpe:/a:redhat:service_mesh:3 |
|
| Red Hat | Red Hat AI Inference Server |
cpe:/a:redhat:ai_inference_server:3 |
|
| Red Hat | Red Hat Ansible Automation Platform 2 |
cpe:/a:redhat:ansible_automation_platform:2 |
|
| Red Hat | Red Hat OpenShift AI (RHOAI) |
cpe:/a:redhat:openshift_ai |
|
| Red Hat | Red Hat OpenShift Container Platform 4 |
cpe:/a:redhat:openshift:4 |
|
| Red Hat | Red Hat OpenStack Platform 18.0 |
cpe:/a:redhat:openstack:18.0 |
|
| Red Hat | Red Hat Satellite 6 |
cpe:/a:redhat:satellite:6 |
|
| Red Hat | Red Hat Trusted Artifact Signer |
cpe:/a:redhat:trusted_artifact_signer:1 |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-30922",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-03-18T20:16:18.738732Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-03-18T20:17:53.102Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
},
{
"providerMetadata": {
"dateUpdated": "2026-05-01T16:21:04.773Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"url": "http://www.openwall.com/lists/oss-security/2026/03/20/4"
},
{
"url": "https://lists.debian.org/debian-lts-announce/2026/05/msg00001.html"
}
],
"title": "CVE Program Container"
},
{
"affected": [
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2.5::el8"
],
"defaultStatus": "affected",
"packageName": "python3.12-pyasn1",
"product": "Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.6.3-1.el8ap",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2.5::el8"
],
"defaultStatus": "affected",
"packageName": "automation-controller",
"product": "Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:4.6.29-2.el8ap",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2.5::el9"
],
"defaultStatus": "affected",
"packageName": "python3.12-pyasn1",
"product": "Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.6.3-1.el9ap",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2.5::el9"
],
"defaultStatus": "affected",
"packageName": "automation-controller",
"product": "Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:4.6.29-2.el9ap",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2.6::el9"
],
"defaultStatus": "affected",
"packageName": "python3.12-pyasn1",
"product": "Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.6.3-1.el9ap",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2.6::el9"
],
"defaultStatus": "affected",
"packageName": "automation-controller",
"product": "Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:4.7.12-1.el9ap",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10.1",
"cpe:/o:redhat:enterprise_linux:10.2"
],
"defaultStatus": "affected",
"packageName": "fence-agents",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:4.16.0-13.el10_1.4",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "0:4.16.0-21.el10_2.1",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux_eus:10.0"
],
"defaultStatus": "affected",
"packageName": "fence-agents",
"product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:4.16.0-5.el10_0.9",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:8"
],
"defaultStatus": "affected",
"packageName": "fence-agents",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:4.2.1-129.el8_10.25",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:8::highavailability"
],
"defaultStatus": "affected",
"packageName": "resource-agents",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:4.9.0-54.el8_10.33",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_aus:8.4"
],
"defaultStatus": "affected",
"packageName": "fence-agents",
"product": "Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:4.2.1-65.el8_4.28",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_aus:8.4::highavailability"
],
"defaultStatus": "affected",
"packageName": "resource-agents",
"product": "Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:4.1.1-90.el8_4.25",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_eus_long_life:8.4"
],
"defaultStatus": "affected",
"packageName": "fence-agents",
"product": "Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:4.2.1-65.el8_4.28",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_eus_long_life:8.4::highavailability"
],
"defaultStatus": "affected",
"packageName": "resource-agents",
"product": "Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:4.1.1-90.el8_4.25",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_aus:8.6"
],
"defaultStatus": "affected",
"packageName": "fence-agents",
"product": "Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:4.2.1-89.el8_6.22",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_tus:8.6"
],
"defaultStatus": "affected",
"packageName": "fence-agents",
"product": "Red Hat Enterprise Linux 8.6 Telecommunications Update Service",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:4.2.1-89.el8_6.22",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_tus:8.6::highavailability"
],
"defaultStatus": "affected",
"packageName": "resource-agents",
"product": "Red Hat Enterprise Linux 8.6 Telecommunications Update Service",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:4.9.0-16.el8_6.22",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_e4s:8.6"
],
"defaultStatus": "affected",
"packageName": "fence-agents",
"product": "Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:4.2.1-89.el8_6.22",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_e4s:8.6::highavailability"
],
"defaultStatus": "affected",
"packageName": "resource-agents",
"product": "Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:4.9.0-16.el8_6.22",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_tus:8.8"
],
"defaultStatus": "affected",
"packageName": "fence-agents",
"product": "Red Hat Enterprise Linux 8.8 Telecommunications Update Service",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:4.2.1-112.el8_8.17",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_tus:8.8::highavailability"
],
"defaultStatus": "affected",
"packageName": "resource-agents",
"product": "Red Hat Enterprise Linux 8.8 Telecommunications Update Service",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:4.9.0-40.el8_8.19",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_e4s:8.8"
],
"defaultStatus": "affected",
"packageName": "fence-agents",
"product": "Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:4.2.1-112.el8_8.17",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_e4s:8.8::highavailability"
],
"defaultStatus": "affected",
"packageName": "resource-agents",
"product": "Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:4.9.0-40.el8_8.19",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "fence-agents",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:4.10.0-110.el9_8.2",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "0:4.10.0-98.el9_7.13",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_e4s:9.2"
],
"defaultStatus": "affected",
"packageName": "fence-agents",
"product": "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:4.10.0-43.el9_2.22",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_e4s:9.4"
],
"defaultStatus": "affected",
"packageName": "fence-agents",
"product": "Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:4.10.0-62.el9_4.25",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_eus:9.6"
],
"defaultStatus": "affected",
"packageName": "fence-agents",
"product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:4.10.0-86.el9_6.17",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:ai_inference_server:3.3::el9"
],
"defaultStatus": "affected",
"packageName": "rhaiis/vllm-rocm-rhel9",
"product": "Red Hat AI Inference Server 3.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778244531",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2.5::el8"
],
"defaultStatus": "affected",
"packageName": "ansible-automation-platform-25/ee-supported-rhel8",
"product": "Red Hat Ansible Automation Platform 2.5",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1777398315",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2.5::el8"
],
"defaultStatus": "affected",
"packageName": "ansible-automation-platform-25/lightspeed-rhel8",
"product": "Red Hat Ansible Automation Platform 2.5",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1777403872",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2.5::el8"
],
"defaultStatus": "affected",
"packageName": "ansible-automation-platform-25/platform-resource-runner-rhel8",
"product": "Red Hat Ansible Automation Platform 2.5",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1777402264",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2.6::el9"
],
"defaultStatus": "affected",
"packageName": "ansible-automation-platform-26/eda-controller-rhel9",
"product": "Red Hat Ansible Automation Platform 2.6",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1777296732",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2.6::el9"
],
"defaultStatus": "affected",
"packageName": "ansible-automation-platform-26/gateway-rhel9",
"product": "Red Hat Ansible Automation Platform 2.6",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1777311120",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2.6::el9"
],
"defaultStatus": "affected",
"packageName": "ansible-automation-platform-26/lightspeed-rhel9",
"product": "Red Hat Ansible Automation Platform 2.6",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1777387242",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2.6::el9"
],
"defaultStatus": "affected",
"packageName": "ansible-automation-platform-26/lightspeed-chatbot-rhel9",
"product": "Red Hat Ansible Automation Platform 2.6",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1774417022",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:enterprise_linux_ai:3.3::el9"
],
"defaultStatus": "affected",
"packageName": "rhelai3/bootc-azure-rocm-rhel9",
"product": "Red Hat Enterprise Linux AI 3.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778677745",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:enterprise_linux_ai:3.3::el9"
],
"defaultStatus": "affected",
"packageName": "rhelai3/bootc-rocm-rhel9",
"product": "Red Hat Enterprise Linux AI 3.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778666124",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_ai:2.25::el9"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-kserve-storage-initializer-rhel9",
"product": "Red Hat OpenShift AI 2.25",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1776343111",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_ai:3.3::el9"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-kserve-storage-initializer-rhel9",
"product": "Red Hat OpenShift AI 3.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1778263407",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_ai:3.3::el9"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9",
"product": "Red Hat OpenShift AI 3.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782471672",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_ai:3.3::el9"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-pipeline-runtime-pytorch-cuda-py312-rhel9",
"product": "Red Hat OpenShift AI 3.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782471731",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_ai:3.3::el9"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-pipeline-runtime-pytorch-rocm-py312-rhel9",
"product": "Red Hat OpenShift AI 3.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782471849",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_ai:3.3::el9"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-pipeline-runtime-tensorflow-cuda-py312-rhel9",
"product": "Red Hat OpenShift AI 3.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782471734",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_ai:3.3::el9"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-pipeline-runtime-tensorflow-rocm-py312-rhel9",
"product": "Red Hat OpenShift AI 3.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782471879",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_ai:3.3::el9"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-trustyai-garak-lls-provider-dsp-rhel9",
"product": "Red Hat OpenShift AI 3.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782472374",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_ai:3.3::el9"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-trustyai-nemo-guardrails-server-rhel9",
"product": "Red Hat OpenShift AI 3.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782471606",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_ai:3.3::el9"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9",
"product": "Red Hat OpenShift AI 3.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782471796",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_ai:3.3::el9"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-workbench-jupyter-datascience-cpu-py312-rhel9",
"product": "Red Hat OpenShift AI 3.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782471661",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_ai:3.3::el9"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-workbench-jupyter-pytorch-cuda-py312-rhel9",
"product": "Red Hat OpenShift AI 3.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782471753",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_ai:3.3::el9"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-workbench-jupyter-pytorch-llmcompressor-cuda-py312-rhel9",
"product": "Red Hat OpenShift AI 3.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782471740",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_ai:3.3::el9"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-workbench-jupyter-pytorch-rocm-py312-rhel9",
"product": "Red Hat OpenShift AI 3.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782471834",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_ai:3.3::el9"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-workbench-jupyter-tensorflow-cuda-py312-rhel9",
"product": "Red Hat OpenShift AI 3.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782471730",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_ai:3.3::el9"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-workbench-jupyter-tensorflow-rocm-py312-rhel9",
"product": "Red Hat OpenShift AI 3.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782471835",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_ai:3.3::el9"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-workbench-jupyter-trustyai-cpu-py312-rhel9",
"product": "Red Hat OpenShift AI 3.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782471697",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:stf:1.5::el9"
],
"defaultStatus": "affected",
"packageName": "stf/prometheus-webhook-snmp-rhel9",
"product": "Red Hat OpenStack 1.5",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1777452540",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:stf:1.5::el9"
],
"defaultStatus": "affected",
"packageName": "stf/service-telemetry-rhel9-operator",
"product": "Red Hat OpenStack 1.5",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1777407251",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:stf:1.5::el9"
],
"defaultStatus": "affected",
"packageName": "stf/smart-gateway-rhel9-operator",
"product": "Red Hat OpenStack 1.5",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1777436150",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:quay:3.10::el8"
],
"defaultStatus": "affected",
"packageName": "quay/quay-rhel8",
"product": "Red Hat Quay 3.10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1775169155",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:quay:3.12::el8"
],
"defaultStatus": "affected",
"packageName": "quay/quay-rhel8",
"product": "Red Hat Quay 3.12",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1775253092",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:quay:3.15::el8"
],
"defaultStatus": "affected",
"packageName": "quay/quay-rhel8",
"product": "Red Hat Quay 3.15",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1775169219",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:quay:3.16::el9"
],
"defaultStatus": "affected",
"packageName": "quay/quay-rhel9",
"product": "Red Hat Quay 3.16",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1779204086",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:quay:3.9::el8"
],
"defaultStatus": "affected",
"packageName": "quay/quay-rhel8",
"product": "Red Hat Quay 3.9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1775169218",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:trusted_artifact_signer:1.4::el9"
],
"defaultStatus": "affected",
"packageName": "rhtas/model-transparency-rhel9",
"product": "Red Hat Trusted Artifact Signer 1.4",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1775815407",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhmt:1"
],
"defaultStatus": "affected",
"packageName": "rhmtc/openshift-migration-hook-runner-rhel8",
"product": "Migration Toolkit for Containers",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhmt:1"
],
"defaultStatus": "affected",
"packageName": "rhmtc/openshift-migration-rhel8-operator",
"product": "Migration Toolkit for Containers",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:migration_toolkit_virtualization:2"
],
"defaultStatus": "affected",
"packageName": "migration-toolkit-virtualization/mtv-rhel9-operator",
"product": "Migration Toolkit for Virtualization",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:migration_toolkit_virtualization:2"
],
"defaultStatus": "affected",
"packageName": "mtv-candidate/mtv-rhel9-operator",
"product": "Migration Toolkit for Virtualization",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_lightspeed"
],
"defaultStatus": "affected",
"packageName": "openshift-lightspeed/lightspeed-service-api-rhel9",
"product": "OpenShift Lightspeed",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_lightspeed"
],
"defaultStatus": "affected",
"packageName": "openshift-lightspeed/lightspeed-to-dataverse-exporter-rhel9",
"product": "OpenShift Lightspeed",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:service_mesh:3"
],
"defaultStatus": "unaffected",
"packageName": "openshift-service-mesh/kiali-rhel9-operator",
"product": "OpenShift Service Mesh 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ai_inference_server:3"
],
"defaultStatus": "affected",
"packageName": "rhaiis/vllm-tpu-rhel9",
"product": "Red Hat AI Inference Server",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "affected",
"packageName": "ansible-automation-platform-24/ee-minimal-rhel8",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "affected",
"packageName": "ansible-automation-platform-24/ee-minimal-rhel9",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "affected",
"packageName": "ansible-automation-platform-24/ee-supported-rhel9",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "affected",
"packageName": "ansible-automation-platform-25/ee-minimal-rhel9",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "affected",
"packageName": "ansible-automation-platform-25/ee-supported-rhel9",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "affected",
"packageName": "ansible-automation-platform-25/lightspeed-chatbot-rhel8",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "affected",
"packageName": "ansible-automation-platform-26/controller-rhel9",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "unaffected",
"packageName": "ansible-automation-platform-26/controller-rhel9-operator",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "unaffected",
"packageName": "ansible-automation-platform-26/eda-controller-rhel9-operator",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "affected",
"packageName": "ansible-automation-platform-26/ee-supported-rhel9",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "unaffected",
"packageName": "ansible-automation-platform-26/gateway-rhel9-operator",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "affected",
"packageName": "ansible-automation-platform-26/hub-rhel9",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "unaffected",
"packageName": "ansible-automation-platform-26/hub-rhel9-operator",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "unaffected",
"packageName": "ansible-automation-platform-26/lightspeed-rhel9-operator",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "unaffected",
"packageName": "ansible-automation-platform-26/platform-resource-rhel9-operator",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-feature-server-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-kserve-agent-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-kserve-controller-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-kserve-router-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-llama-stack-core-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-mlflow-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-ml-pipelines-runtime-generic-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-modelmesh-runtime-adapter-rhel8",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-pipeline-runtime-minimal-cpu-py312-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-pipeline-runtime-pytorch-llmcompressor-cuda-py312-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-training-cuda128-torch29-py312-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-workbench-jupyter-minimal-cpu-py312-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-workbench-jupyter-minimal-cuda-py312-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-workbench-jupyter-minimal-rocm-py312-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-ansible-operator",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-ansible-rhel9-operator",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "openshift4/ztp-site-generate-rhel8",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openstack:18.0"
],
"defaultStatus": "unaffected",
"packageName": "rhoso-operators/ee-openstack-ansible-ee-rhel9",
"product": "Red Hat OpenStack Platform 18.0",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:satellite:6"
],
"defaultStatus": "affected",
"packageName": "satellite/iop-advisor-engine-rhel9",
"product": "Red Hat Satellite 6",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:satellite:6"
],
"defaultStatus": "affected",
"packageName": "satellite/iop-insights-engine-rhel9",
"product": "Red Hat Satellite 6",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:trusted_artifact_signer:1"
],
"defaultStatus": "affected",
"packageName": "rhtas/segment-reporting-rhel9",
"product": "Red Hat Trusted Artifact Signer",
"vendor": "Red Hat"
}
],
"datePublic": "2026-03-18T02:29:45.857Z",
"descriptions": [
{
"lang": "en",
"value": "An unbounded recursion flaw has been discovered in the pypi pyasn1 library. This uncontrolled recursion occurs when decoding ASN.1 data with deeply nested structures. An attacker can supply a crafted payload containing nested SEQUENCE (0x30) or SET (0x31) tags with Indefinite Length (0x80) markers. This forces the decoder to recursively call itself until the Python interpreter crashes with a RecursionError or consumes all available memory (OOM), crashing the host application."
}
],
"metrics": [
{
"other": {
"content": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"value": "Important"
},
"type": "Red Hat severity rating"
}
},
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-835",
"description": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-07-17T12:04:39.985Z",
"orgId": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
"shortName": "redhat-SADP"
},
"references": [
{
"tags": [
"vdb-entry",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/security/cve/CVE-2026-30922"
},
{
"name": "RHBZ#2448553",
"tags": [
"issue-tracking",
"x_refsource_REDHAT"
],
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2448553"
},
{
"tags": [
"x_sadp-csaf-vex"
],
"url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-30922.json"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:24761"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:13512"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:24762"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:13508"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:17083"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:13916"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:19138"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:12176"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:22135"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:22134"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:20588"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:22987"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:22969"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:22970"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:13917"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:19355"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:13902"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:22133"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:22132"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:22131"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:16009"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:13553"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:13545"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:6309"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:17611"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:10184"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:19712"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:37275"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:14020"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:6912"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:6720"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:6568"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:19375"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:6926"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:8437"
}
],
"solutions": [
{
"lang": "en",
"value": "RHSA-2026:24761: Red Hat Ansible Automation Platform 2.5 for RHEL 8, Red Hat Ansible Automation Platform 2.5 for RHEL 9"
},
{
"lang": "en",
"value": "RHSA-2026:13512: Red Hat Ansible Automation Platform 2.5 for RHEL 8, Red Hat Ansible Automation Platform 2.5 for RHEL 9"
},
{
"lang": "en",
"value": "RHSA-2026:24762: Red Hat Ansible Automation Platform 2.6 for RHEL 9"
},
{
"lang": "en",
"value": "RHSA-2026:13508: Red Hat Ansible Automation Platform 2.6 for RHEL 9"
},
{
"lang": "en",
"value": "RHSA-2026:17083: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
},
{
"lang": "en",
"value": "RHSA-2026:13916: Red Hat Enterprise Linux AppStream (v. 10)"
},
{
"lang": "en",
"value": "RHSA-2026:19138: Red Hat Enterprise Linux AppStream (v. 10)"
},
{
"lang": "en",
"value": "RHSA-2026:12176: Red Hat Enterprise Linux AppStream (v. 8), Red Hat Enterprise Linux HighAvailability (v. 8), Red Hat Enterprise Linux ResilientStorage (v. 8)"
},
{
"lang": "en",
"value": "RHSA-2026:22135: Red Hat Enterprise Linux AppStream AUS (v.8.4), Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4), Red Hat Enterprise Linux High Availability AUS (v.8.4), Red Hat Enterprise Linux HighAvailability EUS EXTENSION (v.8.4)"
},
{
"lang": "en",
"value": "RHSA-2026:22134: Red Hat Enterprise Linux AppStream AUS (v.8.6), Red Hat Enterprise Linux AppStream E4S (v.8.6), Red Hat Enterprise Linux AppStream TUS (v.8.6), Red Hat Enterprise Linux High Availability E4S (v.8.6), Red Hat Enterprise Linux High Availability TUS (v.8.6)"
},
{
"lang": "en",
"value": "RHSA-2026:20588: Red Hat Enterprise Linux AppStream E4S (v.8.8), Red Hat Enterprise Linux AppStream TUS (v.8.8), Red Hat Enterprise Linux High Availability E4S (v.8.8), Red Hat Enterprise Linux High Availability TUS (v.8.8)"
},
{
"lang": "en",
"value": "RHSA-2026:22987: Red Hat Enterprise Linux AppStream E4S (v.9.2), Red Hat Enterprise Linux High Availability E4S (v.9.2), Red Hat Enterprise Linux Resilient Storage E4S (v.9.2)"
},
{
"lang": "en",
"value": "RHSA-2026:22969: Red Hat Enterprise Linux AppStream E4S (v.9.4), Red Hat Enterprise Linux High Availability E4S (v.9.4), Red Hat Enterprise Linux Resilient Storage E4S (v.9.4)"
},
{
"lang": "en",
"value": "RHSA-2026:22970: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
},
{
"lang": "en",
"value": "RHSA-2026:13917: Red Hat Enterprise Linux AppStream (v. 9)"
},
{
"lang": "en",
"value": "RHSA-2026:19355: Red Hat Enterprise Linux AppStream (v. 9)"
},
{
"lang": "en",
"value": "RHSA-2026:13902: Red Hat Enterprise Linux HighAvailability (v. 8), Red Hat Enterprise Linux ResilientStorage (v. 8)"
},
{
"lang": "en",
"value": "RHSA-2026:22133: Red Hat Enterprise Linux High Availability AUS (v.8.4), Red Hat Enterprise Linux HighAvailability EUS EXTENSION (v.8.4)"
},
{
"lang": "en",
"value": "RHSA-2026:22132: Red Hat Enterprise Linux High Availability E4S (v.8.6), Red Hat Enterprise Linux High Availability TUS (v.8.6)"
},
{
"lang": "en",
"value": "RHSA-2026:22131: Red Hat Enterprise Linux High Availability E4S (v.8.8), Red Hat Enterprise Linux High Availability TUS (v.8.8)"
},
{
"lang": "en",
"value": "RHSA-2026:16009: Red Hat AI Inference Server 3.3"
},
{
"lang": "en",
"value": "RHSA-2026:13553: Red Hat Ansible Automation Platform 2.5"
},
{
"lang": "en",
"value": "RHSA-2026:13545: Red Hat Ansible Automation Platform 2.6"
},
{
"lang": "en",
"value": "RHSA-2026:6309: Red Hat Ansible Automation Platform 2.6"
},
{
"lang": "en",
"value": "RHSA-2026:17611: Red Hat Enterprise Linux AI 3.3"
},
{
"lang": "en",
"value": "RHSA-2026:10184: Red Hat OpenShift AI 2.25"
},
{
"lang": "en",
"value": "RHSA-2026:19712: Red Hat OpenShift AI 3.3"
},
{
"lang": "en",
"value": "RHSA-2026:37275: Red Hat OpenShift AI 3.3"
},
{
"lang": "en",
"value": "RHSA-2026:14020: Red Hat OpenStack 1.5"
},
{
"lang": "en",
"value": "RHSA-2026:6912: Red Hat Quay 3.10"
},
{
"lang": "en",
"value": "RHSA-2026:6720: Red Hat Quay 3.12"
},
{
"lang": "en",
"value": "RHSA-2026:6568: Red Hat Quay 3.15"
},
{
"lang": "en",
"value": "RHSA-2026:19375: Red Hat Quay 3.16"
},
{
"lang": "en",
"value": "RHSA-2026:6926: Red Hat Quay 3.9"
},
{
"lang": "en",
"value": "RHSA-2026:8437: Red Hat Trusted Artifact Signer 1.4"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-03-18T04:02:45.401Z",
"value": "Reported to Red Hat."
},
{
"lang": "en",
"time": "2026-03-18T02:29:45.857Z",
"value": "Made public."
}
],
"title": "pyasn1: pyasn1 Vulnerable to Denial of Service via Unbounded Recursion",
"workarounds": [
{
"lang": "en",
"value": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability."
}
],
"x_adpType": "supplier",
"x_generator": {
"engine": "sadp-cli 1.0.0"
}
}
],
"cna": {
"affected": [
{
"product": "pyasn1",
"vendor": "pyasn1",
"versions": [
{
"status": "affected",
"version": "\u003c 0.6.3"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.3, the `pyasn1` library is vulnerable to a Denial of Service (DoS) attack caused by uncontrolled recursion when decoding ASN.1 data with deeply nested structures. An attacker can supply a crafted payload containing thousands of nested `SEQUENCE` (`0x30`) or `SET` (`0x31`) tags with \"Indefinite Length\" (`0x80`) markers. This forces the decoder to recursively call itself until the Python interpreter crashes with a `RecursionError` or consumes all available memory (OOM), crashing the host application. This is a distinct vulnerability from CVE-2026-23490 (which addressed integer overflows in OID decoding). The fix for CVE-2026-23490 (`MAX_OID_ARC_CONTINUATION_OCTETS`) does not mitigate this recursion issue. Version 0.6.3 fixes this specific issue."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-674",
"description": "CWE-674: Uncontrolled Recursion",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-03-18T02:29:45.857Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/pyasn1/pyasn1/security/advisories/GHSA-jr27-m4p2-rc6r",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/pyasn1/pyasn1/security/advisories/GHSA-jr27-m4p2-rc6r"
},
{
"name": "https://github.com/pyasn1/pyasn1/commit/25ad481c19fdb006e20485ef3fc2e5b3eff30ef0",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/pyasn1/pyasn1/commit/25ad481c19fdb006e20485ef3fc2e5b3eff30ef0"
}
],
"source": {
"advisory": "GHSA-jr27-m4p2-rc6r",
"discovery": "UNKNOWN"
},
"title": "pyasn1 Vulnerable to Denial of Service via Unbounded Recursion"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-30922",
"datePublished": "2026-03-18T02:29:45.857Z",
"dateReserved": "2026-03-07T16:40:05.884Z",
"dateUpdated": "2026-07-17T12:04:39.985Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2026-30922",
"date": "2026-07-19",
"epss": "0.00803",
"percentile": "0.52592"
},
"microsoft_vex": {
"current_release_date": "2026-03-31T15:08:36.000Z",
"cve": "CVE-2026-30922",
"id": "msrc_CVE-2026-30922",
"initial_release_date": "2026-03-02T00:00:00.000Z",
"product_status:fixed": "3",
"product_status:known_affected": "3",
"source": "Microsoft CSAF VEX",
"status": "final",
"title": "pyasn1 Vulnerable to Denial of Service via Unbounded Recursion",
"url": "https://msrc.microsoft.com/csaf/vex/2026/msrc_cve-2026-30922.json",
"version": "4"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2026-30922\",\"sourceIdentifier\":\"security-advisories@github.com\",\"published\":\"2026-03-18T04:17:18.397\",\"lastModified\":\"2026-07-17T13:18:12.780\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.3, the `pyasn1` library is vulnerable to a Denial of Service (DoS) attack caused by uncontrolled recursion when decoding ASN.1 data with deeply nested structures. An attacker can supply a crafted payload containing thousands of nested `SEQUENCE` (`0x30`) or `SET` (`0x31`) tags with \\\"Indefinite Length\\\" (`0x80`) markers. This forces the decoder to recursively call itself until the Python interpreter crashes with a `RecursionError` or consumes all available memory (OOM), crashing the host application. This is a distinct vulnerability from CVE-2026-23490 (which addressed integer overflows in OID decoding). The fix for CVE-2026-23490 (`MAX_OID_ARC_CONTINUATION_OCTETS`) does not mitigate this recursion issue. Version 0.6.3 fixes this specific issue.\"},{\"lang\":\"es\",\"value\":\"pyasn1 es una biblioteca ASN.1 gen\u00e9rica para Python. Antes de la versi\u00f3n 0.6.3, la biblioteca \u0027pyasn1\u0027 es vulnerable a un ataque de denegaci\u00f3n de servicio (DoS) causado por recursi\u00f3n incontrolada al decodificar datos ASN.1 con estructuras profundamente anidadas. Un atacante puede suministrar una carga \u00fatil manipulada que contenga miles de etiquetas \u0027SEQUENCE\u0027 (\u00270x30\u0027) o \u0027SET\u0027 (\u00270x31\u0027) anidadas con marcadores de \u0027Longitud Indefinida\u0027 (\u00270x80\u0027). Esto fuerza al decodificador a llamarse recursivamente hasta que el int\u00e9rprete de Python falla con un \u0027RecursionError\u0027 o consume toda la memoria disponible (OOM), provocando la ca\u00edda de la aplicaci\u00f3n anfitriona. Esta es una vulnerabilidad distinta de CVE-2026-23490 (que abord\u00f3 desbordamientos de enteros en la decodificaci\u00f3n de OID). La soluci\u00f3n para CVE-2026-23490 (\u0027MAX_OID_ARC_CONTINUATION_OCTETS\u0027) no mitiga este problema de recursi\u00f3n. La versi\u00f3n 0.6.3 soluciona este problema espec\u00edfico.\"}],\"affected\":[{\"source\":\"security-advisories@github.com\",\"affectedData\":[{\"vendor\":\"pyasn1\",\"product\":\"pyasn1\",\"versions\":[{\"version\":\"\u003c 0.6.3\",\"status\":\"affected\"}]}]},{\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"affectedData\":[{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2.5 for RHEL 8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"python3.12-pyasn1\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2.5::el8\"],\"versions\":[{\"version\":\"0:0.6.3-1.el8ap\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2.5 for RHEL 8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"automation-controller\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2.5::el8\"],\"versions\":[{\"version\":\"0:4.6.29-2.el8ap\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2.5 for RHEL 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"python3.12-pyasn1\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2.5::el9\"],\"versions\":[{\"version\":\"0:0.6.3-1.el9ap\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2.5 for RHEL 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"automation-controller\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2.5::el9\"],\"versions\":[{\"version\":\"0:4.6.29-2.el9ap\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2.6 for RHEL 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"python3.12-pyasn1\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2.6::el9\"],\"versions\":[{\"version\":\"0:0.6.3-1.el9ap\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2.6 for RHEL 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"automation-controller\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2.6::el9\"],\"versions\":[{\"version\":\"0:4.7.12-1.el9ap\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"fence-agents\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10.1\",\"cpe:/o:redhat:enterprise_linux:10.2\"],\"versions\":[{\"version\":\"0:4.16.0-13.el10_1.4\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"0:4.16.0-21.el10_2.1\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10.0 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"fence-agents\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux_eus:10.0\"],\"versions\":[{\"version\":\"0:4.16.0-5.el10_0.9\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"fence-agents\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:8\"],\"versions\":[{\"version\":\"0:4.2.1-129.el8_10.25\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"resource-agents\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:8::highavailability\"],\"versions\":[{\"version\":\"0:4.9.0-54.el8_10.33\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"fence-agents\",\"cpes\":[\"cpe:/a:redhat:rhel_aus:8.4\"],\"versions\":[{\"version\":\"0:4.2.1-65.el8_4.28\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"resource-agents\",\"cpes\":[\"cpe:/a:redhat:rhel_aus:8.4::highavailability\"],\"versions\":[{\"version\":\"0:4.1.1-90.el8_4.25\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"fence-agents\",\"cpes\":[\"cpe:/a:redhat:rhel_eus_long_life:8.4\"],\"versions\":[{\"version\":\"0:4.2.1-65.el8_4.28\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"resource-agents\",\"cpes\":[\"cpe:/a:redhat:rhel_eus_long_life:8.4::highavailability\"],\"versions\":[{\"version\":\"0:4.1.1-90.el8_4.25\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"fence-agents\",\"cpes\":[\"cpe:/a:redhat:rhel_aus:8.6\"],\"versions\":[{\"version\":\"0:4.2.1-89.el8_6.22\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.6 Telecommunications Update Service\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"fence-agents\",\"cpes\":[\"cpe:/a:redhat:rhel_tus:8.6\"],\"versions\":[{\"version\":\"0:4.2.1-89.el8_6.22\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.6 Telecommunications Update Service\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"resource-agents\",\"cpes\":[\"cpe:/a:redhat:rhel_tus:8.6::highavailability\"],\"versions\":[{\"version\":\"0:4.9.0-16.el8_6.22\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"fence-agents\",\"cpes\":[\"cpe:/a:redhat:rhel_e4s:8.6\"],\"versions\":[{\"version\":\"0:4.2.1-89.el8_6.22\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"resource-agents\",\"cpes\":[\"cpe:/a:redhat:rhel_e4s:8.6::highavailability\"],\"versions\":[{\"version\":\"0:4.9.0-16.el8_6.22\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.8 Telecommunications Update Service\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"fence-agents\",\"cpes\":[\"cpe:/a:redhat:rhel_tus:8.8\"],\"versions\":[{\"version\":\"0:4.2.1-112.el8_8.17\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.8 Telecommunications Update Service\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"resource-agents\",\"cpes\":[\"cpe:/a:redhat:rhel_tus:8.8::highavailability\"],\"versions\":[{\"version\":\"0:4.9.0-40.el8_8.19\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"fence-agents\",\"cpes\":[\"cpe:/a:redhat:rhel_e4s:8.8\"],\"versions\":[{\"version\":\"0:4.2.1-112.el8_8.17\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"resource-agents\",\"cpes\":[\"cpe:/a:redhat:rhel_e4s:8.8::highavailability\"],\"versions\":[{\"version\":\"0:4.9.0-40.el8_8.19\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"fence-agents\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:9\"],\"versions\":[{\"version\":\"0:4.10.0-110.el9_8.2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"0:4.10.0-98.el9_7.13\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"fence-agents\",\"cpes\":[\"cpe:/a:redhat:rhel_e4s:9.2\"],\"versions\":[{\"version\":\"0:4.10.0-43.el9_2.22\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"fence-agents\",\"cpes\":[\"cpe:/a:redhat:rhel_e4s:9.4\"],\"versions\":[{\"version\":\"0:4.10.0-62.el9_4.25\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.6 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"fence-agents\",\"cpes\":[\"cpe:/a:redhat:rhel_eus:9.6\"],\"versions\":[{\"version\":\"0:4.10.0-86.el9_6.17\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat AI Inference Server 3.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhaiis/vllm-rocm-rhel9\",\"cpes\":[\"cpe:/a:redhat:ai_inference_server:3.3::el9\"],\"versions\":[{\"version\":\"1778244531\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2.5\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"ansible-automation-platform-25/ee-supported-rhel8\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2.5::el8\"],\"versions\":[{\"version\":\"1777398315\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2.5\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"ansible-automation-platform-25/lightspeed-rhel8\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2.5::el8\"],\"versions\":[{\"version\":\"1777403872\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2.5\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"ansible-automation-platform-25/platform-resource-runner-rhel8\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2.5::el8\"],\"versions\":[{\"version\":\"1777402264\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2.6\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"ansible-automation-platform-26/eda-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2.6::el9\"],\"versions\":[{\"version\":\"1777296732\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2.6\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"ansible-automation-platform-26/gateway-rhel9\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2.6::el9\"],\"versions\":[{\"version\":\"1777311120\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2.6\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"ansible-automation-platform-26/lightspeed-rhel9\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2.6::el9\"],\"versions\":[{\"version\":\"1777387242\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2.6\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"ansible-automation-platform-26/lightspeed-chatbot-rhel9\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2.6::el9\"],\"versions\":[{\"version\":\"1774417022\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AI 3.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhelai3/bootc-azure-rocm-rhel9\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux_ai:3.3::el9\"],\"versions\":[{\"version\":\"1778677745\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AI 3.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhelai3/bootc-rocm-rhel9\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux_ai:3.3::el9\"],\"versions\":[{\"version\":\"1778666124\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI 2.25\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhoai/odh-kserve-storage-initializer-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai:2.25::el9\"],\"versions\":[{\"version\":\"1776343111\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI 3.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhoai/odh-kserve-storage-initializer-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai:3.3::el9\"],\"versions\":[{\"version\":\"1778263407\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI 3.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai:3.3::el9\"],\"versions\":[{\"version\":\"1782471672\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI 3.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhoai/odh-pipeline-runtime-pytorch-cuda-py312-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai:3.3::el9\"],\"versions\":[{\"version\":\"1782471731\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI 3.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhoai/odh-pipeline-runtime-pytorch-rocm-py312-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai:3.3::el9\"],\"versions\":[{\"version\":\"1782471849\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI 3.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhoai/odh-pipeline-runtime-tensorflow-cuda-py312-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai:3.3::el9\"],\"versions\":[{\"version\":\"1782471734\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI 3.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhoai/odh-pipeline-runtime-tensorflow-rocm-py312-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai:3.3::el9\"],\"versions\":[{\"version\":\"1782471879\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI 3.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhoai/odh-trustyai-garak-lls-provider-dsp-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai:3.3::el9\"],\"versions\":[{\"version\":\"1782472374\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI 3.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhoai/odh-trustyai-nemo-guardrails-server-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai:3.3::el9\"],\"versions\":[{\"version\":\"1782471606\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI 3.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai:3.3::el9\"],\"versions\":[{\"version\":\"1782471796\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI 3.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhoai/odh-workbench-jupyter-datascience-cpu-py312-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai:3.3::el9\"],\"versions\":[{\"version\":\"1782471661\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI 3.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhoai/odh-workbench-jupyter-pytorch-cuda-py312-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai:3.3::el9\"],\"versions\":[{\"version\":\"1782471753\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI 3.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhoai/odh-workbench-jupyter-pytorch-llmcompressor-cuda-py312-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai:3.3::el9\"],\"versions\":[{\"version\":\"1782471740\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI 3.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhoai/odh-workbench-jupyter-pytorch-rocm-py312-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai:3.3::el9\"],\"versions\":[{\"version\":\"1782471834\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI 3.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhoai/odh-workbench-jupyter-tensorflow-cuda-py312-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai:3.3::el9\"],\"versions\":[{\"version\":\"1782471730\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI 3.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhoai/odh-workbench-jupyter-tensorflow-rocm-py312-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai:3.3::el9\"],\"versions\":[{\"version\":\"1782471835\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI 3.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhoai/odh-workbench-jupyter-trustyai-cpu-py312-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai:3.3::el9\"],\"versions\":[{\"version\":\"1782471697\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenStack 1.5\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"stf/prometheus-webhook-snmp-rhel9\",\"cpes\":[\"cpe:/a:redhat:stf:1.5::el9\"],\"versions\":[{\"version\":\"1777452540\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenStack 1.5\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"stf/service-telemetry-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:stf:1.5::el9\"],\"versions\":[{\"version\":\"1777407251\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenStack 1.5\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"stf/smart-gateway-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:stf:1.5::el9\"],\"versions\":[{\"version\":\"1777436150\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Quay 3.10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"quay/quay-rhel8\",\"cpes\":[\"cpe:/a:redhat:quay:3.10::el8\"],\"versions\":[{\"version\":\"1775169155\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Quay 3.12\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"quay/quay-rhel8\",\"cpes\":[\"cpe:/a:redhat:quay:3.12::el8\"],\"versions\":[{\"version\":\"1775253092\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Quay 3.15\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"quay/quay-rhel8\",\"cpes\":[\"cpe:/a:redhat:quay:3.15::el8\"],\"versions\":[{\"version\":\"1775169219\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Quay 3.16\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"quay/quay-rhel9\",\"cpes\":[\"cpe:/a:redhat:quay:3.16::el9\"],\"versions\":[{\"version\":\"1779204086\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Quay 3.9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"quay/quay-rhel8\",\"cpes\":[\"cpe:/a:redhat:quay:3.9::el8\"],\"versions\":[{\"version\":\"1775169218\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Trusted Artifact Signer 1.4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhtas/model-transparency-rhel9\",\"cpes\":[\"cpe:/a:redhat:trusted_artifact_signer:1.4::el9\"],\"versions\":[{\"version\":\"1775815407\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Migration Toolkit for Containers\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhmtc/openshift-migration-hook-runner-rhel8\",\"cpes\":[\"cpe:/a:redhat:rhmt:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Migration Toolkit for Containers\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhmtc/openshift-migration-rhel8-operator\",\"cpes\":[\"cpe:/a:redhat:rhmt:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Migration Toolkit for Virtualization\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"migration-toolkit-virtualization/mtv-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:migration_toolkit_virtualization:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Migration Toolkit for Virtualization\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"mtv-candidate/mtv-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:migration_toolkit_virtualization:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Lightspeed\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-lightspeed/lightspeed-service-api-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_lightspeed\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Lightspeed\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-lightspeed/lightspeed-to-dataverse-exporter-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_lightspeed\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Service Mesh 3\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-service-mesh/kiali-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat AI Inference Server\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhaiis/vllm-tpu-rhel9\",\"cpes\":[\"cpe:/a:redhat:ai_inference_server:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ansible-automation-platform-24/ee-minimal-rhel8\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ansible-automation-platform-24/ee-minimal-rhel9\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ansible-automation-platform-24/ee-supported-rhel9\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ansible-automation-platform-25/ee-minimal-rhel9\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ansible-automation-platform-25/ee-supported-rhel9\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ansible-automation-platform-25/lightspeed-chatbot-rhel8\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ansible-automation-platform-26/controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ansible-automation-platform-26/controller-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ansible-automation-platform-26/eda-controller-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ansible-automation-platform-26/ee-supported-rhel9\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ansible-automation-platform-26/gateway-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ansible-automation-platform-26/hub-rhel9\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ansible-automation-platform-26/hub-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ansible-automation-platform-26/lightspeed-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ansible-automation-platform-26/platform-resource-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-feature-server-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-kserve-agent-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-kserve-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-kserve-router-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-llama-stack-core-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-mlflow-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-ml-pipelines-runtime-generic-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-modelmesh-runtime-adapter-rhel8\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-pipeline-runtime-minimal-cpu-py312-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-pipeline-runtime-pytorch-llmcompressor-cuda-py312-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-training-cuda128-torch29-py312-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-workbench-jupyter-minimal-cpu-py312-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-workbench-jupyter-minimal-cuda-py312-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-workbench-jupyter-minimal-rocm-py312-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-ansible-operator\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-ansible-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ztp-site-generate-rhel8\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenStack Platform 18.0\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoso-operators/ee-openstack-ansible-ee-rhel9\",\"cpes\":[\"cpe:/a:redhat:openstack:18.0\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Satellite 6\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"satellite/iop-advisor-engine-rhel9\",\"cpes\":[\"cpe:/a:redhat:satellite:6\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Satellite 6\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"satellite/iop-insights-engine-rhel9\",\"cpes\":[\"cpe:/a:redhat:satellite:6\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Trusted Artifact Signer\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhtas/segment-reporting-rhel9\",\"cpes\":[\"cpe:/a:redhat:trusted_artifact_signer:1\"]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"security-advisories@github.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":7.5,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":3.6},{\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":7.5,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":3.6}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2026-03-18T20:16:18.738732Z\",\"id\":\"CVE-2026-30922\",\"options\":[{\"exploitation\":\"poc\"},{\"automatable\":\"yes\"},{\"technicalImpact\":\"partial\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"security-advisories@github.com\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-674\"}]},{\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-835\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:pyasn1:pyasn1:*:*:*:*:*:python:*:*\",\"versionEndExcluding\":\"0.6.3\",\"matchCriteriaId\":\"3F5F876E-E9B5-45D9-AE85-5E3E35AD09D7\"}]}]}],\"references\":[{\"url\":\"https://github.com/pyasn1/pyasn1/commit/25ad481c19fdb006e20485ef3fc2e5b3eff30ef0\",\"source\":\"security-advisories@github.com\",\"tags\":[\"Patch\"]},{\"url\":\"https://github.com/pyasn1/pyasn1/security/advisories/GHSA-jr27-m4p2-rc6r\",\"source\":\"security-advisories@github.com\",\"tags\":[\"Exploit\",\"Vendor Advisory\"]},{\"url\":\"http://www.openwall.com/lists/oss-security/2026/03/20/4\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://lists.debian.org/debian-lts-announce/2026/05/msg00001.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:10184\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:12176\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:13508\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:13512\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:13545\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:13553\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:13902\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:13916\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:13917\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:14020\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:16009\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:17083\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:17611\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19138\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19355\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19375\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19712\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:20588\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:22131\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:22132\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:22133\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:22134\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:22135\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:22969\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:22970\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:22987\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:24761\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:24762\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:37275\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:6309\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:6568\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:6720\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:6912\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:6926\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:8437\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/security/cve/CVE-2026-30922\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://bugzilla.redhat.com/show_bug.cgi?id=2448553\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-30922.json\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"}]}}",
"redhat_vex": {
"aggregate_severity": "Important",
"current_release_date": "2026-07-20T03:27:15+00:00",
"cve": "CVE-2026-30922",
"id": "CVE-2026-30922",
"initial_release_date": "2026-03-18T02:29:45.857000+00:00",
"product_status:fixed": "1697",
"product_status:known_affected": "27",
"product_status:known_not_affected": "2348",
"source": "Red Hat CSAF VEX",
"status": "final",
"title": "pyasn1: pyasn1 Vulnerable to Denial of Service via Unbounded Recursion",
"url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-30922.json",
"version": "3"
},
"vulnrichment": {
"containers": "{\"adp\": [{\"title\": \"CVE Program Container\", \"references\": [{\"url\": \"http://www.openwall.com/lists/oss-security/2026/03/20/4\"}, {\"url\": \"https://lists.debian.org/debian-lts-announce/2026/05/msg00001.html\"}], \"providerMetadata\": {\"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\", \"dateUpdated\": \"2026-05-01T16:21:04.773Z\"}}, {\"title\": \"pyasn1: pyasn1 Vulnerable to Denial of Service via Unbounded Recursion\", \"metrics\": [{\"other\": {\"type\": \"Red Hat severity rating\", \"content\": {\"value\": \"Important\", \"namespace\": \"https://access.redhat.com/security/updates/classification/\"}}}, {\"format\": \"CVSS\", \"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 7.5, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\", \"integrityImpact\": \"NONE\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"NONE\"}}], \"affected\": [{\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2.5::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2.5 for RHEL 8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.6.3-1.el8ap\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"python3.12-pyasn1\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2.5::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2.5 for RHEL 8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:4.6.29-2.el8ap\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"automation-controller\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2.5::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2.5 for RHEL 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.6.3-1.el9ap\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"python3.12-pyasn1\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2.5::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2.5 for RHEL 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:4.6.29-2.el9ap\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"automation-controller\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2.6::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2.6 for RHEL 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.6.3-1.el9ap\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"python3.12-pyasn1\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2.6::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2.6 for RHEL 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:4.7.12-1.el9ap\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"automation-controller\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10.1\", \"cpe:/o:redhat:enterprise_linux:10.2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:4.16.0-13.el10_1.4\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"0:4.16.0-21.el10_2.1\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"fence-agents\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux_eus:10.0\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10.0 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:4.16.0-5.el10_0.9\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"fence-agents\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:4.2.1-129.el8_10.25\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"fence-agents\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:8::highavailability\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:4.9.0-54.el8_10.33\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"resource-agents\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_aus:8.4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:4.2.1-65.el8_4.28\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"fence-agents\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_aus:8.4::highavailability\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:4.1.1-90.el8_4.25\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"resource-agents\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_eus_long_life:8.4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:4.2.1-65.el8_4.28\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"fence-agents\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_eus_long_life:8.4::highavailability\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:4.1.1-90.el8_4.25\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"resource-agents\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_aus:8.6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:4.2.1-89.el8_6.22\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"fence-agents\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_tus:8.6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.6 Telecommunications Update Service\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:4.2.1-89.el8_6.22\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"fence-agents\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_tus:8.6::highavailability\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.6 Telecommunications Update Service\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:4.9.0-16.el8_6.22\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"resource-agents\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_e4s:8.6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:4.2.1-89.el8_6.22\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"fence-agents\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_e4s:8.6::highavailability\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:4.9.0-16.el8_6.22\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"resource-agents\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_tus:8.8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.8 Telecommunications Update Service\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:4.2.1-112.el8_8.17\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"fence-agents\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_tus:8.8::highavailability\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.8 Telecommunications Update Service\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:4.9.0-40.el8_8.19\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"resource-agents\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_e4s:8.8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:4.2.1-112.el8_8.17\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"fence-agents\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_e4s:8.8::highavailability\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:4.9.0-40.el8_8.19\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"resource-agents\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:4.10.0-110.el9_8.2\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"0:4.10.0-98.el9_7.13\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"fence-agents\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_e4s:9.2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:4.10.0-43.el9_2.22\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"fence-agents\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_e4s:9.4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:4.10.0-62.el9_4.25\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"fence-agents\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_eus:9.6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.6 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:4.10.0-86.el9_6.17\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"fence-agents\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ai_inference_server:3.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat AI Inference Server 3.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778244531\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhaiis/vllm-rocm-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2.5::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2.5\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1777398315\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"ansible-automation-platform-25/ee-supported-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2.5::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2.5\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1777403872\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"ansible-automation-platform-25/lightspeed-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2.5::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2.5\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1777402264\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"ansible-automation-platform-25/platform-resource-runner-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2.6::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2.6\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1777296732\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"ansible-automation-platform-26/eda-controller-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2.6::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2.6\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1777311120\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"ansible-automation-platform-26/gateway-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2.6::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2.6\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1777387242\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"ansible-automation-platform-26/lightspeed-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2.6::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2.6\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1774417022\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"ansible-automation-platform-26/lightspeed-chatbot-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux_ai:3.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AI 3.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778677745\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhelai3/bootc-azure-rocm-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux_ai:3.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AI 3.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778666124\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhelai3/bootc-rocm-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai:2.25::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI 2.25\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1776343111\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhoai/odh-kserve-storage-initializer-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai:3.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI 3.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1778263407\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhoai/odh-kserve-storage-initializer-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai:3.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI 3.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782471672\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai:3.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI 3.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782471731\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhoai/odh-pipeline-runtime-pytorch-cuda-py312-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai:3.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI 3.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782471849\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhoai/odh-pipeline-runtime-pytorch-rocm-py312-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai:3.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI 3.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782471734\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhoai/odh-pipeline-runtime-tensorflow-cuda-py312-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai:3.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI 3.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782471879\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhoai/odh-pipeline-runtime-tensorflow-rocm-py312-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai:3.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI 3.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782472374\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhoai/odh-trustyai-garak-lls-provider-dsp-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai:3.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI 3.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782471606\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhoai/odh-trustyai-nemo-guardrails-server-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai:3.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI 3.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782471796\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai:3.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI 3.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782471661\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhoai/odh-workbench-jupyter-datascience-cpu-py312-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai:3.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI 3.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782471753\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhoai/odh-workbench-jupyter-pytorch-cuda-py312-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai:3.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI 3.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782471740\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhoai/odh-workbench-jupyter-pytorch-llmcompressor-cuda-py312-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai:3.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI 3.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782471834\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhoai/odh-workbench-jupyter-pytorch-rocm-py312-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai:3.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI 3.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782471730\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhoai/odh-workbench-jupyter-tensorflow-cuda-py312-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai:3.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI 3.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782471835\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhoai/odh-workbench-jupyter-tensorflow-rocm-py312-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai:3.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI 3.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782471697\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhoai/odh-workbench-jupyter-trustyai-cpu-py312-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:stf:1.5::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenStack 1.5\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1777452540\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"stf/prometheus-webhook-snmp-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:stf:1.5::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenStack 1.5\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1777407251\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"stf/service-telemetry-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:stf:1.5::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenStack 1.5\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1777436150\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"stf/smart-gateway-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:quay:3.10::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Quay 3.10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1775169155\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"quay/quay-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:quay:3.12::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Quay 3.12\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1775253092\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"quay/quay-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:quay:3.15::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Quay 3.15\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1775169219\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"quay/quay-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:quay:3.16::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Quay 3.16\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1779204086\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"quay/quay-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:quay:3.9::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Quay 3.9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1775169218\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"quay/quay-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:trusted_artifact_signer:1.4::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Trusted Artifact Signer 1.4\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1775815407\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhtas/model-transparency-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhmt:1\"], \"vendor\": \"Red Hat\", \"product\": \"Migration Toolkit for Containers\", \"packageName\": \"rhmtc/openshift-migration-hook-runner-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhmt:1\"], \"vendor\": \"Red Hat\", \"product\": \"Migration Toolkit for Containers\", \"packageName\": \"rhmtc/openshift-migration-rhel8-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:migration_toolkit_virtualization:2\"], \"vendor\": \"Red Hat\", \"product\": \"Migration Toolkit for Virtualization\", \"packageName\": \"migration-toolkit-virtualization/mtv-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:migration_toolkit_virtualization:2\"], \"vendor\": \"Red Hat\", \"product\": \"Migration Toolkit for Virtualization\", \"packageName\": \"mtv-candidate/mtv-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_lightspeed\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Lightspeed\", \"packageName\": \"openshift-lightspeed/lightspeed-service-api-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_lightspeed\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Lightspeed\", \"packageName\": \"openshift-lightspeed/lightspeed-to-dataverse-exporter-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Service Mesh 3\", \"packageName\": \"openshift-service-mesh/kiali-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:ai_inference_server:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat AI Inference Server\", \"packageName\": \"rhaiis/vllm-tpu-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"ansible-automation-platform-24/ee-minimal-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"ansible-automation-platform-24/ee-minimal-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"ansible-automation-platform-24/ee-supported-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"ansible-automation-platform-25/ee-minimal-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"ansible-automation-platform-25/ee-supported-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"ansible-automation-platform-25/lightspeed-chatbot-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"ansible-automation-platform-26/controller-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"ansible-automation-platform-26/controller-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"ansible-automation-platform-26/eda-controller-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"ansible-automation-platform-26/ee-supported-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"ansible-automation-platform-26/gateway-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"ansible-automation-platform-26/hub-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"ansible-automation-platform-26/hub-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"ansible-automation-platform-26/lightspeed-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"ansible-automation-platform-26/platform-resource-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-feature-server-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-kserve-agent-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-kserve-controller-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-kserve-router-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-llama-stack-core-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-mlflow-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-ml-pipelines-runtime-generic-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-modelmesh-runtime-adapter-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-pipeline-runtime-minimal-cpu-py312-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-pipeline-runtime-pytorch-llmcompressor-cuda-py312-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-training-cuda128-torch29-py312-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-workbench-jupyter-minimal-cpu-py312-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-workbench-jupyter-minimal-cuda-py312-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-workbench-jupyter-minimal-rocm-py312-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-ansible-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-ansible-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ztp-site-generate-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openstack:18.0\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenStack Platform 18.0\", \"packageName\": \"rhoso-operators/ee-openstack-ansible-ee-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:satellite:6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Satellite 6\", \"packageName\": \"satellite/iop-advisor-engine-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:satellite:6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Satellite 6\", \"packageName\": \"satellite/iop-insights-engine-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:trusted_artifact_signer:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Trusted Artifact Signer\", \"packageName\": \"rhtas/segment-reporting-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}], \"timeline\": [{\"lang\": \"en\", \"time\": \"2026-03-18T04:02:45.401Z\", \"value\": \"Reported to Red Hat.\"}, {\"lang\": \"en\", \"time\": \"2026-03-18T02:29:45.857Z\", \"value\": \"Made public.\"}], \"solutions\": [{\"lang\": \"en\", \"value\": \"RHSA-2026:24761: Red Hat Ansible Automation Platform 2.5 for RHEL 8, Red Hat Ansible Automation Platform 2.5 for RHEL 9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:13512: Red Hat Ansible Automation Platform 2.5 for RHEL 8, Red Hat Ansible Automation Platform 2.5 for RHEL 9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:24762: Red Hat Ansible Automation Platform 2.6 for RHEL 9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:13508: Red Hat Ansible Automation Platform 2.6 for RHEL 9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:17083: Red Hat Enterprise Linux AppStream EUS (v. 10.0)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:13916: Red Hat Enterprise Linux AppStream (v. 10)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:19138: Red Hat Enterprise Linux AppStream (v. 10)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:12176: Red Hat Enterprise Linux AppStream (v. 8), Red Hat Enterprise Linux HighAvailability (v. 8), Red Hat Enterprise Linux ResilientStorage (v. 8)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:22135: Red Hat Enterprise Linux AppStream AUS (v.8.4), Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4), Red Hat Enterprise Linux High Availability AUS (v.8.4), Red Hat Enterprise Linux HighAvailability EUS EXTENSION (v.8.4)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:22134: Red Hat Enterprise Linux AppStream AUS (v.8.6), Red Hat Enterprise Linux AppStream E4S (v.8.6), Red Hat Enterprise Linux AppStream TUS (v.8.6), Red Hat Enterprise Linux High Availability E4S (v.8.6), Red Hat Enterprise Linux High Availability TUS (v.8.6)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:20588: Red Hat Enterprise Linux AppStream E4S (v.8.8), Red Hat Enterprise Linux AppStream TUS (v.8.8), Red Hat Enterprise Linux High Availability E4S (v.8.8), Red Hat Enterprise Linux High Availability TUS (v.8.8)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:22987: Red Hat Enterprise Linux AppStream E4S (v.9.2), Red Hat Enterprise Linux High Availability E4S (v.9.2), Red Hat Enterprise Linux Resilient Storage E4S (v.9.2)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:22969: Red Hat Enterprise Linux AppStream E4S (v.9.4), Red Hat Enterprise Linux High Availability E4S (v.9.4), Red Hat Enterprise Linux Resilient Storage E4S (v.9.4)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:22970: Red Hat Enterprise Linux AppStream EUS (v.9.6)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:13917: Red Hat Enterprise Linux AppStream (v. 9)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:19355: Red Hat Enterprise Linux AppStream (v. 9)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:13902: Red Hat Enterprise Linux HighAvailability (v. 8), Red Hat Enterprise Linux ResilientStorage (v. 8)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:22133: Red Hat Enterprise Linux High Availability AUS (v.8.4), Red Hat Enterprise Linux HighAvailability EUS EXTENSION (v.8.4)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:22132: Red Hat Enterprise Linux High Availability E4S (v.8.6), Red Hat Enterprise Linux High Availability TUS (v.8.6)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:22131: Red Hat Enterprise Linux High Availability E4S (v.8.8), Red Hat Enterprise Linux High Availability TUS (v.8.8)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:16009: Red Hat AI Inference Server 3.3\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:13553: Red Hat Ansible Automation Platform 2.5\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:13545: Red Hat Ansible Automation Platform 2.6\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:6309: Red Hat Ansible Automation Platform 2.6\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:17611: Red Hat Enterprise Linux AI 3.3\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:10184: Red Hat OpenShift AI 2.25\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:19712: Red Hat OpenShift AI 3.3\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:37275: Red Hat OpenShift AI 3.3\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:14020: Red Hat OpenStack 1.5\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:6912: Red Hat Quay 3.10\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:6720: Red Hat Quay 3.12\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:6568: Red Hat Quay 3.15\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:19375: Red Hat Quay 3.16\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:6926: Red Hat Quay 3.9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:8437: Red Hat Trusted Artifact Signer 1.4\"}], \"x_adpType\": \"supplier\", \"datePublic\": \"2026-03-18T02:29:45.857Z\", \"references\": [{\"url\": \"https://access.redhat.com/security/cve/CVE-2026-30922\", \"tags\": [\"vdb-entry\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://bugzilla.redhat.com/show_bug.cgi?id=2448553\", \"name\": \"RHBZ#2448553\", \"tags\": [\"issue-tracking\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-30922.json\", \"tags\": [\"x_sadp-csaf-vex\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:24761\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:13512\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:24762\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:13508\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:17083\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:13916\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:19138\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:12176\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:22135\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:22134\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:20588\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:22987\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:22969\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:22970\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:13917\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:19355\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:13902\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:22133\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:22132\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:22131\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:16009\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:13553\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:13545\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:6309\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:17611\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:10184\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:19712\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:37275\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:14020\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:6912\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:6720\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:6568\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:19375\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:6926\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:8437\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}], \"workarounds\": [{\"lang\": \"en\", \"value\": \"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.\"}], \"x_generator\": {\"engine\": \"sadp-cli 1.0.0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"An unbounded recursion flaw has been discovered in the pypi pyasn1 library. This uncontrolled recursion occurs when decoding ASN.1 data with deeply nested structures. An attacker can supply a crafted payload containing nested SEQUENCE (0x30) or SET (0x31) tags with Indefinite Length (0x80) markers. This forces the decoder to recursively call itself until the Python interpreter crashes with a RecursionError or consumes all available memory (OOM), crashing the host application.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-835\", \"description\": \"Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)\"}]}], \"providerMetadata\": {\"orgId\": \"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\", \"shortName\": \"redhat-SADP\", \"dateUpdated\": \"2026-07-17T12:04:39.985Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2026-30922\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"poc\"}, {\"Automatable\": \"yes\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2026-03-18T20:16:18.738732Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2026-03-18T20:17:44.631Z\"}}], \"cna\": {\"title\": \"pyasn1 Vulnerable to Denial of Service via Unbounded Recursion\", \"source\": {\"advisory\": \"GHSA-jr27-m4p2-rc6r\", \"discovery\": \"UNKNOWN\"}, \"metrics\": [{\"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 7.5, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\", \"integrityImpact\": \"NONE\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"NONE\"}}], \"affected\": [{\"vendor\": \"pyasn1\", \"product\": \"pyasn1\", \"versions\": [{\"status\": \"affected\", \"version\": \"\u003c 0.6.3\"}]}], \"references\": [{\"url\": \"https://github.com/pyasn1/pyasn1/security/advisories/GHSA-jr27-m4p2-rc6r\", \"name\": \"https://github.com/pyasn1/pyasn1/security/advisories/GHSA-jr27-m4p2-rc6r\", \"tags\": [\"x_refsource_CONFIRM\"]}, {\"url\": \"https://github.com/pyasn1/pyasn1/commit/25ad481c19fdb006e20485ef3fc2e5b3eff30ef0\", \"name\": \"https://github.com/pyasn1/pyasn1/commit/25ad481c19fdb006e20485ef3fc2e5b3eff30ef0\", \"tags\": [\"x_refsource_MISC\"]}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.3, the `pyasn1` library is vulnerable to a Denial of Service (DoS) attack caused by uncontrolled recursion when decoding ASN.1 data with deeply nested structures. An attacker can supply a crafted payload containing thousands of nested `SEQUENCE` (`0x30`) or `SET` (`0x31`) tags with \\\"Indefinite Length\\\" (`0x80`) markers. This forces the decoder to recursively call itself until the Python interpreter crashes with a `RecursionError` or consumes all available memory (OOM), crashing the host application. This is a distinct vulnerability from CVE-2026-23490 (which addressed integer overflows in OID decoding). The fix for CVE-2026-23490 (`MAX_OID_ARC_CONTINUATION_OCTETS`) does not mitigate this recursion issue. Version 0.6.3 fixes this specific issue.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-674\", \"description\": \"CWE-674: Uncontrolled Recursion\"}]}], \"providerMetadata\": {\"orgId\": \"a0819718-46f1-4df5-94e2-005712e83aaa\", \"shortName\": \"GitHub_M\", \"dateUpdated\": \"2026-03-18T02:29:45.857Z\"}}}",
"cveMetadata": "{\"cveId\": \"CVE-2026-30922\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-07-17T12:04:39.985Z\", \"dateReserved\": \"2026-03-07T16:40:05.884Z\", \"assignerOrgId\": \"a0819718-46f1-4df5-94e2-005712e83aaa\", \"datePublished\": \"2026-03-18T02:29:45.857Z\", \"assignerShortName\": \"GitHub_M\"}",
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
}
}
RHSA-2026:13902
Vulnerability from csaf_redhat - Published: 2026-05-06 04:38 - Updated: 2026-07-20 04:36Summary
Red Hat Security Advisory: resource-agents security update
Severity
Important
Notes
Topic: An update for resource-agents is now available for Red Hat Enterprise Linux 8.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: The resource-agents packages provide the Pacemaker and RGManager service managers with a set of scripts. These scripts interface with several services to allow operating in a high-availability (HA) environment.
Security Fix(es):
* pyasn1: pyasn1 Vulnerable to Denial of Service via Unbounded Recursion (CVE-2026-30922)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
An unbounded recursion flaw has been discovered in the pypi pyasn1 library. This uncontrolled recursion occurs when decoding ASN.1 data with deeply nested structures. An attacker can supply a crafted payload containing nested SEQUENCE (0x30) or SET (0x31) tags with Indefinite Length (0x80) markers. This forces the decoder to recursively call itself until the Python interpreter crashes with a RecursionError or consumes all available memory (OOM), crashing the host application.
7.5 (High)
Affected products
Fixed
36 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: HighAvailability-8.10.0.Z.MAIN.EUS:resource-agents-0:4.9.0-54.el8_10.33.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: HighAvailability-8.10.0.Z.MAIN.EUS:resource-agents-0:4.9.0-54.el8_10.33.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: HighAvailability-8.10.0.Z.MAIN.EUS:resource-agents-0:4.9.0-54.el8_10.33.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: HighAvailability-8.10.0.Z.MAIN.EUS:resource-agents-0:4.9.0-54.el8_10.33.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: HighAvailability-8.10.0.Z.MAIN.EUS:resource-agents-0:4.9.0-54.el8_10.33.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: HighAvailability-8.10.0.Z.MAIN.EUS:resource-agents-aliyun-0:4.9.0-54.el8_10.33.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: HighAvailability-8.10.0.Z.MAIN.EUS:resource-agents-aliyun-debuginfo-0:4.9.0-54.el8_10.33.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: HighAvailability-8.10.0.Z.MAIN.EUS:resource-agents-debuginfo-0:4.9.0-54.el8_10.33.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: HighAvailability-8.10.0.Z.MAIN.EUS:resource-agents-debuginfo-0:4.9.0-54.el8_10.33.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: HighAvailability-8.10.0.Z.MAIN.EUS:resource-agents-debuginfo-0:4.9.0-54.el8_10.33.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: HighAvailability-8.10.0.Z.MAIN.EUS:resource-agents-debuginfo-0:4.9.0-54.el8_10.33.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: HighAvailability-8.10.0.Z.MAIN.EUS:resource-agents-debugsource-0:4.9.0-54.el8_10.33.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: HighAvailability-8.10.0.Z.MAIN.EUS:resource-agents-debugsource-0:4.9.0-54.el8_10.33.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: HighAvailability-8.10.0.Z.MAIN.EUS:resource-agents-debugsource-0:4.9.0-54.el8_10.33.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: HighAvailability-8.10.0.Z.MAIN.EUS:resource-agents-debugsource-0:4.9.0-54.el8_10.33.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: HighAvailability-8.10.0.Z.MAIN.EUS:resource-agents-gcp-0:4.9.0-54.el8_10.33.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: HighAvailability-8.10.0.Z.MAIN.EUS:resource-agents-paf-0:4.9.0-54.el8_10.33.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: HighAvailability-8.10.0.Z.MAIN.EUS:resource-agents-paf-0:4.9.0-54.el8_10.33.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: HighAvailability-8.10.0.Z.MAIN.EUS:resource-agents-paf-0:4.9.0-54.el8_10.33.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: HighAvailability-8.10.0.Z.MAIN.EUS:resource-agents-paf-0:4.9.0-54.el8_10.33.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: ResilientStorage-8.10.0.Z.MAIN.EUS:resource-agents-0:4.9.0-54.el8_10.33.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: ResilientStorage-8.10.0.Z.MAIN.EUS:resource-agents-0:4.9.0-54.el8_10.33.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: ResilientStorage-8.10.0.Z.MAIN.EUS:resource-agents-0:4.9.0-54.el8_10.33.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: ResilientStorage-8.10.0.Z.MAIN.EUS:resource-agents-0:4.9.0-54.el8_10.33.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: ResilientStorage-8.10.0.Z.MAIN.EUS:resource-agents-aliyun-0:4.9.0-54.el8_10.33.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: ResilientStorage-8.10.0.Z.MAIN.EUS:resource-agents-aliyun-debuginfo-0:4.9.0-54.el8_10.33.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: ResilientStorage-8.10.0.Z.MAIN.EUS:resource-agents-debuginfo-0:4.9.0-54.el8_10.33.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: ResilientStorage-8.10.0.Z.MAIN.EUS:resource-agents-debuginfo-0:4.9.0-54.el8_10.33.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: ResilientStorage-8.10.0.Z.MAIN.EUS:resource-agents-debuginfo-0:4.9.0-54.el8_10.33.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: ResilientStorage-8.10.0.Z.MAIN.EUS:resource-agents-debugsource-0:4.9.0-54.el8_10.33.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: ResilientStorage-8.10.0.Z.MAIN.EUS:resource-agents-debugsource-0:4.9.0-54.el8_10.33.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: ResilientStorage-8.10.0.Z.MAIN.EUS:resource-agents-debugsource-0:4.9.0-54.el8_10.33.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: ResilientStorage-8.10.0.Z.MAIN.EUS:resource-agents-gcp-0:4.9.0-54.el8_10.33.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: ResilientStorage-8.10.0.Z.MAIN.EUS:resource-agents-paf-0:4.9.0-54.el8_10.33.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: ResilientStorage-8.10.0.Z.MAIN.EUS:resource-agents-paf-0:4.9.0-54.el8_10.33.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: ResilientStorage-8.10.0.Z.MAIN.EUS:resource-agents-paf-0:4.9.0-54.el8_10.33.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
References
10 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for resource-agents is now available for Red Hat Enterprise Linux 8.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The resource-agents packages provide the Pacemaker and RGManager service managers with a set of scripts. These scripts interface with several services to allow operating in a high-availability (HA) environment.\n\nSecurity Fix(es):\n\n* pyasn1: pyasn1 Vulnerable to Denial of Service via Unbounded Recursion (CVE-2026-30922)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:13902",
"url": "https://access.redhat.com/errata/RHSA-2026:13902"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2448553",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2448553"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_13902.json"
}
],
"title": "Red Hat Security Advisory: resource-agents security update",
"tracking": {
"current_release_date": "2026-07-20T04:36:53+00:00",
"generator": {
"date": "2026-07-20T04:36:53+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.7"
}
},
"id": "RHSA-2026:13902",
"initial_release_date": "2026-05-06T04:38:55+00:00",
"revision_history": [
{
"date": "2026-05-06T04:38:55+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-05-06T04:38:55+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-07-20T04:36:53+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux HighAvailability (v. 8)",
"product": {
"name": "Red Hat Enterprise Linux HighAvailability (v. 8)",
"product_id": "HighAvailability-8.10.0.Z.MAIN.EUS",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:enterprise_linux:8::highavailability"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux ResilientStorage (v. 8)",
"product": {
"name": "Red Hat Enterprise Linux ResilientStorage (v. 8)",
"product_id": "ResilientStorage-8.10.0.Z.MAIN.EUS",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:enterprise_linux:8::resilientstorage"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "resource-agents-0:4.9.0-54.el8_10.33.src",
"product": {
"name": "resource-agents-0:4.9.0-54.el8_10.33.src",
"product_id": "resource-agents-0:4.9.0-54.el8_10.33.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/resource-agents@4.9.0-54.el8_10.33?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "resource-agents-0:4.9.0-54.el8_10.33.aarch64",
"product": {
"name": "resource-agents-0:4.9.0-54.el8_10.33.aarch64",
"product_id": "resource-agents-0:4.9.0-54.el8_10.33.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/resource-agents@4.9.0-54.el8_10.33?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "resource-agents-paf-0:4.9.0-54.el8_10.33.aarch64",
"product": {
"name": "resource-agents-paf-0:4.9.0-54.el8_10.33.aarch64",
"product_id": "resource-agents-paf-0:4.9.0-54.el8_10.33.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/resource-agents-paf@4.9.0-54.el8_10.33?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "resource-agents-debugsource-0:4.9.0-54.el8_10.33.aarch64",
"product": {
"name": "resource-agents-debugsource-0:4.9.0-54.el8_10.33.aarch64",
"product_id": "resource-agents-debugsource-0:4.9.0-54.el8_10.33.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/resource-agents-debugsource@4.9.0-54.el8_10.33?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "resource-agents-debuginfo-0:4.9.0-54.el8_10.33.aarch64",
"product": {
"name": "resource-agents-debuginfo-0:4.9.0-54.el8_10.33.aarch64",
"product_id": "resource-agents-debuginfo-0:4.9.0-54.el8_10.33.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/resource-agents-debuginfo@4.9.0-54.el8_10.33?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "resource-agents-0:4.9.0-54.el8_10.33.ppc64le",
"product": {
"name": "resource-agents-0:4.9.0-54.el8_10.33.ppc64le",
"product_id": "resource-agents-0:4.9.0-54.el8_10.33.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/resource-agents@4.9.0-54.el8_10.33?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "resource-agents-paf-0:4.9.0-54.el8_10.33.ppc64le",
"product": {
"name": "resource-agents-paf-0:4.9.0-54.el8_10.33.ppc64le",
"product_id": "resource-agents-paf-0:4.9.0-54.el8_10.33.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/resource-agents-paf@4.9.0-54.el8_10.33?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "resource-agents-debugsource-0:4.9.0-54.el8_10.33.ppc64le",
"product": {
"name": "resource-agents-debugsource-0:4.9.0-54.el8_10.33.ppc64le",
"product_id": "resource-agents-debugsource-0:4.9.0-54.el8_10.33.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/resource-agents-debugsource@4.9.0-54.el8_10.33?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "resource-agents-debuginfo-0:4.9.0-54.el8_10.33.ppc64le",
"product": {
"name": "resource-agents-debuginfo-0:4.9.0-54.el8_10.33.ppc64le",
"product_id": "resource-agents-debuginfo-0:4.9.0-54.el8_10.33.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/resource-agents-debuginfo@4.9.0-54.el8_10.33?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "resource-agents-0:4.9.0-54.el8_10.33.x86_64",
"product": {
"name": "resource-agents-0:4.9.0-54.el8_10.33.x86_64",
"product_id": "resource-agents-0:4.9.0-54.el8_10.33.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/resource-agents@4.9.0-54.el8_10.33?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "resource-agents-aliyun-0:4.9.0-54.el8_10.33.x86_64",
"product": {
"name": "resource-agents-aliyun-0:4.9.0-54.el8_10.33.x86_64",
"product_id": "resource-agents-aliyun-0:4.9.0-54.el8_10.33.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/resource-agents-aliyun@4.9.0-54.el8_10.33?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "resource-agents-gcp-0:4.9.0-54.el8_10.33.x86_64",
"product": {
"name": "resource-agents-gcp-0:4.9.0-54.el8_10.33.x86_64",
"product_id": "resource-agents-gcp-0:4.9.0-54.el8_10.33.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/resource-agents-gcp@4.9.0-54.el8_10.33?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "resource-agents-paf-0:4.9.0-54.el8_10.33.x86_64",
"product": {
"name": "resource-agents-paf-0:4.9.0-54.el8_10.33.x86_64",
"product_id": "resource-agents-paf-0:4.9.0-54.el8_10.33.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/resource-agents-paf@4.9.0-54.el8_10.33?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "resource-agents-debugsource-0:4.9.0-54.el8_10.33.x86_64",
"product": {
"name": "resource-agents-debugsource-0:4.9.0-54.el8_10.33.x86_64",
"product_id": "resource-agents-debugsource-0:4.9.0-54.el8_10.33.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/resource-agents-debugsource@4.9.0-54.el8_10.33?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "resource-agents-aliyun-debuginfo-0:4.9.0-54.el8_10.33.x86_64",
"product": {
"name": "resource-agents-aliyun-debuginfo-0:4.9.0-54.el8_10.33.x86_64",
"product_id": "resource-agents-aliyun-debuginfo-0:4.9.0-54.el8_10.33.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/resource-agents-aliyun-debuginfo@4.9.0-54.el8_10.33?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "resource-agents-debuginfo-0:4.9.0-54.el8_10.33.x86_64",
"product": {
"name": "resource-agents-debuginfo-0:4.9.0-54.el8_10.33.x86_64",
"product_id": "resource-agents-debuginfo-0:4.9.0-54.el8_10.33.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/resource-agents-debuginfo@4.9.0-54.el8_10.33?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "resource-agents-0:4.9.0-54.el8_10.33.s390x",
"product": {
"name": "resource-agents-0:4.9.0-54.el8_10.33.s390x",
"product_id": "resource-agents-0:4.9.0-54.el8_10.33.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/resource-agents@4.9.0-54.el8_10.33?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "resource-agents-paf-0:4.9.0-54.el8_10.33.s390x",
"product": {
"name": "resource-agents-paf-0:4.9.0-54.el8_10.33.s390x",
"product_id": "resource-agents-paf-0:4.9.0-54.el8_10.33.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/resource-agents-paf@4.9.0-54.el8_10.33?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "resource-agents-debugsource-0:4.9.0-54.el8_10.33.s390x",
"product": {
"name": "resource-agents-debugsource-0:4.9.0-54.el8_10.33.s390x",
"product_id": "resource-agents-debugsource-0:4.9.0-54.el8_10.33.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/resource-agents-debugsource@4.9.0-54.el8_10.33?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "resource-agents-debuginfo-0:4.9.0-54.el8_10.33.s390x",
"product": {
"name": "resource-agents-debuginfo-0:4.9.0-54.el8_10.33.s390x",
"product_id": "resource-agents-debuginfo-0:4.9.0-54.el8_10.33.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/resource-agents-debuginfo@4.9.0-54.el8_10.33?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "resource-agents-0:4.9.0-54.el8_10.33.aarch64 as a component of Red Hat Enterprise Linux HighAvailability (v. 8)",
"product_id": "HighAvailability-8.10.0.Z.MAIN.EUS:resource-agents-0:4.9.0-54.el8_10.33.aarch64"
},
"product_reference": "resource-agents-0:4.9.0-54.el8_10.33.aarch64",
"relates_to_product_reference": "HighAvailability-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "resource-agents-0:4.9.0-54.el8_10.33.ppc64le as a component of Red Hat Enterprise Linux HighAvailability (v. 8)",
"product_id": "HighAvailability-8.10.0.Z.MAIN.EUS:resource-agents-0:4.9.0-54.el8_10.33.ppc64le"
},
"product_reference": "resource-agents-0:4.9.0-54.el8_10.33.ppc64le",
"relates_to_product_reference": "HighAvailability-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "resource-agents-0:4.9.0-54.el8_10.33.s390x as a component of Red Hat Enterprise Linux HighAvailability (v. 8)",
"product_id": "HighAvailability-8.10.0.Z.MAIN.EUS:resource-agents-0:4.9.0-54.el8_10.33.s390x"
},
"product_reference": "resource-agents-0:4.9.0-54.el8_10.33.s390x",
"relates_to_product_reference": "HighAvailability-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "resource-agents-0:4.9.0-54.el8_10.33.src as a component of Red Hat Enterprise Linux HighAvailability (v. 8)",
"product_id": "HighAvailability-8.10.0.Z.MAIN.EUS:resource-agents-0:4.9.0-54.el8_10.33.src"
},
"product_reference": "resource-agents-0:4.9.0-54.el8_10.33.src",
"relates_to_product_reference": "HighAvailability-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "resource-agents-0:4.9.0-54.el8_10.33.x86_64 as a component of Red Hat Enterprise Linux HighAvailability (v. 8)",
"product_id": "HighAvailability-8.10.0.Z.MAIN.EUS:resource-agents-0:4.9.0-54.el8_10.33.x86_64"
},
"product_reference": "resource-agents-0:4.9.0-54.el8_10.33.x86_64",
"relates_to_product_reference": "HighAvailability-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "resource-agents-aliyun-0:4.9.0-54.el8_10.33.x86_64 as a component of Red Hat Enterprise Linux HighAvailability (v. 8)",
"product_id": "HighAvailability-8.10.0.Z.MAIN.EUS:resource-agents-aliyun-0:4.9.0-54.el8_10.33.x86_64"
},
"product_reference": "resource-agents-aliyun-0:4.9.0-54.el8_10.33.x86_64",
"relates_to_product_reference": "HighAvailability-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "resource-agents-aliyun-debuginfo-0:4.9.0-54.el8_10.33.x86_64 as a component of Red Hat Enterprise Linux HighAvailability (v. 8)",
"product_id": "HighAvailability-8.10.0.Z.MAIN.EUS:resource-agents-aliyun-debuginfo-0:4.9.0-54.el8_10.33.x86_64"
},
"product_reference": "resource-agents-aliyun-debuginfo-0:4.9.0-54.el8_10.33.x86_64",
"relates_to_product_reference": "HighAvailability-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "resource-agents-debuginfo-0:4.9.0-54.el8_10.33.aarch64 as a component of Red Hat Enterprise Linux HighAvailability (v. 8)",
"product_id": "HighAvailability-8.10.0.Z.MAIN.EUS:resource-agents-debuginfo-0:4.9.0-54.el8_10.33.aarch64"
},
"product_reference": "resource-agents-debuginfo-0:4.9.0-54.el8_10.33.aarch64",
"relates_to_product_reference": "HighAvailability-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "resource-agents-debuginfo-0:4.9.0-54.el8_10.33.ppc64le as a component of Red Hat Enterprise Linux HighAvailability (v. 8)",
"product_id": "HighAvailability-8.10.0.Z.MAIN.EUS:resource-agents-debuginfo-0:4.9.0-54.el8_10.33.ppc64le"
},
"product_reference": "resource-agents-debuginfo-0:4.9.0-54.el8_10.33.ppc64le",
"relates_to_product_reference": "HighAvailability-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "resource-agents-debuginfo-0:4.9.0-54.el8_10.33.s390x as a component of Red Hat Enterprise Linux HighAvailability (v. 8)",
"product_id": "HighAvailability-8.10.0.Z.MAIN.EUS:resource-agents-debuginfo-0:4.9.0-54.el8_10.33.s390x"
},
"product_reference": "resource-agents-debuginfo-0:4.9.0-54.el8_10.33.s390x",
"relates_to_product_reference": "HighAvailability-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "resource-agents-debuginfo-0:4.9.0-54.el8_10.33.x86_64 as a component of Red Hat Enterprise Linux HighAvailability (v. 8)",
"product_id": "HighAvailability-8.10.0.Z.MAIN.EUS:resource-agents-debuginfo-0:4.9.0-54.el8_10.33.x86_64"
},
"product_reference": "resource-agents-debuginfo-0:4.9.0-54.el8_10.33.x86_64",
"relates_to_product_reference": "HighAvailability-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "resource-agents-debugsource-0:4.9.0-54.el8_10.33.aarch64 as a component of Red Hat Enterprise Linux HighAvailability (v. 8)",
"product_id": "HighAvailability-8.10.0.Z.MAIN.EUS:resource-agents-debugsource-0:4.9.0-54.el8_10.33.aarch64"
},
"product_reference": "resource-agents-debugsource-0:4.9.0-54.el8_10.33.aarch64",
"relates_to_product_reference": "HighAvailability-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "resource-agents-debugsource-0:4.9.0-54.el8_10.33.ppc64le as a component of Red Hat Enterprise Linux HighAvailability (v. 8)",
"product_id": "HighAvailability-8.10.0.Z.MAIN.EUS:resource-agents-debugsource-0:4.9.0-54.el8_10.33.ppc64le"
},
"product_reference": "resource-agents-debugsource-0:4.9.0-54.el8_10.33.ppc64le",
"relates_to_product_reference": "HighAvailability-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "resource-agents-debugsource-0:4.9.0-54.el8_10.33.s390x as a component of Red Hat Enterprise Linux HighAvailability (v. 8)",
"product_id": "HighAvailability-8.10.0.Z.MAIN.EUS:resource-agents-debugsource-0:4.9.0-54.el8_10.33.s390x"
},
"product_reference": "resource-agents-debugsource-0:4.9.0-54.el8_10.33.s390x",
"relates_to_product_reference": "HighAvailability-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "resource-agents-debugsource-0:4.9.0-54.el8_10.33.x86_64 as a component of Red Hat Enterprise Linux HighAvailability (v. 8)",
"product_id": "HighAvailability-8.10.0.Z.MAIN.EUS:resource-agents-debugsource-0:4.9.0-54.el8_10.33.x86_64"
},
"product_reference": "resource-agents-debugsource-0:4.9.0-54.el8_10.33.x86_64",
"relates_to_product_reference": "HighAvailability-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "resource-agents-gcp-0:4.9.0-54.el8_10.33.x86_64 as a component of Red Hat Enterprise Linux HighAvailability (v. 8)",
"product_id": "HighAvailability-8.10.0.Z.MAIN.EUS:resource-agents-gcp-0:4.9.0-54.el8_10.33.x86_64"
},
"product_reference": "resource-agents-gcp-0:4.9.0-54.el8_10.33.x86_64",
"relates_to_product_reference": "HighAvailability-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "resource-agents-paf-0:4.9.0-54.el8_10.33.aarch64 as a component of Red Hat Enterprise Linux HighAvailability (v. 8)",
"product_id": "HighAvailability-8.10.0.Z.MAIN.EUS:resource-agents-paf-0:4.9.0-54.el8_10.33.aarch64"
},
"product_reference": "resource-agents-paf-0:4.9.0-54.el8_10.33.aarch64",
"relates_to_product_reference": "HighAvailability-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "resource-agents-paf-0:4.9.0-54.el8_10.33.ppc64le as a component of Red Hat Enterprise Linux HighAvailability (v. 8)",
"product_id": "HighAvailability-8.10.0.Z.MAIN.EUS:resource-agents-paf-0:4.9.0-54.el8_10.33.ppc64le"
},
"product_reference": "resource-agents-paf-0:4.9.0-54.el8_10.33.ppc64le",
"relates_to_product_reference": "HighAvailability-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "resource-agents-paf-0:4.9.0-54.el8_10.33.s390x as a component of Red Hat Enterprise Linux HighAvailability (v. 8)",
"product_id": "HighAvailability-8.10.0.Z.MAIN.EUS:resource-agents-paf-0:4.9.0-54.el8_10.33.s390x"
},
"product_reference": "resource-agents-paf-0:4.9.0-54.el8_10.33.s390x",
"relates_to_product_reference": "HighAvailability-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "resource-agents-paf-0:4.9.0-54.el8_10.33.x86_64 as a component of Red Hat Enterprise Linux HighAvailability (v. 8)",
"product_id": "HighAvailability-8.10.0.Z.MAIN.EUS:resource-agents-paf-0:4.9.0-54.el8_10.33.x86_64"
},
"product_reference": "resource-agents-paf-0:4.9.0-54.el8_10.33.x86_64",
"relates_to_product_reference": "HighAvailability-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "resource-agents-0:4.9.0-54.el8_10.33.ppc64le as a component of Red Hat Enterprise Linux ResilientStorage (v. 8)",
"product_id": "ResilientStorage-8.10.0.Z.MAIN.EUS:resource-agents-0:4.9.0-54.el8_10.33.ppc64le"
},
"product_reference": "resource-agents-0:4.9.0-54.el8_10.33.ppc64le",
"relates_to_product_reference": "ResilientStorage-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "resource-agents-0:4.9.0-54.el8_10.33.s390x as a component of Red Hat Enterprise Linux ResilientStorage (v. 8)",
"product_id": "ResilientStorage-8.10.0.Z.MAIN.EUS:resource-agents-0:4.9.0-54.el8_10.33.s390x"
},
"product_reference": "resource-agents-0:4.9.0-54.el8_10.33.s390x",
"relates_to_product_reference": "ResilientStorage-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "resource-agents-0:4.9.0-54.el8_10.33.src as a component of Red Hat Enterprise Linux ResilientStorage (v. 8)",
"product_id": "ResilientStorage-8.10.0.Z.MAIN.EUS:resource-agents-0:4.9.0-54.el8_10.33.src"
},
"product_reference": "resource-agents-0:4.9.0-54.el8_10.33.src",
"relates_to_product_reference": "ResilientStorage-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "resource-agents-0:4.9.0-54.el8_10.33.x86_64 as a component of Red Hat Enterprise Linux ResilientStorage (v. 8)",
"product_id": "ResilientStorage-8.10.0.Z.MAIN.EUS:resource-agents-0:4.9.0-54.el8_10.33.x86_64"
},
"product_reference": "resource-agents-0:4.9.0-54.el8_10.33.x86_64",
"relates_to_product_reference": "ResilientStorage-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "resource-agents-aliyun-0:4.9.0-54.el8_10.33.x86_64 as a component of Red Hat Enterprise Linux ResilientStorage (v. 8)",
"product_id": "ResilientStorage-8.10.0.Z.MAIN.EUS:resource-agents-aliyun-0:4.9.0-54.el8_10.33.x86_64"
},
"product_reference": "resource-agents-aliyun-0:4.9.0-54.el8_10.33.x86_64",
"relates_to_product_reference": "ResilientStorage-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "resource-agents-aliyun-debuginfo-0:4.9.0-54.el8_10.33.x86_64 as a component of Red Hat Enterprise Linux ResilientStorage (v. 8)",
"product_id": "ResilientStorage-8.10.0.Z.MAIN.EUS:resource-agents-aliyun-debuginfo-0:4.9.0-54.el8_10.33.x86_64"
},
"product_reference": "resource-agents-aliyun-debuginfo-0:4.9.0-54.el8_10.33.x86_64",
"relates_to_product_reference": "ResilientStorage-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "resource-agents-debuginfo-0:4.9.0-54.el8_10.33.ppc64le as a component of Red Hat Enterprise Linux ResilientStorage (v. 8)",
"product_id": "ResilientStorage-8.10.0.Z.MAIN.EUS:resource-agents-debuginfo-0:4.9.0-54.el8_10.33.ppc64le"
},
"product_reference": "resource-agents-debuginfo-0:4.9.0-54.el8_10.33.ppc64le",
"relates_to_product_reference": "ResilientStorage-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "resource-agents-debuginfo-0:4.9.0-54.el8_10.33.s390x as a component of Red Hat Enterprise Linux ResilientStorage (v. 8)",
"product_id": "ResilientStorage-8.10.0.Z.MAIN.EUS:resource-agents-debuginfo-0:4.9.0-54.el8_10.33.s390x"
},
"product_reference": "resource-agents-debuginfo-0:4.9.0-54.el8_10.33.s390x",
"relates_to_product_reference": "ResilientStorage-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "resource-agents-debuginfo-0:4.9.0-54.el8_10.33.x86_64 as a component of Red Hat Enterprise Linux ResilientStorage (v. 8)",
"product_id": "ResilientStorage-8.10.0.Z.MAIN.EUS:resource-agents-debuginfo-0:4.9.0-54.el8_10.33.x86_64"
},
"product_reference": "resource-agents-debuginfo-0:4.9.0-54.el8_10.33.x86_64",
"relates_to_product_reference": "ResilientStorage-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "resource-agents-debugsource-0:4.9.0-54.el8_10.33.ppc64le as a component of Red Hat Enterprise Linux ResilientStorage (v. 8)",
"product_id": "ResilientStorage-8.10.0.Z.MAIN.EUS:resource-agents-debugsource-0:4.9.0-54.el8_10.33.ppc64le"
},
"product_reference": "resource-agents-debugsource-0:4.9.0-54.el8_10.33.ppc64le",
"relates_to_product_reference": "ResilientStorage-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "resource-agents-debugsource-0:4.9.0-54.el8_10.33.s390x as a component of Red Hat Enterprise Linux ResilientStorage (v. 8)",
"product_id": "ResilientStorage-8.10.0.Z.MAIN.EUS:resource-agents-debugsource-0:4.9.0-54.el8_10.33.s390x"
},
"product_reference": "resource-agents-debugsource-0:4.9.0-54.el8_10.33.s390x",
"relates_to_product_reference": "ResilientStorage-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "resource-agents-debugsource-0:4.9.0-54.el8_10.33.x86_64 as a component of Red Hat Enterprise Linux ResilientStorage (v. 8)",
"product_id": "ResilientStorage-8.10.0.Z.MAIN.EUS:resource-agents-debugsource-0:4.9.0-54.el8_10.33.x86_64"
},
"product_reference": "resource-agents-debugsource-0:4.9.0-54.el8_10.33.x86_64",
"relates_to_product_reference": "ResilientStorage-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "resource-agents-gcp-0:4.9.0-54.el8_10.33.x86_64 as a component of Red Hat Enterprise Linux ResilientStorage (v. 8)",
"product_id": "ResilientStorage-8.10.0.Z.MAIN.EUS:resource-agents-gcp-0:4.9.0-54.el8_10.33.x86_64"
},
"product_reference": "resource-agents-gcp-0:4.9.0-54.el8_10.33.x86_64",
"relates_to_product_reference": "ResilientStorage-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "resource-agents-paf-0:4.9.0-54.el8_10.33.ppc64le as a component of Red Hat Enterprise Linux ResilientStorage (v. 8)",
"product_id": "ResilientStorage-8.10.0.Z.MAIN.EUS:resource-agents-paf-0:4.9.0-54.el8_10.33.ppc64le"
},
"product_reference": "resource-agents-paf-0:4.9.0-54.el8_10.33.ppc64le",
"relates_to_product_reference": "ResilientStorage-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "resource-agents-paf-0:4.9.0-54.el8_10.33.s390x as a component of Red Hat Enterprise Linux ResilientStorage (v. 8)",
"product_id": "ResilientStorage-8.10.0.Z.MAIN.EUS:resource-agents-paf-0:4.9.0-54.el8_10.33.s390x"
},
"product_reference": "resource-agents-paf-0:4.9.0-54.el8_10.33.s390x",
"relates_to_product_reference": "ResilientStorage-8.10.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "resource-agents-paf-0:4.9.0-54.el8_10.33.x86_64 as a component of Red Hat Enterprise Linux ResilientStorage (v. 8)",
"product_id": "ResilientStorage-8.10.0.Z.MAIN.EUS:resource-agents-paf-0:4.9.0-54.el8_10.33.x86_64"
},
"product_reference": "resource-agents-paf-0:4.9.0-54.el8_10.33.x86_64",
"relates_to_product_reference": "ResilientStorage-8.10.0.Z.MAIN.EUS"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-30922",
"cwe": {
"id": "CWE-835",
"name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
},
"discovery_date": "2026-03-18T04:02:45.401296+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2448553"
}
],
"notes": [
{
"category": "description",
"text": "An unbounded recursion flaw has been discovered in the pypi pyasn1 library. This uncontrolled recursion occurs when decoding ASN.1 data with deeply nested structures. An attacker can supply a crafted payload containing nested SEQUENCE (0x30) or SET (0x31) tags with Indefinite Length (0x80) markers. This forces the decoder to recursively call itself until the Python interpreter crashes with a RecursionError or consumes all available memory (OOM), crashing the host application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "pyasn1: pyasn1 Vulnerable to Denial of Service via Unbounded Recursion",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"HighAvailability-8.10.0.Z.MAIN.EUS:resource-agents-0:4.9.0-54.el8_10.33.aarch64",
"HighAvailability-8.10.0.Z.MAIN.EUS:resource-agents-0:4.9.0-54.el8_10.33.ppc64le",
"HighAvailability-8.10.0.Z.MAIN.EUS:resource-agents-0:4.9.0-54.el8_10.33.s390x",
"HighAvailability-8.10.0.Z.MAIN.EUS:resource-agents-0:4.9.0-54.el8_10.33.src",
"HighAvailability-8.10.0.Z.MAIN.EUS:resource-agents-0:4.9.0-54.el8_10.33.x86_64",
"HighAvailability-8.10.0.Z.MAIN.EUS:resource-agents-aliyun-0:4.9.0-54.el8_10.33.x86_64",
"HighAvailability-8.10.0.Z.MAIN.EUS:resource-agents-aliyun-debuginfo-0:4.9.0-54.el8_10.33.x86_64",
"HighAvailability-8.10.0.Z.MAIN.EUS:resource-agents-debuginfo-0:4.9.0-54.el8_10.33.aarch64",
"HighAvailability-8.10.0.Z.MAIN.EUS:resource-agents-debuginfo-0:4.9.0-54.el8_10.33.ppc64le",
"HighAvailability-8.10.0.Z.MAIN.EUS:resource-agents-debuginfo-0:4.9.0-54.el8_10.33.s390x",
"HighAvailability-8.10.0.Z.MAIN.EUS:resource-agents-debuginfo-0:4.9.0-54.el8_10.33.x86_64",
"HighAvailability-8.10.0.Z.MAIN.EUS:resource-agents-debugsource-0:4.9.0-54.el8_10.33.aarch64",
"HighAvailability-8.10.0.Z.MAIN.EUS:resource-agents-debugsource-0:4.9.0-54.el8_10.33.ppc64le",
"HighAvailability-8.10.0.Z.MAIN.EUS:resource-agents-debugsource-0:4.9.0-54.el8_10.33.s390x",
"HighAvailability-8.10.0.Z.MAIN.EUS:resource-agents-debugsource-0:4.9.0-54.el8_10.33.x86_64",
"HighAvailability-8.10.0.Z.MAIN.EUS:resource-agents-gcp-0:4.9.0-54.el8_10.33.x86_64",
"HighAvailability-8.10.0.Z.MAIN.EUS:resource-agents-paf-0:4.9.0-54.el8_10.33.aarch64",
"HighAvailability-8.10.0.Z.MAIN.EUS:resource-agents-paf-0:4.9.0-54.el8_10.33.ppc64le",
"HighAvailability-8.10.0.Z.MAIN.EUS:resource-agents-paf-0:4.9.0-54.el8_10.33.s390x",
"HighAvailability-8.10.0.Z.MAIN.EUS:resource-agents-paf-0:4.9.0-54.el8_10.33.x86_64",
"ResilientStorage-8.10.0.Z.MAIN.EUS:resource-agents-0:4.9.0-54.el8_10.33.ppc64le",
"ResilientStorage-8.10.0.Z.MAIN.EUS:resource-agents-0:4.9.0-54.el8_10.33.s390x",
"ResilientStorage-8.10.0.Z.MAIN.EUS:resource-agents-0:4.9.0-54.el8_10.33.src",
"ResilientStorage-8.10.0.Z.MAIN.EUS:resource-agents-0:4.9.0-54.el8_10.33.x86_64",
"ResilientStorage-8.10.0.Z.MAIN.EUS:resource-agents-aliyun-0:4.9.0-54.el8_10.33.x86_64",
"ResilientStorage-8.10.0.Z.MAIN.EUS:resource-agents-aliyun-debuginfo-0:4.9.0-54.el8_10.33.x86_64",
"ResilientStorage-8.10.0.Z.MAIN.EUS:resource-agents-debuginfo-0:4.9.0-54.el8_10.33.ppc64le",
"ResilientStorage-8.10.0.Z.MAIN.EUS:resource-agents-debuginfo-0:4.9.0-54.el8_10.33.s390x",
"ResilientStorage-8.10.0.Z.MAIN.EUS:resource-agents-debuginfo-0:4.9.0-54.el8_10.33.x86_64",
"ResilientStorage-8.10.0.Z.MAIN.EUS:resource-agents-debugsource-0:4.9.0-54.el8_10.33.ppc64le",
"ResilientStorage-8.10.0.Z.MAIN.EUS:resource-agents-debugsource-0:4.9.0-54.el8_10.33.s390x",
"ResilientStorage-8.10.0.Z.MAIN.EUS:resource-agents-debugsource-0:4.9.0-54.el8_10.33.x86_64",
"ResilientStorage-8.10.0.Z.MAIN.EUS:resource-agents-gcp-0:4.9.0-54.el8_10.33.x86_64",
"ResilientStorage-8.10.0.Z.MAIN.EUS:resource-agents-paf-0:4.9.0-54.el8_10.33.ppc64le",
"ResilientStorage-8.10.0.Z.MAIN.EUS:resource-agents-paf-0:4.9.0-54.el8_10.33.s390x",
"ResilientStorage-8.10.0.Z.MAIN.EUS:resource-agents-paf-0:4.9.0-54.el8_10.33.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-30922"
},
{
"category": "external",
"summary": "RHBZ#2448553",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2448553"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-30922",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-30922"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-30922",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-30922"
},
{
"category": "external",
"summary": "https://github.com/pyasn1/pyasn1/commit/25ad481c19fdb006e20485ef3fc2e5b3eff30ef0",
"url": "https://github.com/pyasn1/pyasn1/commit/25ad481c19fdb006e20485ef3fc2e5b3eff30ef0"
},
{
"category": "external",
"summary": "https://github.com/pyasn1/pyasn1/security/advisories/GHSA-jr27-m4p2-rc6r",
"url": "https://github.com/pyasn1/pyasn1/security/advisories/GHSA-jr27-m4p2-rc6r"
}
],
"release_date": "2026-03-18T02:29:45.857000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-06T04:38:55+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"HighAvailability-8.10.0.Z.MAIN.EUS:resource-agents-0:4.9.0-54.el8_10.33.aarch64",
"HighAvailability-8.10.0.Z.MAIN.EUS:resource-agents-0:4.9.0-54.el8_10.33.ppc64le",
"HighAvailability-8.10.0.Z.MAIN.EUS:resource-agents-0:4.9.0-54.el8_10.33.s390x",
"HighAvailability-8.10.0.Z.MAIN.EUS:resource-agents-0:4.9.0-54.el8_10.33.src",
"HighAvailability-8.10.0.Z.MAIN.EUS:resource-agents-0:4.9.0-54.el8_10.33.x86_64",
"HighAvailability-8.10.0.Z.MAIN.EUS:resource-agents-aliyun-0:4.9.0-54.el8_10.33.x86_64",
"HighAvailability-8.10.0.Z.MAIN.EUS:resource-agents-aliyun-debuginfo-0:4.9.0-54.el8_10.33.x86_64",
"HighAvailability-8.10.0.Z.MAIN.EUS:resource-agents-debuginfo-0:4.9.0-54.el8_10.33.aarch64",
"HighAvailability-8.10.0.Z.MAIN.EUS:resource-agents-debuginfo-0:4.9.0-54.el8_10.33.ppc64le",
"HighAvailability-8.10.0.Z.MAIN.EUS:resource-agents-debuginfo-0:4.9.0-54.el8_10.33.s390x",
"HighAvailability-8.10.0.Z.MAIN.EUS:resource-agents-debuginfo-0:4.9.0-54.el8_10.33.x86_64",
"HighAvailability-8.10.0.Z.MAIN.EUS:resource-agents-debugsource-0:4.9.0-54.el8_10.33.aarch64",
"HighAvailability-8.10.0.Z.MAIN.EUS:resource-agents-debugsource-0:4.9.0-54.el8_10.33.ppc64le",
"HighAvailability-8.10.0.Z.MAIN.EUS:resource-agents-debugsource-0:4.9.0-54.el8_10.33.s390x",
"HighAvailability-8.10.0.Z.MAIN.EUS:resource-agents-debugsource-0:4.9.0-54.el8_10.33.x86_64",
"HighAvailability-8.10.0.Z.MAIN.EUS:resource-agents-gcp-0:4.9.0-54.el8_10.33.x86_64",
"HighAvailability-8.10.0.Z.MAIN.EUS:resource-agents-paf-0:4.9.0-54.el8_10.33.aarch64",
"HighAvailability-8.10.0.Z.MAIN.EUS:resource-agents-paf-0:4.9.0-54.el8_10.33.ppc64le",
"HighAvailability-8.10.0.Z.MAIN.EUS:resource-agents-paf-0:4.9.0-54.el8_10.33.s390x",
"HighAvailability-8.10.0.Z.MAIN.EUS:resource-agents-paf-0:4.9.0-54.el8_10.33.x86_64",
"ResilientStorage-8.10.0.Z.MAIN.EUS:resource-agents-0:4.9.0-54.el8_10.33.ppc64le",
"ResilientStorage-8.10.0.Z.MAIN.EUS:resource-agents-0:4.9.0-54.el8_10.33.s390x",
"ResilientStorage-8.10.0.Z.MAIN.EUS:resource-agents-0:4.9.0-54.el8_10.33.src",
"ResilientStorage-8.10.0.Z.MAIN.EUS:resource-agents-0:4.9.0-54.el8_10.33.x86_64",
"ResilientStorage-8.10.0.Z.MAIN.EUS:resource-agents-aliyun-0:4.9.0-54.el8_10.33.x86_64",
"ResilientStorage-8.10.0.Z.MAIN.EUS:resource-agents-aliyun-debuginfo-0:4.9.0-54.el8_10.33.x86_64",
"ResilientStorage-8.10.0.Z.MAIN.EUS:resource-agents-debuginfo-0:4.9.0-54.el8_10.33.ppc64le",
"ResilientStorage-8.10.0.Z.MAIN.EUS:resource-agents-debuginfo-0:4.9.0-54.el8_10.33.s390x",
"ResilientStorage-8.10.0.Z.MAIN.EUS:resource-agents-debuginfo-0:4.9.0-54.el8_10.33.x86_64",
"ResilientStorage-8.10.0.Z.MAIN.EUS:resource-agents-debugsource-0:4.9.0-54.el8_10.33.ppc64le",
"ResilientStorage-8.10.0.Z.MAIN.EUS:resource-agents-debugsource-0:4.9.0-54.el8_10.33.s390x",
"ResilientStorage-8.10.0.Z.MAIN.EUS:resource-agents-debugsource-0:4.9.0-54.el8_10.33.x86_64",
"ResilientStorage-8.10.0.Z.MAIN.EUS:resource-agents-gcp-0:4.9.0-54.el8_10.33.x86_64",
"ResilientStorage-8.10.0.Z.MAIN.EUS:resource-agents-paf-0:4.9.0-54.el8_10.33.ppc64le",
"ResilientStorage-8.10.0.Z.MAIN.EUS:resource-agents-paf-0:4.9.0-54.el8_10.33.s390x",
"ResilientStorage-8.10.0.Z.MAIN.EUS:resource-agents-paf-0:4.9.0-54.el8_10.33.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:13902"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"HighAvailability-8.10.0.Z.MAIN.EUS:resource-agents-0:4.9.0-54.el8_10.33.aarch64",
"HighAvailability-8.10.0.Z.MAIN.EUS:resource-agents-0:4.9.0-54.el8_10.33.ppc64le",
"HighAvailability-8.10.0.Z.MAIN.EUS:resource-agents-0:4.9.0-54.el8_10.33.s390x",
"HighAvailability-8.10.0.Z.MAIN.EUS:resource-agents-0:4.9.0-54.el8_10.33.src",
"HighAvailability-8.10.0.Z.MAIN.EUS:resource-agents-0:4.9.0-54.el8_10.33.x86_64",
"HighAvailability-8.10.0.Z.MAIN.EUS:resource-agents-aliyun-0:4.9.0-54.el8_10.33.x86_64",
"HighAvailability-8.10.0.Z.MAIN.EUS:resource-agents-aliyun-debuginfo-0:4.9.0-54.el8_10.33.x86_64",
"HighAvailability-8.10.0.Z.MAIN.EUS:resource-agents-debuginfo-0:4.9.0-54.el8_10.33.aarch64",
"HighAvailability-8.10.0.Z.MAIN.EUS:resource-agents-debuginfo-0:4.9.0-54.el8_10.33.ppc64le",
"HighAvailability-8.10.0.Z.MAIN.EUS:resource-agents-debuginfo-0:4.9.0-54.el8_10.33.s390x",
"HighAvailability-8.10.0.Z.MAIN.EUS:resource-agents-debuginfo-0:4.9.0-54.el8_10.33.x86_64",
"HighAvailability-8.10.0.Z.MAIN.EUS:resource-agents-debugsource-0:4.9.0-54.el8_10.33.aarch64",
"HighAvailability-8.10.0.Z.MAIN.EUS:resource-agents-debugsource-0:4.9.0-54.el8_10.33.ppc64le",
"HighAvailability-8.10.0.Z.MAIN.EUS:resource-agents-debugsource-0:4.9.0-54.el8_10.33.s390x",
"HighAvailability-8.10.0.Z.MAIN.EUS:resource-agents-debugsource-0:4.9.0-54.el8_10.33.x86_64",
"HighAvailability-8.10.0.Z.MAIN.EUS:resource-agents-gcp-0:4.9.0-54.el8_10.33.x86_64",
"HighAvailability-8.10.0.Z.MAIN.EUS:resource-agents-paf-0:4.9.0-54.el8_10.33.aarch64",
"HighAvailability-8.10.0.Z.MAIN.EUS:resource-agents-paf-0:4.9.0-54.el8_10.33.ppc64le",
"HighAvailability-8.10.0.Z.MAIN.EUS:resource-agents-paf-0:4.9.0-54.el8_10.33.s390x",
"HighAvailability-8.10.0.Z.MAIN.EUS:resource-agents-paf-0:4.9.0-54.el8_10.33.x86_64",
"ResilientStorage-8.10.0.Z.MAIN.EUS:resource-agents-0:4.9.0-54.el8_10.33.ppc64le",
"ResilientStorage-8.10.0.Z.MAIN.EUS:resource-agents-0:4.9.0-54.el8_10.33.s390x",
"ResilientStorage-8.10.0.Z.MAIN.EUS:resource-agents-0:4.9.0-54.el8_10.33.src",
"ResilientStorage-8.10.0.Z.MAIN.EUS:resource-agents-0:4.9.0-54.el8_10.33.x86_64",
"ResilientStorage-8.10.0.Z.MAIN.EUS:resource-agents-aliyun-0:4.9.0-54.el8_10.33.x86_64",
"ResilientStorage-8.10.0.Z.MAIN.EUS:resource-agents-aliyun-debuginfo-0:4.9.0-54.el8_10.33.x86_64",
"ResilientStorage-8.10.0.Z.MAIN.EUS:resource-agents-debuginfo-0:4.9.0-54.el8_10.33.ppc64le",
"ResilientStorage-8.10.0.Z.MAIN.EUS:resource-agents-debuginfo-0:4.9.0-54.el8_10.33.s390x",
"ResilientStorage-8.10.0.Z.MAIN.EUS:resource-agents-debuginfo-0:4.9.0-54.el8_10.33.x86_64",
"ResilientStorage-8.10.0.Z.MAIN.EUS:resource-agents-debugsource-0:4.9.0-54.el8_10.33.ppc64le",
"ResilientStorage-8.10.0.Z.MAIN.EUS:resource-agents-debugsource-0:4.9.0-54.el8_10.33.s390x",
"ResilientStorage-8.10.0.Z.MAIN.EUS:resource-agents-debugsource-0:4.9.0-54.el8_10.33.x86_64",
"ResilientStorage-8.10.0.Z.MAIN.EUS:resource-agents-gcp-0:4.9.0-54.el8_10.33.x86_64",
"ResilientStorage-8.10.0.Z.MAIN.EUS:resource-agents-paf-0:4.9.0-54.el8_10.33.ppc64le",
"ResilientStorage-8.10.0.Z.MAIN.EUS:resource-agents-paf-0:4.9.0-54.el8_10.33.s390x",
"ResilientStorage-8.10.0.Z.MAIN.EUS:resource-agents-paf-0:4.9.0-54.el8_10.33.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"HighAvailability-8.10.0.Z.MAIN.EUS:resource-agents-0:4.9.0-54.el8_10.33.aarch64",
"HighAvailability-8.10.0.Z.MAIN.EUS:resource-agents-0:4.9.0-54.el8_10.33.ppc64le",
"HighAvailability-8.10.0.Z.MAIN.EUS:resource-agents-0:4.9.0-54.el8_10.33.s390x",
"HighAvailability-8.10.0.Z.MAIN.EUS:resource-agents-0:4.9.0-54.el8_10.33.src",
"HighAvailability-8.10.0.Z.MAIN.EUS:resource-agents-0:4.9.0-54.el8_10.33.x86_64",
"HighAvailability-8.10.0.Z.MAIN.EUS:resource-agents-aliyun-0:4.9.0-54.el8_10.33.x86_64",
"HighAvailability-8.10.0.Z.MAIN.EUS:resource-agents-aliyun-debuginfo-0:4.9.0-54.el8_10.33.x86_64",
"HighAvailability-8.10.0.Z.MAIN.EUS:resource-agents-debuginfo-0:4.9.0-54.el8_10.33.aarch64",
"HighAvailability-8.10.0.Z.MAIN.EUS:resource-agents-debuginfo-0:4.9.0-54.el8_10.33.ppc64le",
"HighAvailability-8.10.0.Z.MAIN.EUS:resource-agents-debuginfo-0:4.9.0-54.el8_10.33.s390x",
"HighAvailability-8.10.0.Z.MAIN.EUS:resource-agents-debuginfo-0:4.9.0-54.el8_10.33.x86_64",
"HighAvailability-8.10.0.Z.MAIN.EUS:resource-agents-debugsource-0:4.9.0-54.el8_10.33.aarch64",
"HighAvailability-8.10.0.Z.MAIN.EUS:resource-agents-debugsource-0:4.9.0-54.el8_10.33.ppc64le",
"HighAvailability-8.10.0.Z.MAIN.EUS:resource-agents-debugsource-0:4.9.0-54.el8_10.33.s390x",
"HighAvailability-8.10.0.Z.MAIN.EUS:resource-agents-debugsource-0:4.9.0-54.el8_10.33.x86_64",
"HighAvailability-8.10.0.Z.MAIN.EUS:resource-agents-gcp-0:4.9.0-54.el8_10.33.x86_64",
"HighAvailability-8.10.0.Z.MAIN.EUS:resource-agents-paf-0:4.9.0-54.el8_10.33.aarch64",
"HighAvailability-8.10.0.Z.MAIN.EUS:resource-agents-paf-0:4.9.0-54.el8_10.33.ppc64le",
"HighAvailability-8.10.0.Z.MAIN.EUS:resource-agents-paf-0:4.9.0-54.el8_10.33.s390x",
"HighAvailability-8.10.0.Z.MAIN.EUS:resource-agents-paf-0:4.9.0-54.el8_10.33.x86_64",
"ResilientStorage-8.10.0.Z.MAIN.EUS:resource-agents-0:4.9.0-54.el8_10.33.ppc64le",
"ResilientStorage-8.10.0.Z.MAIN.EUS:resource-agents-0:4.9.0-54.el8_10.33.s390x",
"ResilientStorage-8.10.0.Z.MAIN.EUS:resource-agents-0:4.9.0-54.el8_10.33.src",
"ResilientStorage-8.10.0.Z.MAIN.EUS:resource-agents-0:4.9.0-54.el8_10.33.x86_64",
"ResilientStorage-8.10.0.Z.MAIN.EUS:resource-agents-aliyun-0:4.9.0-54.el8_10.33.x86_64",
"ResilientStorage-8.10.0.Z.MAIN.EUS:resource-agents-aliyun-debuginfo-0:4.9.0-54.el8_10.33.x86_64",
"ResilientStorage-8.10.0.Z.MAIN.EUS:resource-agents-debuginfo-0:4.9.0-54.el8_10.33.ppc64le",
"ResilientStorage-8.10.0.Z.MAIN.EUS:resource-agents-debuginfo-0:4.9.0-54.el8_10.33.s390x",
"ResilientStorage-8.10.0.Z.MAIN.EUS:resource-agents-debuginfo-0:4.9.0-54.el8_10.33.x86_64",
"ResilientStorage-8.10.0.Z.MAIN.EUS:resource-agents-debugsource-0:4.9.0-54.el8_10.33.ppc64le",
"ResilientStorage-8.10.0.Z.MAIN.EUS:resource-agents-debugsource-0:4.9.0-54.el8_10.33.s390x",
"ResilientStorage-8.10.0.Z.MAIN.EUS:resource-agents-debugsource-0:4.9.0-54.el8_10.33.x86_64",
"ResilientStorage-8.10.0.Z.MAIN.EUS:resource-agents-gcp-0:4.9.0-54.el8_10.33.x86_64",
"ResilientStorage-8.10.0.Z.MAIN.EUS:resource-agents-paf-0:4.9.0-54.el8_10.33.ppc64le",
"ResilientStorage-8.10.0.Z.MAIN.EUS:resource-agents-paf-0:4.9.0-54.el8_10.33.s390x",
"ResilientStorage-8.10.0.Z.MAIN.EUS:resource-agents-paf-0:4.9.0-54.el8_10.33.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "pyasn1: pyasn1 Vulnerable to Denial of Service via Unbounded Recursion"
}
]
}
RHSA-2026:13916
Vulnerability from csaf_redhat - Published: 2026-05-06 06:40 - Updated: 2026-07-20 04:36Summary
Red Hat Security Advisory: fence-agents security update
Severity
Important
Notes
Topic: An update for fence-agents is now available for Red Hat Enterprise Linux 10.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster.
Security Fix(es):
* pyjwt: PyJWT accepts unknown `crit` header extensions (RFC 7515 ?4.1.11 MUST violation) (CVE-2026-32597)
* pyasn1: pyasn1 Vulnerable to Denial of Service via Unbounded Recursion (CVE-2026-30922)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
An unbounded recursion flaw has been discovered in the pypi pyasn1 library. This uncontrolled recursion occurs when decoding ASN.1 data with deeply nested structures. An attacker can supply a crafted payload containing nested SEQUENCE (0x30) or SET (0x31) tags with Indefinite Length (0x80) markers. This forces the decoder to recursively call itself until the Python interpreter crashes with a RecursionError or consumes all available memory (OOM), crashing the host application.
7.5 (High)
Affected products
Fixed
96 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-10.1.Z:fence-agents-0:4.16.0-13.el10_1.4.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-agents-aliyun-0:4.16.0-13.el10_1.4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-agents-all-0:4.16.0-13.el10_1.4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-agents-all-0:4.16.0-13.el10_1.4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-agents-all-0:4.16.0-13.el10_1.4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-agents-all-0:4.16.0-13.el10_1.4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-agents-amt-ws-0:4.16.0-13.el10_1.4.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-agents-apc-0:4.16.0-13.el10_1.4.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-agents-apc-snmp-0:4.16.0-13.el10_1.4.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-agents-aws-0:4.16.0-13.el10_1.4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-agents-azure-arm-0:4.16.0-13.el10_1.4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-agents-bladecenter-0:4.16.0-13.el10_1.4.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-agents-brocade-0:4.16.0-13.el10_1.4.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-agents-cisco-mds-0:4.16.0-13.el10_1.4.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-agents-cisco-ucs-0:4.16.0-13.el10_1.4.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-agents-common-0:4.16.0-13.el10_1.4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-agents-common-0:4.16.0-13.el10_1.4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-agents-common-0:4.16.0-13.el10_1.4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-agents-common-0:4.16.0-13.el10_1.4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-agents-common-debuginfo-0:4.16.0-13.el10_1.4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-agents-common-debuginfo-0:4.16.0-13.el10_1.4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-agents-common-debuginfo-0:4.16.0-13.el10_1.4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-agents-common-debuginfo-0:4.16.0-13.el10_1.4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-agents-debuginfo-0:4.16.0-13.el10_1.4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-agents-debuginfo-0:4.16.0-13.el10_1.4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-agents-debuginfo-0:4.16.0-13.el10_1.4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-agents-debuginfo-0:4.16.0-13.el10_1.4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-agents-debugsource-0:4.16.0-13.el10_1.4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-agents-debugsource-0:4.16.0-13.el10_1.4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-agents-debugsource-0:4.16.0-13.el10_1.4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-agents-debugsource-0:4.16.0-13.el10_1.4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-agents-drac5-0:4.16.0-13.el10_1.4.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-agents-eaton-snmp-0:4.16.0-13.el10_1.4.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-agents-emerson-0:4.16.0-13.el10_1.4.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-agents-eps-0:4.16.0-13.el10_1.4.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-agents-gce-0:4.16.0-13.el10_1.4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-agents-heuristics-ping-0:4.16.0-13.el10_1.4.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-agents-hpblade-0:4.16.0-13.el10_1.4.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-agents-ibm-powervs-0:4.16.0-13.el10_1.4.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-agents-ibm-vpc-0:4.16.0-13.el10_1.4.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-agents-ibmblade-0:4.16.0-13.el10_1.4.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-agents-ifmib-0:4.16.0-13.el10_1.4.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-agents-ilo-moonshot-0:4.16.0-13.el10_1.4.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-agents-ilo-mp-0:4.16.0-13.el10_1.4.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-agents-ilo-ssh-0:4.16.0-13.el10_1.4.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-agents-ilo2-0:4.16.0-13.el10_1.4.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-agents-intelmodular-0:4.16.0-13.el10_1.4.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-agents-ipdu-0:4.16.0-13.el10_1.4.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-agents-ipmilan-0:4.16.0-13.el10_1.4.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-agents-kdump-0:4.16.0-13.el10_1.4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-agents-kdump-0:4.16.0-13.el10_1.4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-agents-kdump-0:4.16.0-13.el10_1.4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-agents-kdump-0:4.16.0-13.el10_1.4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-agents-kdump-debuginfo-0:4.16.0-13.el10_1.4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-agents-kdump-debuginfo-0:4.16.0-13.el10_1.4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-agents-kdump-debuginfo-0:4.16.0-13.el10_1.4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-agents-kdump-debuginfo-0:4.16.0-13.el10_1.4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-agents-kubevirt-0:4.16.0-13.el10_1.4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-agents-kubevirt-0:4.16.0-13.el10_1.4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-agents-kubevirt-0:4.16.0-13.el10_1.4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-agents-kubevirt-0:4.16.0-13.el10_1.4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-agents-lpar-0:4.16.0-13.el10_1.4.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-agents-mpath-0:4.16.0-13.el10_1.4.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-agents-nutanix-ahv-0:4.16.0-13.el10_1.4.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-agents-openstack-0:4.16.0-13.el10_1.4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-agents-openstack-0:4.16.0-13.el10_1.4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-agents-redfish-0:4.16.0-13.el10_1.4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-agents-redfish-0:4.16.0-13.el10_1.4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-agents-redfish-0:4.16.0-13.el10_1.4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-agents-redfish-0:4.16.0-13.el10_1.4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-agents-rhevm-0:4.16.0-13.el10_1.4.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-agents-rsa-0:4.16.0-13.el10_1.4.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-agents-rsb-0:4.16.0-13.el10_1.4.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-agents-sbd-0:4.16.0-13.el10_1.4.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-agents-scsi-0:4.16.0-13.el10_1.4.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-agents-virsh-0:4.16.0-13.el10_1.4.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-agents-vmware-rest-0:4.16.0-13.el10_1.4.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-agents-vmware-soap-0:4.16.0-13.el10_1.4.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-agents-wti-0:4.16.0-13.el10_1.4.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-agents-zvm-0:4.16.0-13.el10_1.4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-virt-0:4.16.0-13.el10_1.4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-virt-debuginfo-0:4.16.0-13.el10_1.4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-virtd-0:4.16.0-13.el10_1.4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-virtd-cpg-0:4.16.0-13.el10_1.4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-virtd-cpg-debuginfo-0:4.16.0-13.el10_1.4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-virtd-debuginfo-0:4.16.0-13.el10_1.4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-virtd-libvirt-0:4.16.0-13.el10_1.4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-virtd-libvirt-debuginfo-0:4.16.0-13.el10_1.4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-virtd-multicast-0:4.16.0-13.el10_1.4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-virtd-multicast-debuginfo-0:4.16.0-13.el10_1.4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-virtd-serial-0:4.16.0-13.el10_1.4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-virtd-serial-debuginfo-0:4.16.0-13.el10_1.4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-virtd-tcp-0:4.16.0-13.el10_1.4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-virtd-tcp-debuginfo-0:4.16.0-13.el10_1.4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:ha-cloud-support-0:4.16.0-13.el10_1.4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:ha-cloud-support-debuginfo-0:4.16.0-13.el10_1.4.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A missing verification step has been discovered in PyJWT. PyJWT does not validate the crit (Critical) Header Parameter defined in RFC 7515 §4.1.11. When a JWS token contains a crit array listing extensions that PyJWT does not understand, the library accepts the token instead of rejecting it. This violates the MUST requirement in the RFC.
7.5 (High)
Affected products
Fixed
96 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-10.1.Z:fence-agents-0:4.16.0-13.el10_1.4.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-agents-aliyun-0:4.16.0-13.el10_1.4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-agents-all-0:4.16.0-13.el10_1.4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-agents-all-0:4.16.0-13.el10_1.4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-agents-all-0:4.16.0-13.el10_1.4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-agents-all-0:4.16.0-13.el10_1.4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-agents-amt-ws-0:4.16.0-13.el10_1.4.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-agents-apc-0:4.16.0-13.el10_1.4.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-agents-apc-snmp-0:4.16.0-13.el10_1.4.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-agents-aws-0:4.16.0-13.el10_1.4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-agents-azure-arm-0:4.16.0-13.el10_1.4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-agents-bladecenter-0:4.16.0-13.el10_1.4.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-agents-brocade-0:4.16.0-13.el10_1.4.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-agents-cisco-mds-0:4.16.0-13.el10_1.4.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-agents-cisco-ucs-0:4.16.0-13.el10_1.4.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-agents-common-0:4.16.0-13.el10_1.4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-agents-common-0:4.16.0-13.el10_1.4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-agents-common-0:4.16.0-13.el10_1.4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-agents-common-0:4.16.0-13.el10_1.4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-agents-common-debuginfo-0:4.16.0-13.el10_1.4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-agents-common-debuginfo-0:4.16.0-13.el10_1.4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-agents-common-debuginfo-0:4.16.0-13.el10_1.4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-agents-common-debuginfo-0:4.16.0-13.el10_1.4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-agents-debuginfo-0:4.16.0-13.el10_1.4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-agents-debuginfo-0:4.16.0-13.el10_1.4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-agents-debuginfo-0:4.16.0-13.el10_1.4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-agents-debuginfo-0:4.16.0-13.el10_1.4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-agents-debugsource-0:4.16.0-13.el10_1.4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-agents-debugsource-0:4.16.0-13.el10_1.4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-agents-debugsource-0:4.16.0-13.el10_1.4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-agents-debugsource-0:4.16.0-13.el10_1.4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-agents-drac5-0:4.16.0-13.el10_1.4.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-agents-eaton-snmp-0:4.16.0-13.el10_1.4.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-agents-emerson-0:4.16.0-13.el10_1.4.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-agents-eps-0:4.16.0-13.el10_1.4.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-agents-gce-0:4.16.0-13.el10_1.4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-agents-heuristics-ping-0:4.16.0-13.el10_1.4.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-agents-hpblade-0:4.16.0-13.el10_1.4.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-agents-ibm-powervs-0:4.16.0-13.el10_1.4.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-agents-ibm-vpc-0:4.16.0-13.el10_1.4.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-agents-ibmblade-0:4.16.0-13.el10_1.4.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-agents-ifmib-0:4.16.0-13.el10_1.4.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-agents-ilo-moonshot-0:4.16.0-13.el10_1.4.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-agents-ilo-mp-0:4.16.0-13.el10_1.4.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-agents-ilo-ssh-0:4.16.0-13.el10_1.4.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-agents-ilo2-0:4.16.0-13.el10_1.4.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-agents-intelmodular-0:4.16.0-13.el10_1.4.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-agents-ipdu-0:4.16.0-13.el10_1.4.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-agents-ipmilan-0:4.16.0-13.el10_1.4.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-agents-kdump-0:4.16.0-13.el10_1.4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-agents-kdump-0:4.16.0-13.el10_1.4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-agents-kdump-0:4.16.0-13.el10_1.4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-agents-kdump-0:4.16.0-13.el10_1.4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-agents-kdump-debuginfo-0:4.16.0-13.el10_1.4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-agents-kdump-debuginfo-0:4.16.0-13.el10_1.4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-agents-kdump-debuginfo-0:4.16.0-13.el10_1.4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-agents-kdump-debuginfo-0:4.16.0-13.el10_1.4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-agents-kubevirt-0:4.16.0-13.el10_1.4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-agents-kubevirt-0:4.16.0-13.el10_1.4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-agents-kubevirt-0:4.16.0-13.el10_1.4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-agents-kubevirt-0:4.16.0-13.el10_1.4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-agents-lpar-0:4.16.0-13.el10_1.4.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-agents-mpath-0:4.16.0-13.el10_1.4.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-agents-nutanix-ahv-0:4.16.0-13.el10_1.4.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-agents-openstack-0:4.16.0-13.el10_1.4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-agents-openstack-0:4.16.0-13.el10_1.4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-agents-redfish-0:4.16.0-13.el10_1.4.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-agents-redfish-0:4.16.0-13.el10_1.4.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-agents-redfish-0:4.16.0-13.el10_1.4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-agents-redfish-0:4.16.0-13.el10_1.4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-agents-rhevm-0:4.16.0-13.el10_1.4.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-agents-rsa-0:4.16.0-13.el10_1.4.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-agents-rsb-0:4.16.0-13.el10_1.4.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-agents-sbd-0:4.16.0-13.el10_1.4.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-agents-scsi-0:4.16.0-13.el10_1.4.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-agents-virsh-0:4.16.0-13.el10_1.4.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-agents-vmware-rest-0:4.16.0-13.el10_1.4.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-agents-vmware-soap-0:4.16.0-13.el10_1.4.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-agents-wti-0:4.16.0-13.el10_1.4.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-agents-zvm-0:4.16.0-13.el10_1.4.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-virt-0:4.16.0-13.el10_1.4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-virt-debuginfo-0:4.16.0-13.el10_1.4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-virtd-0:4.16.0-13.el10_1.4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-virtd-cpg-0:4.16.0-13.el10_1.4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-virtd-cpg-debuginfo-0:4.16.0-13.el10_1.4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-virtd-debuginfo-0:4.16.0-13.el10_1.4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-virtd-libvirt-0:4.16.0-13.el10_1.4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-virtd-libvirt-debuginfo-0:4.16.0-13.el10_1.4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-virtd-multicast-0:4.16.0-13.el10_1.4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-virtd-multicast-debuginfo-0:4.16.0-13.el10_1.4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-virtd-serial-0:4.16.0-13.el10_1.4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-virtd-serial-debuginfo-0:4.16.0-13.el10_1.4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-virtd-tcp-0:4.16.0-13.el10_1.4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:fence-virtd-tcp-debuginfo-0:4.16.0-13.el10_1.4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:ha-cloud-support-0:4.16.0-13.el10_1.4.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.1.Z:ha-cloud-support-debuginfo-0:4.16.0-13.el10_1.4.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
References
16 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for fence-agents is now available for Red Hat Enterprise Linux 10.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster. \n\nSecurity Fix(es):\n\n* pyjwt: PyJWT accepts unknown `crit` header extensions (RFC 7515 ?4.1.11 MUST violation) (CVE-2026-32597)\n\n* pyasn1: pyasn1 Vulnerable to Denial of Service via Unbounded Recursion (CVE-2026-30922)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:13916",
"url": "https://access.redhat.com/errata/RHSA-2026:13916"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2447194",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2447194"
},
{
"category": "external",
"summary": "2448553",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2448553"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_13916.json"
}
],
"title": "Red Hat Security Advisory: fence-agents security update",
"tracking": {
"current_release_date": "2026-07-20T04:36:51+00:00",
"generator": {
"date": "2026-07-20T04:36:51+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.7"
}
},
"id": "RHSA-2026:13916",
"initial_release_date": "2026-05-06T06:40:52+00:00",
"revision_history": [
{
"date": "2026-05-06T06:40:52+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-05-06T06:40:52+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-07-20T04:36:51+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AppStream (v. 10)",
"product": {
"name": "Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:10.1"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "fence-agents-0:4.16.0-13.el10_1.4.src",
"product": {
"name": "fence-agents-0:4.16.0-13.el10_1.4.src",
"product_id": "fence-agents-0:4.16.0-13.el10_1.4.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents@4.16.0-13.el10_1.4?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "fence-agents-aliyun-0:4.16.0-13.el10_1.4.x86_64",
"product": {
"name": "fence-agents-aliyun-0:4.16.0-13.el10_1.4.x86_64",
"product_id": "fence-agents-aliyun-0:4.16.0-13.el10_1.4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-aliyun@4.16.0-13.el10_1.4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "fence-agents-all-0:4.16.0-13.el10_1.4.x86_64",
"product": {
"name": "fence-agents-all-0:4.16.0-13.el10_1.4.x86_64",
"product_id": "fence-agents-all-0:4.16.0-13.el10_1.4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-all@4.16.0-13.el10_1.4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "fence-agents-aws-0:4.16.0-13.el10_1.4.x86_64",
"product": {
"name": "fence-agents-aws-0:4.16.0-13.el10_1.4.x86_64",
"product_id": "fence-agents-aws-0:4.16.0-13.el10_1.4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-aws@4.16.0-13.el10_1.4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "fence-agents-azure-arm-0:4.16.0-13.el10_1.4.x86_64",
"product": {
"name": "fence-agents-azure-arm-0:4.16.0-13.el10_1.4.x86_64",
"product_id": "fence-agents-azure-arm-0:4.16.0-13.el10_1.4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-azure-arm@4.16.0-13.el10_1.4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "fence-agents-common-0:4.16.0-13.el10_1.4.x86_64",
"product": {
"name": "fence-agents-common-0:4.16.0-13.el10_1.4.x86_64",
"product_id": "fence-agents-common-0:4.16.0-13.el10_1.4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-common@4.16.0-13.el10_1.4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "fence-agents-gce-0:4.16.0-13.el10_1.4.x86_64",
"product": {
"name": "fence-agents-gce-0:4.16.0-13.el10_1.4.x86_64",
"product_id": "fence-agents-gce-0:4.16.0-13.el10_1.4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-gce@4.16.0-13.el10_1.4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "fence-agents-kdump-0:4.16.0-13.el10_1.4.x86_64",
"product": {
"name": "fence-agents-kdump-0:4.16.0-13.el10_1.4.x86_64",
"product_id": "fence-agents-kdump-0:4.16.0-13.el10_1.4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-kdump@4.16.0-13.el10_1.4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "fence-agents-kubevirt-0:4.16.0-13.el10_1.4.x86_64",
"product": {
"name": "fence-agents-kubevirt-0:4.16.0-13.el10_1.4.x86_64",
"product_id": "fence-agents-kubevirt-0:4.16.0-13.el10_1.4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-kubevirt@4.16.0-13.el10_1.4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "fence-agents-openstack-0:4.16.0-13.el10_1.4.x86_64",
"product": {
"name": "fence-agents-openstack-0:4.16.0-13.el10_1.4.x86_64",
"product_id": "fence-agents-openstack-0:4.16.0-13.el10_1.4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-openstack@4.16.0-13.el10_1.4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "fence-agents-redfish-0:4.16.0-13.el10_1.4.x86_64",
"product": {
"name": "fence-agents-redfish-0:4.16.0-13.el10_1.4.x86_64",
"product_id": "fence-agents-redfish-0:4.16.0-13.el10_1.4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-redfish@4.16.0-13.el10_1.4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "fence-virt-0:4.16.0-13.el10_1.4.x86_64",
"product": {
"name": "fence-virt-0:4.16.0-13.el10_1.4.x86_64",
"product_id": "fence-virt-0:4.16.0-13.el10_1.4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-virt@4.16.0-13.el10_1.4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "fence-virtd-0:4.16.0-13.el10_1.4.x86_64",
"product": {
"name": "fence-virtd-0:4.16.0-13.el10_1.4.x86_64",
"product_id": "fence-virtd-0:4.16.0-13.el10_1.4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-virtd@4.16.0-13.el10_1.4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "fence-virtd-cpg-0:4.16.0-13.el10_1.4.x86_64",
"product": {
"name": "fence-virtd-cpg-0:4.16.0-13.el10_1.4.x86_64",
"product_id": "fence-virtd-cpg-0:4.16.0-13.el10_1.4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-virtd-cpg@4.16.0-13.el10_1.4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "fence-virtd-libvirt-0:4.16.0-13.el10_1.4.x86_64",
"product": {
"name": "fence-virtd-libvirt-0:4.16.0-13.el10_1.4.x86_64",
"product_id": "fence-virtd-libvirt-0:4.16.0-13.el10_1.4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-virtd-libvirt@4.16.0-13.el10_1.4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "fence-virtd-multicast-0:4.16.0-13.el10_1.4.x86_64",
"product": {
"name": "fence-virtd-multicast-0:4.16.0-13.el10_1.4.x86_64",
"product_id": "fence-virtd-multicast-0:4.16.0-13.el10_1.4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-virtd-multicast@4.16.0-13.el10_1.4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "fence-virtd-serial-0:4.16.0-13.el10_1.4.x86_64",
"product": {
"name": "fence-virtd-serial-0:4.16.0-13.el10_1.4.x86_64",
"product_id": "fence-virtd-serial-0:4.16.0-13.el10_1.4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-virtd-serial@4.16.0-13.el10_1.4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "fence-virtd-tcp-0:4.16.0-13.el10_1.4.x86_64",
"product": {
"name": "fence-virtd-tcp-0:4.16.0-13.el10_1.4.x86_64",
"product_id": "fence-virtd-tcp-0:4.16.0-13.el10_1.4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-virtd-tcp@4.16.0-13.el10_1.4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "ha-cloud-support-0:4.16.0-13.el10_1.4.x86_64",
"product": {
"name": "ha-cloud-support-0:4.16.0-13.el10_1.4.x86_64",
"product_id": "ha-cloud-support-0:4.16.0-13.el10_1.4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ha-cloud-support@4.16.0-13.el10_1.4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "fence-agents-debugsource-0:4.16.0-13.el10_1.4.x86_64",
"product": {
"name": "fence-agents-debugsource-0:4.16.0-13.el10_1.4.x86_64",
"product_id": "fence-agents-debugsource-0:4.16.0-13.el10_1.4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-debugsource@4.16.0-13.el10_1.4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "fence-agents-common-debuginfo-0:4.16.0-13.el10_1.4.x86_64",
"product": {
"name": "fence-agents-common-debuginfo-0:4.16.0-13.el10_1.4.x86_64",
"product_id": "fence-agents-common-debuginfo-0:4.16.0-13.el10_1.4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-common-debuginfo@4.16.0-13.el10_1.4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "fence-agents-debuginfo-0:4.16.0-13.el10_1.4.x86_64",
"product": {
"name": "fence-agents-debuginfo-0:4.16.0-13.el10_1.4.x86_64",
"product_id": "fence-agents-debuginfo-0:4.16.0-13.el10_1.4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-debuginfo@4.16.0-13.el10_1.4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "fence-agents-kdump-debuginfo-0:4.16.0-13.el10_1.4.x86_64",
"product": {
"name": "fence-agents-kdump-debuginfo-0:4.16.0-13.el10_1.4.x86_64",
"product_id": "fence-agents-kdump-debuginfo-0:4.16.0-13.el10_1.4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-kdump-debuginfo@4.16.0-13.el10_1.4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "fence-virt-debuginfo-0:4.16.0-13.el10_1.4.x86_64",
"product": {
"name": "fence-virt-debuginfo-0:4.16.0-13.el10_1.4.x86_64",
"product_id": "fence-virt-debuginfo-0:4.16.0-13.el10_1.4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-virt-debuginfo@4.16.0-13.el10_1.4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "fence-virtd-cpg-debuginfo-0:4.16.0-13.el10_1.4.x86_64",
"product": {
"name": "fence-virtd-cpg-debuginfo-0:4.16.0-13.el10_1.4.x86_64",
"product_id": "fence-virtd-cpg-debuginfo-0:4.16.0-13.el10_1.4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-virtd-cpg-debuginfo@4.16.0-13.el10_1.4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "fence-virtd-debuginfo-0:4.16.0-13.el10_1.4.x86_64",
"product": {
"name": "fence-virtd-debuginfo-0:4.16.0-13.el10_1.4.x86_64",
"product_id": "fence-virtd-debuginfo-0:4.16.0-13.el10_1.4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-virtd-debuginfo@4.16.0-13.el10_1.4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "fence-virtd-libvirt-debuginfo-0:4.16.0-13.el10_1.4.x86_64",
"product": {
"name": "fence-virtd-libvirt-debuginfo-0:4.16.0-13.el10_1.4.x86_64",
"product_id": "fence-virtd-libvirt-debuginfo-0:4.16.0-13.el10_1.4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-virtd-libvirt-debuginfo@4.16.0-13.el10_1.4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "fence-virtd-multicast-debuginfo-0:4.16.0-13.el10_1.4.x86_64",
"product": {
"name": "fence-virtd-multicast-debuginfo-0:4.16.0-13.el10_1.4.x86_64",
"product_id": "fence-virtd-multicast-debuginfo-0:4.16.0-13.el10_1.4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-virtd-multicast-debuginfo@4.16.0-13.el10_1.4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "fence-virtd-serial-debuginfo-0:4.16.0-13.el10_1.4.x86_64",
"product": {
"name": "fence-virtd-serial-debuginfo-0:4.16.0-13.el10_1.4.x86_64",
"product_id": "fence-virtd-serial-debuginfo-0:4.16.0-13.el10_1.4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-virtd-serial-debuginfo@4.16.0-13.el10_1.4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "fence-virtd-tcp-debuginfo-0:4.16.0-13.el10_1.4.x86_64",
"product": {
"name": "fence-virtd-tcp-debuginfo-0:4.16.0-13.el10_1.4.x86_64",
"product_id": "fence-virtd-tcp-debuginfo-0:4.16.0-13.el10_1.4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-virtd-tcp-debuginfo@4.16.0-13.el10_1.4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "ha-cloud-support-debuginfo-0:4.16.0-13.el10_1.4.x86_64",
"product": {
"name": "ha-cloud-support-debuginfo-0:4.16.0-13.el10_1.4.x86_64",
"product_id": "ha-cloud-support-debuginfo-0:4.16.0-13.el10_1.4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ha-cloud-support-debuginfo@4.16.0-13.el10_1.4?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "fence-agents-all-0:4.16.0-13.el10_1.4.aarch64",
"product": {
"name": "fence-agents-all-0:4.16.0-13.el10_1.4.aarch64",
"product_id": "fence-agents-all-0:4.16.0-13.el10_1.4.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-all@4.16.0-13.el10_1.4?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "fence-agents-common-0:4.16.0-13.el10_1.4.aarch64",
"product": {
"name": "fence-agents-common-0:4.16.0-13.el10_1.4.aarch64",
"product_id": "fence-agents-common-0:4.16.0-13.el10_1.4.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-common@4.16.0-13.el10_1.4?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "fence-agents-kdump-0:4.16.0-13.el10_1.4.aarch64",
"product": {
"name": "fence-agents-kdump-0:4.16.0-13.el10_1.4.aarch64",
"product_id": "fence-agents-kdump-0:4.16.0-13.el10_1.4.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-kdump@4.16.0-13.el10_1.4?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "fence-agents-kubevirt-0:4.16.0-13.el10_1.4.aarch64",
"product": {
"name": "fence-agents-kubevirt-0:4.16.0-13.el10_1.4.aarch64",
"product_id": "fence-agents-kubevirt-0:4.16.0-13.el10_1.4.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-kubevirt@4.16.0-13.el10_1.4?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "fence-agents-redfish-0:4.16.0-13.el10_1.4.aarch64",
"product": {
"name": "fence-agents-redfish-0:4.16.0-13.el10_1.4.aarch64",
"product_id": "fence-agents-redfish-0:4.16.0-13.el10_1.4.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-redfish@4.16.0-13.el10_1.4?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "fence-agents-debugsource-0:4.16.0-13.el10_1.4.aarch64",
"product": {
"name": "fence-agents-debugsource-0:4.16.0-13.el10_1.4.aarch64",
"product_id": "fence-agents-debugsource-0:4.16.0-13.el10_1.4.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-debugsource@4.16.0-13.el10_1.4?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "fence-agents-common-debuginfo-0:4.16.0-13.el10_1.4.aarch64",
"product": {
"name": "fence-agents-common-debuginfo-0:4.16.0-13.el10_1.4.aarch64",
"product_id": "fence-agents-common-debuginfo-0:4.16.0-13.el10_1.4.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-common-debuginfo@4.16.0-13.el10_1.4?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "fence-agents-debuginfo-0:4.16.0-13.el10_1.4.aarch64",
"product": {
"name": "fence-agents-debuginfo-0:4.16.0-13.el10_1.4.aarch64",
"product_id": "fence-agents-debuginfo-0:4.16.0-13.el10_1.4.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-debuginfo@4.16.0-13.el10_1.4?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "fence-agents-kdump-debuginfo-0:4.16.0-13.el10_1.4.aarch64",
"product": {
"name": "fence-agents-kdump-debuginfo-0:4.16.0-13.el10_1.4.aarch64",
"product_id": "fence-agents-kdump-debuginfo-0:4.16.0-13.el10_1.4.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-kdump-debuginfo@4.16.0-13.el10_1.4?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "fence-agents-all-0:4.16.0-13.el10_1.4.ppc64le",
"product": {
"name": "fence-agents-all-0:4.16.0-13.el10_1.4.ppc64le",
"product_id": "fence-agents-all-0:4.16.0-13.el10_1.4.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-all@4.16.0-13.el10_1.4?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "fence-agents-common-0:4.16.0-13.el10_1.4.ppc64le",
"product": {
"name": "fence-agents-common-0:4.16.0-13.el10_1.4.ppc64le",
"product_id": "fence-agents-common-0:4.16.0-13.el10_1.4.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-common@4.16.0-13.el10_1.4?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "fence-agents-kdump-0:4.16.0-13.el10_1.4.ppc64le",
"product": {
"name": "fence-agents-kdump-0:4.16.0-13.el10_1.4.ppc64le",
"product_id": "fence-agents-kdump-0:4.16.0-13.el10_1.4.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-kdump@4.16.0-13.el10_1.4?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "fence-agents-kubevirt-0:4.16.0-13.el10_1.4.ppc64le",
"product": {
"name": "fence-agents-kubevirt-0:4.16.0-13.el10_1.4.ppc64le",
"product_id": "fence-agents-kubevirt-0:4.16.0-13.el10_1.4.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-kubevirt@4.16.0-13.el10_1.4?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "fence-agents-openstack-0:4.16.0-13.el10_1.4.ppc64le",
"product": {
"name": "fence-agents-openstack-0:4.16.0-13.el10_1.4.ppc64le",
"product_id": "fence-agents-openstack-0:4.16.0-13.el10_1.4.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-openstack@4.16.0-13.el10_1.4?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "fence-agents-redfish-0:4.16.0-13.el10_1.4.ppc64le",
"product": {
"name": "fence-agents-redfish-0:4.16.0-13.el10_1.4.ppc64le",
"product_id": "fence-agents-redfish-0:4.16.0-13.el10_1.4.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-redfish@4.16.0-13.el10_1.4?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "fence-agents-debugsource-0:4.16.0-13.el10_1.4.ppc64le",
"product": {
"name": "fence-agents-debugsource-0:4.16.0-13.el10_1.4.ppc64le",
"product_id": "fence-agents-debugsource-0:4.16.0-13.el10_1.4.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-debugsource@4.16.0-13.el10_1.4?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "fence-agents-common-debuginfo-0:4.16.0-13.el10_1.4.ppc64le",
"product": {
"name": "fence-agents-common-debuginfo-0:4.16.0-13.el10_1.4.ppc64le",
"product_id": "fence-agents-common-debuginfo-0:4.16.0-13.el10_1.4.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-common-debuginfo@4.16.0-13.el10_1.4?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "fence-agents-debuginfo-0:4.16.0-13.el10_1.4.ppc64le",
"product": {
"name": "fence-agents-debuginfo-0:4.16.0-13.el10_1.4.ppc64le",
"product_id": "fence-agents-debuginfo-0:4.16.0-13.el10_1.4.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-debuginfo@4.16.0-13.el10_1.4?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "fence-agents-kdump-debuginfo-0:4.16.0-13.el10_1.4.ppc64le",
"product": {
"name": "fence-agents-kdump-debuginfo-0:4.16.0-13.el10_1.4.ppc64le",
"product_id": "fence-agents-kdump-debuginfo-0:4.16.0-13.el10_1.4.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-kdump-debuginfo@4.16.0-13.el10_1.4?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "fence-agents-all-0:4.16.0-13.el10_1.4.s390x",
"product": {
"name": "fence-agents-all-0:4.16.0-13.el10_1.4.s390x",
"product_id": "fence-agents-all-0:4.16.0-13.el10_1.4.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-all@4.16.0-13.el10_1.4?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "fence-agents-common-0:4.16.0-13.el10_1.4.s390x",
"product": {
"name": "fence-agents-common-0:4.16.0-13.el10_1.4.s390x",
"product_id": "fence-agents-common-0:4.16.0-13.el10_1.4.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-common@4.16.0-13.el10_1.4?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "fence-agents-kdump-0:4.16.0-13.el10_1.4.s390x",
"product": {
"name": "fence-agents-kdump-0:4.16.0-13.el10_1.4.s390x",
"product_id": "fence-agents-kdump-0:4.16.0-13.el10_1.4.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-kdump@4.16.0-13.el10_1.4?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "fence-agents-kubevirt-0:4.16.0-13.el10_1.4.s390x",
"product": {
"name": "fence-agents-kubevirt-0:4.16.0-13.el10_1.4.s390x",
"product_id": "fence-agents-kubevirt-0:4.16.0-13.el10_1.4.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-kubevirt@4.16.0-13.el10_1.4?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "fence-agents-redfish-0:4.16.0-13.el10_1.4.s390x",
"product": {
"name": "fence-agents-redfish-0:4.16.0-13.el10_1.4.s390x",
"product_id": "fence-agents-redfish-0:4.16.0-13.el10_1.4.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-redfish@4.16.0-13.el10_1.4?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "fence-agents-zvm-0:4.16.0-13.el10_1.4.s390x",
"product": {
"name": "fence-agents-zvm-0:4.16.0-13.el10_1.4.s390x",
"product_id": "fence-agents-zvm-0:4.16.0-13.el10_1.4.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-zvm@4.16.0-13.el10_1.4?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "fence-agents-debugsource-0:4.16.0-13.el10_1.4.s390x",
"product": {
"name": "fence-agents-debugsource-0:4.16.0-13.el10_1.4.s390x",
"product_id": "fence-agents-debugsource-0:4.16.0-13.el10_1.4.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-debugsource@4.16.0-13.el10_1.4?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "fence-agents-common-debuginfo-0:4.16.0-13.el10_1.4.s390x",
"product": {
"name": "fence-agents-common-debuginfo-0:4.16.0-13.el10_1.4.s390x",
"product_id": "fence-agents-common-debuginfo-0:4.16.0-13.el10_1.4.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-common-debuginfo@4.16.0-13.el10_1.4?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "fence-agents-debuginfo-0:4.16.0-13.el10_1.4.s390x",
"product": {
"name": "fence-agents-debuginfo-0:4.16.0-13.el10_1.4.s390x",
"product_id": "fence-agents-debuginfo-0:4.16.0-13.el10_1.4.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-debuginfo@4.16.0-13.el10_1.4?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "fence-agents-kdump-debuginfo-0:4.16.0-13.el10_1.4.s390x",
"product": {
"name": "fence-agents-kdump-debuginfo-0:4.16.0-13.el10_1.4.s390x",
"product_id": "fence-agents-kdump-debuginfo-0:4.16.0-13.el10_1.4.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-kdump-debuginfo@4.16.0-13.el10_1.4?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "fence-agents-amt-ws-0:4.16.0-13.el10_1.4.noarch",
"product": {
"name": "fence-agents-amt-ws-0:4.16.0-13.el10_1.4.noarch",
"product_id": "fence-agents-amt-ws-0:4.16.0-13.el10_1.4.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-amt-ws@4.16.0-13.el10_1.4?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-apc-0:4.16.0-13.el10_1.4.noarch",
"product": {
"name": "fence-agents-apc-0:4.16.0-13.el10_1.4.noarch",
"product_id": "fence-agents-apc-0:4.16.0-13.el10_1.4.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-apc@4.16.0-13.el10_1.4?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-apc-snmp-0:4.16.0-13.el10_1.4.noarch",
"product": {
"name": "fence-agents-apc-snmp-0:4.16.0-13.el10_1.4.noarch",
"product_id": "fence-agents-apc-snmp-0:4.16.0-13.el10_1.4.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-apc-snmp@4.16.0-13.el10_1.4?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-bladecenter-0:4.16.0-13.el10_1.4.noarch",
"product": {
"name": "fence-agents-bladecenter-0:4.16.0-13.el10_1.4.noarch",
"product_id": "fence-agents-bladecenter-0:4.16.0-13.el10_1.4.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-bladecenter@4.16.0-13.el10_1.4?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-brocade-0:4.16.0-13.el10_1.4.noarch",
"product": {
"name": "fence-agents-brocade-0:4.16.0-13.el10_1.4.noarch",
"product_id": "fence-agents-brocade-0:4.16.0-13.el10_1.4.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-brocade@4.16.0-13.el10_1.4?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-cisco-mds-0:4.16.0-13.el10_1.4.noarch",
"product": {
"name": "fence-agents-cisco-mds-0:4.16.0-13.el10_1.4.noarch",
"product_id": "fence-agents-cisco-mds-0:4.16.0-13.el10_1.4.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-cisco-mds@4.16.0-13.el10_1.4?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-cisco-ucs-0:4.16.0-13.el10_1.4.noarch",
"product": {
"name": "fence-agents-cisco-ucs-0:4.16.0-13.el10_1.4.noarch",
"product_id": "fence-agents-cisco-ucs-0:4.16.0-13.el10_1.4.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-cisco-ucs@4.16.0-13.el10_1.4?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-drac5-0:4.16.0-13.el10_1.4.noarch",
"product": {
"name": "fence-agents-drac5-0:4.16.0-13.el10_1.4.noarch",
"product_id": "fence-agents-drac5-0:4.16.0-13.el10_1.4.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-drac5@4.16.0-13.el10_1.4?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-eaton-snmp-0:4.16.0-13.el10_1.4.noarch",
"product": {
"name": "fence-agents-eaton-snmp-0:4.16.0-13.el10_1.4.noarch",
"product_id": "fence-agents-eaton-snmp-0:4.16.0-13.el10_1.4.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-eaton-snmp@4.16.0-13.el10_1.4?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-emerson-0:4.16.0-13.el10_1.4.noarch",
"product": {
"name": "fence-agents-emerson-0:4.16.0-13.el10_1.4.noarch",
"product_id": "fence-agents-emerson-0:4.16.0-13.el10_1.4.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-emerson@4.16.0-13.el10_1.4?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-eps-0:4.16.0-13.el10_1.4.noarch",
"product": {
"name": "fence-agents-eps-0:4.16.0-13.el10_1.4.noarch",
"product_id": "fence-agents-eps-0:4.16.0-13.el10_1.4.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-eps@4.16.0-13.el10_1.4?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-heuristics-ping-0:4.16.0-13.el10_1.4.noarch",
"product": {
"name": "fence-agents-heuristics-ping-0:4.16.0-13.el10_1.4.noarch",
"product_id": "fence-agents-heuristics-ping-0:4.16.0-13.el10_1.4.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-heuristics-ping@4.16.0-13.el10_1.4?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-hpblade-0:4.16.0-13.el10_1.4.noarch",
"product": {
"name": "fence-agents-hpblade-0:4.16.0-13.el10_1.4.noarch",
"product_id": "fence-agents-hpblade-0:4.16.0-13.el10_1.4.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-hpblade@4.16.0-13.el10_1.4?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-ibm-powervs-0:4.16.0-13.el10_1.4.noarch",
"product": {
"name": "fence-agents-ibm-powervs-0:4.16.0-13.el10_1.4.noarch",
"product_id": "fence-agents-ibm-powervs-0:4.16.0-13.el10_1.4.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-ibm-powervs@4.16.0-13.el10_1.4?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-ibm-vpc-0:4.16.0-13.el10_1.4.noarch",
"product": {
"name": "fence-agents-ibm-vpc-0:4.16.0-13.el10_1.4.noarch",
"product_id": "fence-agents-ibm-vpc-0:4.16.0-13.el10_1.4.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-ibm-vpc@4.16.0-13.el10_1.4?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-ibmblade-0:4.16.0-13.el10_1.4.noarch",
"product": {
"name": "fence-agents-ibmblade-0:4.16.0-13.el10_1.4.noarch",
"product_id": "fence-agents-ibmblade-0:4.16.0-13.el10_1.4.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-ibmblade@4.16.0-13.el10_1.4?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-ifmib-0:4.16.0-13.el10_1.4.noarch",
"product": {
"name": "fence-agents-ifmib-0:4.16.0-13.el10_1.4.noarch",
"product_id": "fence-agents-ifmib-0:4.16.0-13.el10_1.4.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-ifmib@4.16.0-13.el10_1.4?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-ilo-moonshot-0:4.16.0-13.el10_1.4.noarch",
"product": {
"name": "fence-agents-ilo-moonshot-0:4.16.0-13.el10_1.4.noarch",
"product_id": "fence-agents-ilo-moonshot-0:4.16.0-13.el10_1.4.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-ilo-moonshot@4.16.0-13.el10_1.4?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-ilo-mp-0:4.16.0-13.el10_1.4.noarch",
"product": {
"name": "fence-agents-ilo-mp-0:4.16.0-13.el10_1.4.noarch",
"product_id": "fence-agents-ilo-mp-0:4.16.0-13.el10_1.4.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-ilo-mp@4.16.0-13.el10_1.4?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-ilo-ssh-0:4.16.0-13.el10_1.4.noarch",
"product": {
"name": "fence-agents-ilo-ssh-0:4.16.0-13.el10_1.4.noarch",
"product_id": "fence-agents-ilo-ssh-0:4.16.0-13.el10_1.4.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-ilo-ssh@4.16.0-13.el10_1.4?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-ilo2-0:4.16.0-13.el10_1.4.noarch",
"product": {
"name": "fence-agents-ilo2-0:4.16.0-13.el10_1.4.noarch",
"product_id": "fence-agents-ilo2-0:4.16.0-13.el10_1.4.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-ilo2@4.16.0-13.el10_1.4?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-intelmodular-0:4.16.0-13.el10_1.4.noarch",
"product": {
"name": "fence-agents-intelmodular-0:4.16.0-13.el10_1.4.noarch",
"product_id": "fence-agents-intelmodular-0:4.16.0-13.el10_1.4.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-intelmodular@4.16.0-13.el10_1.4?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-ipdu-0:4.16.0-13.el10_1.4.noarch",
"product": {
"name": "fence-agents-ipdu-0:4.16.0-13.el10_1.4.noarch",
"product_id": "fence-agents-ipdu-0:4.16.0-13.el10_1.4.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-ipdu@4.16.0-13.el10_1.4?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-ipmilan-0:4.16.0-13.el10_1.4.noarch",
"product": {
"name": "fence-agents-ipmilan-0:4.16.0-13.el10_1.4.noarch",
"product_id": "fence-agents-ipmilan-0:4.16.0-13.el10_1.4.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-ipmilan@4.16.0-13.el10_1.4?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-lpar-0:4.16.0-13.el10_1.4.noarch",
"product": {
"name": "fence-agents-lpar-0:4.16.0-13.el10_1.4.noarch",
"product_id": "fence-agents-lpar-0:4.16.0-13.el10_1.4.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-lpar@4.16.0-13.el10_1.4?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-mpath-0:4.16.0-13.el10_1.4.noarch",
"product": {
"name": "fence-agents-mpath-0:4.16.0-13.el10_1.4.noarch",
"product_id": "fence-agents-mpath-0:4.16.0-13.el10_1.4.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-mpath@4.16.0-13.el10_1.4?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-nutanix-ahv-0:4.16.0-13.el10_1.4.noarch",
"product": {
"name": "fence-agents-nutanix-ahv-0:4.16.0-13.el10_1.4.noarch",
"product_id": "fence-agents-nutanix-ahv-0:4.16.0-13.el10_1.4.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-nutanix-ahv@4.16.0-13.el10_1.4?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-rhevm-0:4.16.0-13.el10_1.4.noarch",
"product": {
"name": "fence-agents-rhevm-0:4.16.0-13.el10_1.4.noarch",
"product_id": "fence-agents-rhevm-0:4.16.0-13.el10_1.4.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-rhevm@4.16.0-13.el10_1.4?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-rsa-0:4.16.0-13.el10_1.4.noarch",
"product": {
"name": "fence-agents-rsa-0:4.16.0-13.el10_1.4.noarch",
"product_id": "fence-agents-rsa-0:4.16.0-13.el10_1.4.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-rsa@4.16.0-13.el10_1.4?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-rsb-0:4.16.0-13.el10_1.4.noarch",
"product": {
"name": "fence-agents-rsb-0:4.16.0-13.el10_1.4.noarch",
"product_id": "fence-agents-rsb-0:4.16.0-13.el10_1.4.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-rsb@4.16.0-13.el10_1.4?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-sbd-0:4.16.0-13.el10_1.4.noarch",
"product": {
"name": "fence-agents-sbd-0:4.16.0-13.el10_1.4.noarch",
"product_id": "fence-agents-sbd-0:4.16.0-13.el10_1.4.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-sbd@4.16.0-13.el10_1.4?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-scsi-0:4.16.0-13.el10_1.4.noarch",
"product": {
"name": "fence-agents-scsi-0:4.16.0-13.el10_1.4.noarch",
"product_id": "fence-agents-scsi-0:4.16.0-13.el10_1.4.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-scsi@4.16.0-13.el10_1.4?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-virsh-0:4.16.0-13.el10_1.4.noarch",
"product": {
"name": "fence-agents-virsh-0:4.16.0-13.el10_1.4.noarch",
"product_id": "fence-agents-virsh-0:4.16.0-13.el10_1.4.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-virsh@4.16.0-13.el10_1.4?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-vmware-rest-0:4.16.0-13.el10_1.4.noarch",
"product": {
"name": "fence-agents-vmware-rest-0:4.16.0-13.el10_1.4.noarch",
"product_id": "fence-agents-vmware-rest-0:4.16.0-13.el10_1.4.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-vmware-rest@4.16.0-13.el10_1.4?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-vmware-soap-0:4.16.0-13.el10_1.4.noarch",
"product": {
"name": "fence-agents-vmware-soap-0:4.16.0-13.el10_1.4.noarch",
"product_id": "fence-agents-vmware-soap-0:4.16.0-13.el10_1.4.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-vmware-soap@4.16.0-13.el10_1.4?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-wti-0:4.16.0-13.el10_1.4.noarch",
"product": {
"name": "fence-agents-wti-0:4.16.0-13.el10_1.4.noarch",
"product_id": "fence-agents-wti-0:4.16.0-13.el10_1.4.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-wti@4.16.0-13.el10_1.4?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-0:4.16.0-13.el10_1.4.src as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:fence-agents-0:4.16.0-13.el10_1.4.src"
},
"product_reference": "fence-agents-0:4.16.0-13.el10_1.4.src",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-aliyun-0:4.16.0-13.el10_1.4.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:fence-agents-aliyun-0:4.16.0-13.el10_1.4.x86_64"
},
"product_reference": "fence-agents-aliyun-0:4.16.0-13.el10_1.4.x86_64",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-all-0:4.16.0-13.el10_1.4.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:fence-agents-all-0:4.16.0-13.el10_1.4.aarch64"
},
"product_reference": "fence-agents-all-0:4.16.0-13.el10_1.4.aarch64",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-all-0:4.16.0-13.el10_1.4.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:fence-agents-all-0:4.16.0-13.el10_1.4.ppc64le"
},
"product_reference": "fence-agents-all-0:4.16.0-13.el10_1.4.ppc64le",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-all-0:4.16.0-13.el10_1.4.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:fence-agents-all-0:4.16.0-13.el10_1.4.s390x"
},
"product_reference": "fence-agents-all-0:4.16.0-13.el10_1.4.s390x",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-all-0:4.16.0-13.el10_1.4.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:fence-agents-all-0:4.16.0-13.el10_1.4.x86_64"
},
"product_reference": "fence-agents-all-0:4.16.0-13.el10_1.4.x86_64",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-amt-ws-0:4.16.0-13.el10_1.4.noarch as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:fence-agents-amt-ws-0:4.16.0-13.el10_1.4.noarch"
},
"product_reference": "fence-agents-amt-ws-0:4.16.0-13.el10_1.4.noarch",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-apc-0:4.16.0-13.el10_1.4.noarch as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:fence-agents-apc-0:4.16.0-13.el10_1.4.noarch"
},
"product_reference": "fence-agents-apc-0:4.16.0-13.el10_1.4.noarch",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-apc-snmp-0:4.16.0-13.el10_1.4.noarch as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:fence-agents-apc-snmp-0:4.16.0-13.el10_1.4.noarch"
},
"product_reference": "fence-agents-apc-snmp-0:4.16.0-13.el10_1.4.noarch",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-aws-0:4.16.0-13.el10_1.4.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:fence-agents-aws-0:4.16.0-13.el10_1.4.x86_64"
},
"product_reference": "fence-agents-aws-0:4.16.0-13.el10_1.4.x86_64",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-azure-arm-0:4.16.0-13.el10_1.4.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:fence-agents-azure-arm-0:4.16.0-13.el10_1.4.x86_64"
},
"product_reference": "fence-agents-azure-arm-0:4.16.0-13.el10_1.4.x86_64",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-bladecenter-0:4.16.0-13.el10_1.4.noarch as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:fence-agents-bladecenter-0:4.16.0-13.el10_1.4.noarch"
},
"product_reference": "fence-agents-bladecenter-0:4.16.0-13.el10_1.4.noarch",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-brocade-0:4.16.0-13.el10_1.4.noarch as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:fence-agents-brocade-0:4.16.0-13.el10_1.4.noarch"
},
"product_reference": "fence-agents-brocade-0:4.16.0-13.el10_1.4.noarch",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-cisco-mds-0:4.16.0-13.el10_1.4.noarch as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:fence-agents-cisco-mds-0:4.16.0-13.el10_1.4.noarch"
},
"product_reference": "fence-agents-cisco-mds-0:4.16.0-13.el10_1.4.noarch",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-cisco-ucs-0:4.16.0-13.el10_1.4.noarch as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:fence-agents-cisco-ucs-0:4.16.0-13.el10_1.4.noarch"
},
"product_reference": "fence-agents-cisco-ucs-0:4.16.0-13.el10_1.4.noarch",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-common-0:4.16.0-13.el10_1.4.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:fence-agents-common-0:4.16.0-13.el10_1.4.aarch64"
},
"product_reference": "fence-agents-common-0:4.16.0-13.el10_1.4.aarch64",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-common-0:4.16.0-13.el10_1.4.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:fence-agents-common-0:4.16.0-13.el10_1.4.ppc64le"
},
"product_reference": "fence-agents-common-0:4.16.0-13.el10_1.4.ppc64le",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-common-0:4.16.0-13.el10_1.4.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:fence-agents-common-0:4.16.0-13.el10_1.4.s390x"
},
"product_reference": "fence-agents-common-0:4.16.0-13.el10_1.4.s390x",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-common-0:4.16.0-13.el10_1.4.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:fence-agents-common-0:4.16.0-13.el10_1.4.x86_64"
},
"product_reference": "fence-agents-common-0:4.16.0-13.el10_1.4.x86_64",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-common-debuginfo-0:4.16.0-13.el10_1.4.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:fence-agents-common-debuginfo-0:4.16.0-13.el10_1.4.aarch64"
},
"product_reference": "fence-agents-common-debuginfo-0:4.16.0-13.el10_1.4.aarch64",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-common-debuginfo-0:4.16.0-13.el10_1.4.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:fence-agents-common-debuginfo-0:4.16.0-13.el10_1.4.ppc64le"
},
"product_reference": "fence-agents-common-debuginfo-0:4.16.0-13.el10_1.4.ppc64le",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-common-debuginfo-0:4.16.0-13.el10_1.4.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:fence-agents-common-debuginfo-0:4.16.0-13.el10_1.4.s390x"
},
"product_reference": "fence-agents-common-debuginfo-0:4.16.0-13.el10_1.4.s390x",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-common-debuginfo-0:4.16.0-13.el10_1.4.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:fence-agents-common-debuginfo-0:4.16.0-13.el10_1.4.x86_64"
},
"product_reference": "fence-agents-common-debuginfo-0:4.16.0-13.el10_1.4.x86_64",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-debuginfo-0:4.16.0-13.el10_1.4.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:fence-agents-debuginfo-0:4.16.0-13.el10_1.4.aarch64"
},
"product_reference": "fence-agents-debuginfo-0:4.16.0-13.el10_1.4.aarch64",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-debuginfo-0:4.16.0-13.el10_1.4.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:fence-agents-debuginfo-0:4.16.0-13.el10_1.4.ppc64le"
},
"product_reference": "fence-agents-debuginfo-0:4.16.0-13.el10_1.4.ppc64le",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-debuginfo-0:4.16.0-13.el10_1.4.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:fence-agents-debuginfo-0:4.16.0-13.el10_1.4.s390x"
},
"product_reference": "fence-agents-debuginfo-0:4.16.0-13.el10_1.4.s390x",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-debuginfo-0:4.16.0-13.el10_1.4.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:fence-agents-debuginfo-0:4.16.0-13.el10_1.4.x86_64"
},
"product_reference": "fence-agents-debuginfo-0:4.16.0-13.el10_1.4.x86_64",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-debugsource-0:4.16.0-13.el10_1.4.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:fence-agents-debugsource-0:4.16.0-13.el10_1.4.aarch64"
},
"product_reference": "fence-agents-debugsource-0:4.16.0-13.el10_1.4.aarch64",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-debugsource-0:4.16.0-13.el10_1.4.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:fence-agents-debugsource-0:4.16.0-13.el10_1.4.ppc64le"
},
"product_reference": "fence-agents-debugsource-0:4.16.0-13.el10_1.4.ppc64le",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-debugsource-0:4.16.0-13.el10_1.4.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:fence-agents-debugsource-0:4.16.0-13.el10_1.4.s390x"
},
"product_reference": "fence-agents-debugsource-0:4.16.0-13.el10_1.4.s390x",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-debugsource-0:4.16.0-13.el10_1.4.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:fence-agents-debugsource-0:4.16.0-13.el10_1.4.x86_64"
},
"product_reference": "fence-agents-debugsource-0:4.16.0-13.el10_1.4.x86_64",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-drac5-0:4.16.0-13.el10_1.4.noarch as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:fence-agents-drac5-0:4.16.0-13.el10_1.4.noarch"
},
"product_reference": "fence-agents-drac5-0:4.16.0-13.el10_1.4.noarch",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-eaton-snmp-0:4.16.0-13.el10_1.4.noarch as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:fence-agents-eaton-snmp-0:4.16.0-13.el10_1.4.noarch"
},
"product_reference": "fence-agents-eaton-snmp-0:4.16.0-13.el10_1.4.noarch",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-emerson-0:4.16.0-13.el10_1.4.noarch as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:fence-agents-emerson-0:4.16.0-13.el10_1.4.noarch"
},
"product_reference": "fence-agents-emerson-0:4.16.0-13.el10_1.4.noarch",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-eps-0:4.16.0-13.el10_1.4.noarch as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:fence-agents-eps-0:4.16.0-13.el10_1.4.noarch"
},
"product_reference": "fence-agents-eps-0:4.16.0-13.el10_1.4.noarch",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-gce-0:4.16.0-13.el10_1.4.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:fence-agents-gce-0:4.16.0-13.el10_1.4.x86_64"
},
"product_reference": "fence-agents-gce-0:4.16.0-13.el10_1.4.x86_64",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-heuristics-ping-0:4.16.0-13.el10_1.4.noarch as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:fence-agents-heuristics-ping-0:4.16.0-13.el10_1.4.noarch"
},
"product_reference": "fence-agents-heuristics-ping-0:4.16.0-13.el10_1.4.noarch",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-hpblade-0:4.16.0-13.el10_1.4.noarch as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:fence-agents-hpblade-0:4.16.0-13.el10_1.4.noarch"
},
"product_reference": "fence-agents-hpblade-0:4.16.0-13.el10_1.4.noarch",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-ibm-powervs-0:4.16.0-13.el10_1.4.noarch as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:fence-agents-ibm-powervs-0:4.16.0-13.el10_1.4.noarch"
},
"product_reference": "fence-agents-ibm-powervs-0:4.16.0-13.el10_1.4.noarch",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-ibm-vpc-0:4.16.0-13.el10_1.4.noarch as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:fence-agents-ibm-vpc-0:4.16.0-13.el10_1.4.noarch"
},
"product_reference": "fence-agents-ibm-vpc-0:4.16.0-13.el10_1.4.noarch",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-ibmblade-0:4.16.0-13.el10_1.4.noarch as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:fence-agents-ibmblade-0:4.16.0-13.el10_1.4.noarch"
},
"product_reference": "fence-agents-ibmblade-0:4.16.0-13.el10_1.4.noarch",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-ifmib-0:4.16.0-13.el10_1.4.noarch as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:fence-agents-ifmib-0:4.16.0-13.el10_1.4.noarch"
},
"product_reference": "fence-agents-ifmib-0:4.16.0-13.el10_1.4.noarch",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-ilo-moonshot-0:4.16.0-13.el10_1.4.noarch as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:fence-agents-ilo-moonshot-0:4.16.0-13.el10_1.4.noarch"
},
"product_reference": "fence-agents-ilo-moonshot-0:4.16.0-13.el10_1.4.noarch",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-ilo-mp-0:4.16.0-13.el10_1.4.noarch as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:fence-agents-ilo-mp-0:4.16.0-13.el10_1.4.noarch"
},
"product_reference": "fence-agents-ilo-mp-0:4.16.0-13.el10_1.4.noarch",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-ilo-ssh-0:4.16.0-13.el10_1.4.noarch as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:fence-agents-ilo-ssh-0:4.16.0-13.el10_1.4.noarch"
},
"product_reference": "fence-agents-ilo-ssh-0:4.16.0-13.el10_1.4.noarch",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-ilo2-0:4.16.0-13.el10_1.4.noarch as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:fence-agents-ilo2-0:4.16.0-13.el10_1.4.noarch"
},
"product_reference": "fence-agents-ilo2-0:4.16.0-13.el10_1.4.noarch",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-intelmodular-0:4.16.0-13.el10_1.4.noarch as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:fence-agents-intelmodular-0:4.16.0-13.el10_1.4.noarch"
},
"product_reference": "fence-agents-intelmodular-0:4.16.0-13.el10_1.4.noarch",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-ipdu-0:4.16.0-13.el10_1.4.noarch as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:fence-agents-ipdu-0:4.16.0-13.el10_1.4.noarch"
},
"product_reference": "fence-agents-ipdu-0:4.16.0-13.el10_1.4.noarch",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-ipmilan-0:4.16.0-13.el10_1.4.noarch as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:fence-agents-ipmilan-0:4.16.0-13.el10_1.4.noarch"
},
"product_reference": "fence-agents-ipmilan-0:4.16.0-13.el10_1.4.noarch",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-kdump-0:4.16.0-13.el10_1.4.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:fence-agents-kdump-0:4.16.0-13.el10_1.4.aarch64"
},
"product_reference": "fence-agents-kdump-0:4.16.0-13.el10_1.4.aarch64",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-kdump-0:4.16.0-13.el10_1.4.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:fence-agents-kdump-0:4.16.0-13.el10_1.4.ppc64le"
},
"product_reference": "fence-agents-kdump-0:4.16.0-13.el10_1.4.ppc64le",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-kdump-0:4.16.0-13.el10_1.4.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:fence-agents-kdump-0:4.16.0-13.el10_1.4.s390x"
},
"product_reference": "fence-agents-kdump-0:4.16.0-13.el10_1.4.s390x",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-kdump-0:4.16.0-13.el10_1.4.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:fence-agents-kdump-0:4.16.0-13.el10_1.4.x86_64"
},
"product_reference": "fence-agents-kdump-0:4.16.0-13.el10_1.4.x86_64",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-kdump-debuginfo-0:4.16.0-13.el10_1.4.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:fence-agents-kdump-debuginfo-0:4.16.0-13.el10_1.4.aarch64"
},
"product_reference": "fence-agents-kdump-debuginfo-0:4.16.0-13.el10_1.4.aarch64",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-kdump-debuginfo-0:4.16.0-13.el10_1.4.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:fence-agents-kdump-debuginfo-0:4.16.0-13.el10_1.4.ppc64le"
},
"product_reference": "fence-agents-kdump-debuginfo-0:4.16.0-13.el10_1.4.ppc64le",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-kdump-debuginfo-0:4.16.0-13.el10_1.4.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:fence-agents-kdump-debuginfo-0:4.16.0-13.el10_1.4.s390x"
},
"product_reference": "fence-agents-kdump-debuginfo-0:4.16.0-13.el10_1.4.s390x",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-kdump-debuginfo-0:4.16.0-13.el10_1.4.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:fence-agents-kdump-debuginfo-0:4.16.0-13.el10_1.4.x86_64"
},
"product_reference": "fence-agents-kdump-debuginfo-0:4.16.0-13.el10_1.4.x86_64",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-kubevirt-0:4.16.0-13.el10_1.4.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:fence-agents-kubevirt-0:4.16.0-13.el10_1.4.aarch64"
},
"product_reference": "fence-agents-kubevirt-0:4.16.0-13.el10_1.4.aarch64",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-kubevirt-0:4.16.0-13.el10_1.4.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:fence-agents-kubevirt-0:4.16.0-13.el10_1.4.ppc64le"
},
"product_reference": "fence-agents-kubevirt-0:4.16.0-13.el10_1.4.ppc64le",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-kubevirt-0:4.16.0-13.el10_1.4.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:fence-agents-kubevirt-0:4.16.0-13.el10_1.4.s390x"
},
"product_reference": "fence-agents-kubevirt-0:4.16.0-13.el10_1.4.s390x",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-kubevirt-0:4.16.0-13.el10_1.4.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:fence-agents-kubevirt-0:4.16.0-13.el10_1.4.x86_64"
},
"product_reference": "fence-agents-kubevirt-0:4.16.0-13.el10_1.4.x86_64",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-lpar-0:4.16.0-13.el10_1.4.noarch as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:fence-agents-lpar-0:4.16.0-13.el10_1.4.noarch"
},
"product_reference": "fence-agents-lpar-0:4.16.0-13.el10_1.4.noarch",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-mpath-0:4.16.0-13.el10_1.4.noarch as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:fence-agents-mpath-0:4.16.0-13.el10_1.4.noarch"
},
"product_reference": "fence-agents-mpath-0:4.16.0-13.el10_1.4.noarch",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-nutanix-ahv-0:4.16.0-13.el10_1.4.noarch as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:fence-agents-nutanix-ahv-0:4.16.0-13.el10_1.4.noarch"
},
"product_reference": "fence-agents-nutanix-ahv-0:4.16.0-13.el10_1.4.noarch",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-openstack-0:4.16.0-13.el10_1.4.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:fence-agents-openstack-0:4.16.0-13.el10_1.4.ppc64le"
},
"product_reference": "fence-agents-openstack-0:4.16.0-13.el10_1.4.ppc64le",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-openstack-0:4.16.0-13.el10_1.4.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:fence-agents-openstack-0:4.16.0-13.el10_1.4.x86_64"
},
"product_reference": "fence-agents-openstack-0:4.16.0-13.el10_1.4.x86_64",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-redfish-0:4.16.0-13.el10_1.4.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:fence-agents-redfish-0:4.16.0-13.el10_1.4.aarch64"
},
"product_reference": "fence-agents-redfish-0:4.16.0-13.el10_1.4.aarch64",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-redfish-0:4.16.0-13.el10_1.4.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:fence-agents-redfish-0:4.16.0-13.el10_1.4.ppc64le"
},
"product_reference": "fence-agents-redfish-0:4.16.0-13.el10_1.4.ppc64le",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-redfish-0:4.16.0-13.el10_1.4.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:fence-agents-redfish-0:4.16.0-13.el10_1.4.s390x"
},
"product_reference": "fence-agents-redfish-0:4.16.0-13.el10_1.4.s390x",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-redfish-0:4.16.0-13.el10_1.4.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:fence-agents-redfish-0:4.16.0-13.el10_1.4.x86_64"
},
"product_reference": "fence-agents-redfish-0:4.16.0-13.el10_1.4.x86_64",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-rhevm-0:4.16.0-13.el10_1.4.noarch as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:fence-agents-rhevm-0:4.16.0-13.el10_1.4.noarch"
},
"product_reference": "fence-agents-rhevm-0:4.16.0-13.el10_1.4.noarch",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-rsa-0:4.16.0-13.el10_1.4.noarch as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:fence-agents-rsa-0:4.16.0-13.el10_1.4.noarch"
},
"product_reference": "fence-agents-rsa-0:4.16.0-13.el10_1.4.noarch",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-rsb-0:4.16.0-13.el10_1.4.noarch as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:fence-agents-rsb-0:4.16.0-13.el10_1.4.noarch"
},
"product_reference": "fence-agents-rsb-0:4.16.0-13.el10_1.4.noarch",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-sbd-0:4.16.0-13.el10_1.4.noarch as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:fence-agents-sbd-0:4.16.0-13.el10_1.4.noarch"
},
"product_reference": "fence-agents-sbd-0:4.16.0-13.el10_1.4.noarch",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-scsi-0:4.16.0-13.el10_1.4.noarch as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:fence-agents-scsi-0:4.16.0-13.el10_1.4.noarch"
},
"product_reference": "fence-agents-scsi-0:4.16.0-13.el10_1.4.noarch",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-virsh-0:4.16.0-13.el10_1.4.noarch as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:fence-agents-virsh-0:4.16.0-13.el10_1.4.noarch"
},
"product_reference": "fence-agents-virsh-0:4.16.0-13.el10_1.4.noarch",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-vmware-rest-0:4.16.0-13.el10_1.4.noarch as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:fence-agents-vmware-rest-0:4.16.0-13.el10_1.4.noarch"
},
"product_reference": "fence-agents-vmware-rest-0:4.16.0-13.el10_1.4.noarch",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-vmware-soap-0:4.16.0-13.el10_1.4.noarch as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:fence-agents-vmware-soap-0:4.16.0-13.el10_1.4.noarch"
},
"product_reference": "fence-agents-vmware-soap-0:4.16.0-13.el10_1.4.noarch",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-wti-0:4.16.0-13.el10_1.4.noarch as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:fence-agents-wti-0:4.16.0-13.el10_1.4.noarch"
},
"product_reference": "fence-agents-wti-0:4.16.0-13.el10_1.4.noarch",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-zvm-0:4.16.0-13.el10_1.4.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:fence-agents-zvm-0:4.16.0-13.el10_1.4.s390x"
},
"product_reference": "fence-agents-zvm-0:4.16.0-13.el10_1.4.s390x",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-virt-0:4.16.0-13.el10_1.4.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:fence-virt-0:4.16.0-13.el10_1.4.x86_64"
},
"product_reference": "fence-virt-0:4.16.0-13.el10_1.4.x86_64",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-virt-debuginfo-0:4.16.0-13.el10_1.4.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:fence-virt-debuginfo-0:4.16.0-13.el10_1.4.x86_64"
},
"product_reference": "fence-virt-debuginfo-0:4.16.0-13.el10_1.4.x86_64",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-virtd-0:4.16.0-13.el10_1.4.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:fence-virtd-0:4.16.0-13.el10_1.4.x86_64"
},
"product_reference": "fence-virtd-0:4.16.0-13.el10_1.4.x86_64",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-virtd-cpg-0:4.16.0-13.el10_1.4.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:fence-virtd-cpg-0:4.16.0-13.el10_1.4.x86_64"
},
"product_reference": "fence-virtd-cpg-0:4.16.0-13.el10_1.4.x86_64",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-virtd-cpg-debuginfo-0:4.16.0-13.el10_1.4.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:fence-virtd-cpg-debuginfo-0:4.16.0-13.el10_1.4.x86_64"
},
"product_reference": "fence-virtd-cpg-debuginfo-0:4.16.0-13.el10_1.4.x86_64",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-virtd-debuginfo-0:4.16.0-13.el10_1.4.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:fence-virtd-debuginfo-0:4.16.0-13.el10_1.4.x86_64"
},
"product_reference": "fence-virtd-debuginfo-0:4.16.0-13.el10_1.4.x86_64",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-virtd-libvirt-0:4.16.0-13.el10_1.4.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:fence-virtd-libvirt-0:4.16.0-13.el10_1.4.x86_64"
},
"product_reference": "fence-virtd-libvirt-0:4.16.0-13.el10_1.4.x86_64",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-virtd-libvirt-debuginfo-0:4.16.0-13.el10_1.4.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:fence-virtd-libvirt-debuginfo-0:4.16.0-13.el10_1.4.x86_64"
},
"product_reference": "fence-virtd-libvirt-debuginfo-0:4.16.0-13.el10_1.4.x86_64",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-virtd-multicast-0:4.16.0-13.el10_1.4.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:fence-virtd-multicast-0:4.16.0-13.el10_1.4.x86_64"
},
"product_reference": "fence-virtd-multicast-0:4.16.0-13.el10_1.4.x86_64",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-virtd-multicast-debuginfo-0:4.16.0-13.el10_1.4.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:fence-virtd-multicast-debuginfo-0:4.16.0-13.el10_1.4.x86_64"
},
"product_reference": "fence-virtd-multicast-debuginfo-0:4.16.0-13.el10_1.4.x86_64",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-virtd-serial-0:4.16.0-13.el10_1.4.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:fence-virtd-serial-0:4.16.0-13.el10_1.4.x86_64"
},
"product_reference": "fence-virtd-serial-0:4.16.0-13.el10_1.4.x86_64",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-virtd-serial-debuginfo-0:4.16.0-13.el10_1.4.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:fence-virtd-serial-debuginfo-0:4.16.0-13.el10_1.4.x86_64"
},
"product_reference": "fence-virtd-serial-debuginfo-0:4.16.0-13.el10_1.4.x86_64",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-virtd-tcp-0:4.16.0-13.el10_1.4.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:fence-virtd-tcp-0:4.16.0-13.el10_1.4.x86_64"
},
"product_reference": "fence-virtd-tcp-0:4.16.0-13.el10_1.4.x86_64",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-virtd-tcp-debuginfo-0:4.16.0-13.el10_1.4.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:fence-virtd-tcp-debuginfo-0:4.16.0-13.el10_1.4.x86_64"
},
"product_reference": "fence-virtd-tcp-debuginfo-0:4.16.0-13.el10_1.4.x86_64",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ha-cloud-support-0:4.16.0-13.el10_1.4.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:ha-cloud-support-0:4.16.0-13.el10_1.4.x86_64"
},
"product_reference": "ha-cloud-support-0:4.16.0-13.el10_1.4.x86_64",
"relates_to_product_reference": "AppStream-10.1.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ha-cloud-support-debuginfo-0:4.16.0-13.el10_1.4.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.1.Z:ha-cloud-support-debuginfo-0:4.16.0-13.el10_1.4.x86_64"
},
"product_reference": "ha-cloud-support-debuginfo-0:4.16.0-13.el10_1.4.x86_64",
"relates_to_product_reference": "AppStream-10.1.Z"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-30922",
"cwe": {
"id": "CWE-835",
"name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
},
"discovery_date": "2026-03-18T04:02:45.401296+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2448553"
}
],
"notes": [
{
"category": "description",
"text": "An unbounded recursion flaw has been discovered in the pypi pyasn1 library. This uncontrolled recursion occurs when decoding ASN.1 data with deeply nested structures. An attacker can supply a crafted payload containing nested SEQUENCE (0x30) or SET (0x31) tags with Indefinite Length (0x80) markers. This forces the decoder to recursively call itself until the Python interpreter crashes with a RecursionError or consumes all available memory (OOM), crashing the host application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "pyasn1: pyasn1 Vulnerable to Denial of Service via Unbounded Recursion",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.1.Z:fence-agents-0:4.16.0-13.el10_1.4.src",
"AppStream-10.1.Z:fence-agents-aliyun-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-agents-all-0:4.16.0-13.el10_1.4.aarch64",
"AppStream-10.1.Z:fence-agents-all-0:4.16.0-13.el10_1.4.ppc64le",
"AppStream-10.1.Z:fence-agents-all-0:4.16.0-13.el10_1.4.s390x",
"AppStream-10.1.Z:fence-agents-all-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-agents-amt-ws-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-apc-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-apc-snmp-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-aws-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-agents-azure-arm-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-agents-bladecenter-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-brocade-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-cisco-mds-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-cisco-ucs-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-common-0:4.16.0-13.el10_1.4.aarch64",
"AppStream-10.1.Z:fence-agents-common-0:4.16.0-13.el10_1.4.ppc64le",
"AppStream-10.1.Z:fence-agents-common-0:4.16.0-13.el10_1.4.s390x",
"AppStream-10.1.Z:fence-agents-common-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-agents-common-debuginfo-0:4.16.0-13.el10_1.4.aarch64",
"AppStream-10.1.Z:fence-agents-common-debuginfo-0:4.16.0-13.el10_1.4.ppc64le",
"AppStream-10.1.Z:fence-agents-common-debuginfo-0:4.16.0-13.el10_1.4.s390x",
"AppStream-10.1.Z:fence-agents-common-debuginfo-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-agents-debuginfo-0:4.16.0-13.el10_1.4.aarch64",
"AppStream-10.1.Z:fence-agents-debuginfo-0:4.16.0-13.el10_1.4.ppc64le",
"AppStream-10.1.Z:fence-agents-debuginfo-0:4.16.0-13.el10_1.4.s390x",
"AppStream-10.1.Z:fence-agents-debuginfo-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-agents-debugsource-0:4.16.0-13.el10_1.4.aarch64",
"AppStream-10.1.Z:fence-agents-debugsource-0:4.16.0-13.el10_1.4.ppc64le",
"AppStream-10.1.Z:fence-agents-debugsource-0:4.16.0-13.el10_1.4.s390x",
"AppStream-10.1.Z:fence-agents-debugsource-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-agents-drac5-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-eaton-snmp-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-emerson-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-eps-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-gce-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-agents-heuristics-ping-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-hpblade-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-ibm-powervs-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-ibm-vpc-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-ibmblade-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-ifmib-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-ilo-moonshot-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-ilo-mp-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-ilo-ssh-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-ilo2-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-intelmodular-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-ipdu-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-ipmilan-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-kdump-0:4.16.0-13.el10_1.4.aarch64",
"AppStream-10.1.Z:fence-agents-kdump-0:4.16.0-13.el10_1.4.ppc64le",
"AppStream-10.1.Z:fence-agents-kdump-0:4.16.0-13.el10_1.4.s390x",
"AppStream-10.1.Z:fence-agents-kdump-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-agents-kdump-debuginfo-0:4.16.0-13.el10_1.4.aarch64",
"AppStream-10.1.Z:fence-agents-kdump-debuginfo-0:4.16.0-13.el10_1.4.ppc64le",
"AppStream-10.1.Z:fence-agents-kdump-debuginfo-0:4.16.0-13.el10_1.4.s390x",
"AppStream-10.1.Z:fence-agents-kdump-debuginfo-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-agents-kubevirt-0:4.16.0-13.el10_1.4.aarch64",
"AppStream-10.1.Z:fence-agents-kubevirt-0:4.16.0-13.el10_1.4.ppc64le",
"AppStream-10.1.Z:fence-agents-kubevirt-0:4.16.0-13.el10_1.4.s390x",
"AppStream-10.1.Z:fence-agents-kubevirt-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-agents-lpar-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-mpath-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-nutanix-ahv-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-openstack-0:4.16.0-13.el10_1.4.ppc64le",
"AppStream-10.1.Z:fence-agents-openstack-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-agents-redfish-0:4.16.0-13.el10_1.4.aarch64",
"AppStream-10.1.Z:fence-agents-redfish-0:4.16.0-13.el10_1.4.ppc64le",
"AppStream-10.1.Z:fence-agents-redfish-0:4.16.0-13.el10_1.4.s390x",
"AppStream-10.1.Z:fence-agents-redfish-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-agents-rhevm-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-rsa-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-rsb-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-sbd-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-scsi-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-virsh-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-vmware-rest-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-vmware-soap-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-wti-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-zvm-0:4.16.0-13.el10_1.4.s390x",
"AppStream-10.1.Z:fence-virt-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-virt-debuginfo-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-virtd-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-virtd-cpg-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-virtd-cpg-debuginfo-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-virtd-debuginfo-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-virtd-libvirt-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-virtd-libvirt-debuginfo-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-virtd-multicast-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-virtd-multicast-debuginfo-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-virtd-serial-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-virtd-serial-debuginfo-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-virtd-tcp-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-virtd-tcp-debuginfo-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:ha-cloud-support-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:ha-cloud-support-debuginfo-0:4.16.0-13.el10_1.4.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-30922"
},
{
"category": "external",
"summary": "RHBZ#2448553",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2448553"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-30922",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-30922"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-30922",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-30922"
},
{
"category": "external",
"summary": "https://github.com/pyasn1/pyasn1/commit/25ad481c19fdb006e20485ef3fc2e5b3eff30ef0",
"url": "https://github.com/pyasn1/pyasn1/commit/25ad481c19fdb006e20485ef3fc2e5b3eff30ef0"
},
{
"category": "external",
"summary": "https://github.com/pyasn1/pyasn1/security/advisories/GHSA-jr27-m4p2-rc6r",
"url": "https://github.com/pyasn1/pyasn1/security/advisories/GHSA-jr27-m4p2-rc6r"
}
],
"release_date": "2026-03-18T02:29:45.857000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-06T06:40:52+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.1.Z:fence-agents-0:4.16.0-13.el10_1.4.src",
"AppStream-10.1.Z:fence-agents-aliyun-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-agents-all-0:4.16.0-13.el10_1.4.aarch64",
"AppStream-10.1.Z:fence-agents-all-0:4.16.0-13.el10_1.4.ppc64le",
"AppStream-10.1.Z:fence-agents-all-0:4.16.0-13.el10_1.4.s390x",
"AppStream-10.1.Z:fence-agents-all-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-agents-amt-ws-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-apc-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-apc-snmp-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-aws-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-agents-azure-arm-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-agents-bladecenter-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-brocade-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-cisco-mds-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-cisco-ucs-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-common-0:4.16.0-13.el10_1.4.aarch64",
"AppStream-10.1.Z:fence-agents-common-0:4.16.0-13.el10_1.4.ppc64le",
"AppStream-10.1.Z:fence-agents-common-0:4.16.0-13.el10_1.4.s390x",
"AppStream-10.1.Z:fence-agents-common-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-agents-common-debuginfo-0:4.16.0-13.el10_1.4.aarch64",
"AppStream-10.1.Z:fence-agents-common-debuginfo-0:4.16.0-13.el10_1.4.ppc64le",
"AppStream-10.1.Z:fence-agents-common-debuginfo-0:4.16.0-13.el10_1.4.s390x",
"AppStream-10.1.Z:fence-agents-common-debuginfo-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-agents-debuginfo-0:4.16.0-13.el10_1.4.aarch64",
"AppStream-10.1.Z:fence-agents-debuginfo-0:4.16.0-13.el10_1.4.ppc64le",
"AppStream-10.1.Z:fence-agents-debuginfo-0:4.16.0-13.el10_1.4.s390x",
"AppStream-10.1.Z:fence-agents-debuginfo-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-agents-debugsource-0:4.16.0-13.el10_1.4.aarch64",
"AppStream-10.1.Z:fence-agents-debugsource-0:4.16.0-13.el10_1.4.ppc64le",
"AppStream-10.1.Z:fence-agents-debugsource-0:4.16.0-13.el10_1.4.s390x",
"AppStream-10.1.Z:fence-agents-debugsource-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-agents-drac5-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-eaton-snmp-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-emerson-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-eps-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-gce-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-agents-heuristics-ping-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-hpblade-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-ibm-powervs-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-ibm-vpc-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-ibmblade-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-ifmib-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-ilo-moonshot-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-ilo-mp-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-ilo-ssh-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-ilo2-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-intelmodular-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-ipdu-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-ipmilan-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-kdump-0:4.16.0-13.el10_1.4.aarch64",
"AppStream-10.1.Z:fence-agents-kdump-0:4.16.0-13.el10_1.4.ppc64le",
"AppStream-10.1.Z:fence-agents-kdump-0:4.16.0-13.el10_1.4.s390x",
"AppStream-10.1.Z:fence-agents-kdump-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-agents-kdump-debuginfo-0:4.16.0-13.el10_1.4.aarch64",
"AppStream-10.1.Z:fence-agents-kdump-debuginfo-0:4.16.0-13.el10_1.4.ppc64le",
"AppStream-10.1.Z:fence-agents-kdump-debuginfo-0:4.16.0-13.el10_1.4.s390x",
"AppStream-10.1.Z:fence-agents-kdump-debuginfo-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-agents-kubevirt-0:4.16.0-13.el10_1.4.aarch64",
"AppStream-10.1.Z:fence-agents-kubevirt-0:4.16.0-13.el10_1.4.ppc64le",
"AppStream-10.1.Z:fence-agents-kubevirt-0:4.16.0-13.el10_1.4.s390x",
"AppStream-10.1.Z:fence-agents-kubevirt-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-agents-lpar-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-mpath-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-nutanix-ahv-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-openstack-0:4.16.0-13.el10_1.4.ppc64le",
"AppStream-10.1.Z:fence-agents-openstack-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-agents-redfish-0:4.16.0-13.el10_1.4.aarch64",
"AppStream-10.1.Z:fence-agents-redfish-0:4.16.0-13.el10_1.4.ppc64le",
"AppStream-10.1.Z:fence-agents-redfish-0:4.16.0-13.el10_1.4.s390x",
"AppStream-10.1.Z:fence-agents-redfish-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-agents-rhevm-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-rsa-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-rsb-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-sbd-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-scsi-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-virsh-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-vmware-rest-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-vmware-soap-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-wti-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-zvm-0:4.16.0-13.el10_1.4.s390x",
"AppStream-10.1.Z:fence-virt-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-virt-debuginfo-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-virtd-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-virtd-cpg-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-virtd-cpg-debuginfo-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-virtd-debuginfo-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-virtd-libvirt-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-virtd-libvirt-debuginfo-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-virtd-multicast-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-virtd-multicast-debuginfo-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-virtd-serial-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-virtd-serial-debuginfo-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-virtd-tcp-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-virtd-tcp-debuginfo-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:ha-cloud-support-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:ha-cloud-support-debuginfo-0:4.16.0-13.el10_1.4.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:13916"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"AppStream-10.1.Z:fence-agents-0:4.16.0-13.el10_1.4.src",
"AppStream-10.1.Z:fence-agents-aliyun-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-agents-all-0:4.16.0-13.el10_1.4.aarch64",
"AppStream-10.1.Z:fence-agents-all-0:4.16.0-13.el10_1.4.ppc64le",
"AppStream-10.1.Z:fence-agents-all-0:4.16.0-13.el10_1.4.s390x",
"AppStream-10.1.Z:fence-agents-all-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-agents-amt-ws-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-apc-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-apc-snmp-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-aws-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-agents-azure-arm-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-agents-bladecenter-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-brocade-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-cisco-mds-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-cisco-ucs-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-common-0:4.16.0-13.el10_1.4.aarch64",
"AppStream-10.1.Z:fence-agents-common-0:4.16.0-13.el10_1.4.ppc64le",
"AppStream-10.1.Z:fence-agents-common-0:4.16.0-13.el10_1.4.s390x",
"AppStream-10.1.Z:fence-agents-common-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-agents-common-debuginfo-0:4.16.0-13.el10_1.4.aarch64",
"AppStream-10.1.Z:fence-agents-common-debuginfo-0:4.16.0-13.el10_1.4.ppc64le",
"AppStream-10.1.Z:fence-agents-common-debuginfo-0:4.16.0-13.el10_1.4.s390x",
"AppStream-10.1.Z:fence-agents-common-debuginfo-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-agents-debuginfo-0:4.16.0-13.el10_1.4.aarch64",
"AppStream-10.1.Z:fence-agents-debuginfo-0:4.16.0-13.el10_1.4.ppc64le",
"AppStream-10.1.Z:fence-agents-debuginfo-0:4.16.0-13.el10_1.4.s390x",
"AppStream-10.1.Z:fence-agents-debuginfo-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-agents-debugsource-0:4.16.0-13.el10_1.4.aarch64",
"AppStream-10.1.Z:fence-agents-debugsource-0:4.16.0-13.el10_1.4.ppc64le",
"AppStream-10.1.Z:fence-agents-debugsource-0:4.16.0-13.el10_1.4.s390x",
"AppStream-10.1.Z:fence-agents-debugsource-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-agents-drac5-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-eaton-snmp-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-emerson-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-eps-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-gce-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-agents-heuristics-ping-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-hpblade-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-ibm-powervs-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-ibm-vpc-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-ibmblade-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-ifmib-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-ilo-moonshot-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-ilo-mp-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-ilo-ssh-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-ilo2-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-intelmodular-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-ipdu-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-ipmilan-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-kdump-0:4.16.0-13.el10_1.4.aarch64",
"AppStream-10.1.Z:fence-agents-kdump-0:4.16.0-13.el10_1.4.ppc64le",
"AppStream-10.1.Z:fence-agents-kdump-0:4.16.0-13.el10_1.4.s390x",
"AppStream-10.1.Z:fence-agents-kdump-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-agents-kdump-debuginfo-0:4.16.0-13.el10_1.4.aarch64",
"AppStream-10.1.Z:fence-agents-kdump-debuginfo-0:4.16.0-13.el10_1.4.ppc64le",
"AppStream-10.1.Z:fence-agents-kdump-debuginfo-0:4.16.0-13.el10_1.4.s390x",
"AppStream-10.1.Z:fence-agents-kdump-debuginfo-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-agents-kubevirt-0:4.16.0-13.el10_1.4.aarch64",
"AppStream-10.1.Z:fence-agents-kubevirt-0:4.16.0-13.el10_1.4.ppc64le",
"AppStream-10.1.Z:fence-agents-kubevirt-0:4.16.0-13.el10_1.4.s390x",
"AppStream-10.1.Z:fence-agents-kubevirt-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-agents-lpar-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-mpath-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-nutanix-ahv-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-openstack-0:4.16.0-13.el10_1.4.ppc64le",
"AppStream-10.1.Z:fence-agents-openstack-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-agents-redfish-0:4.16.0-13.el10_1.4.aarch64",
"AppStream-10.1.Z:fence-agents-redfish-0:4.16.0-13.el10_1.4.ppc64le",
"AppStream-10.1.Z:fence-agents-redfish-0:4.16.0-13.el10_1.4.s390x",
"AppStream-10.1.Z:fence-agents-redfish-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-agents-rhevm-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-rsa-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-rsb-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-sbd-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-scsi-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-virsh-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-vmware-rest-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-vmware-soap-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-wti-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-zvm-0:4.16.0-13.el10_1.4.s390x",
"AppStream-10.1.Z:fence-virt-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-virt-debuginfo-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-virtd-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-virtd-cpg-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-virtd-cpg-debuginfo-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-virtd-debuginfo-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-virtd-libvirt-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-virtd-libvirt-debuginfo-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-virtd-multicast-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-virtd-multicast-debuginfo-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-virtd-serial-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-virtd-serial-debuginfo-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-virtd-tcp-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-virtd-tcp-debuginfo-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:ha-cloud-support-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:ha-cloud-support-debuginfo-0:4.16.0-13.el10_1.4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"AppStream-10.1.Z:fence-agents-0:4.16.0-13.el10_1.4.src",
"AppStream-10.1.Z:fence-agents-aliyun-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-agents-all-0:4.16.0-13.el10_1.4.aarch64",
"AppStream-10.1.Z:fence-agents-all-0:4.16.0-13.el10_1.4.ppc64le",
"AppStream-10.1.Z:fence-agents-all-0:4.16.0-13.el10_1.4.s390x",
"AppStream-10.1.Z:fence-agents-all-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-agents-amt-ws-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-apc-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-apc-snmp-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-aws-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-agents-azure-arm-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-agents-bladecenter-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-brocade-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-cisco-mds-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-cisco-ucs-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-common-0:4.16.0-13.el10_1.4.aarch64",
"AppStream-10.1.Z:fence-agents-common-0:4.16.0-13.el10_1.4.ppc64le",
"AppStream-10.1.Z:fence-agents-common-0:4.16.0-13.el10_1.4.s390x",
"AppStream-10.1.Z:fence-agents-common-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-agents-common-debuginfo-0:4.16.0-13.el10_1.4.aarch64",
"AppStream-10.1.Z:fence-agents-common-debuginfo-0:4.16.0-13.el10_1.4.ppc64le",
"AppStream-10.1.Z:fence-agents-common-debuginfo-0:4.16.0-13.el10_1.4.s390x",
"AppStream-10.1.Z:fence-agents-common-debuginfo-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-agents-debuginfo-0:4.16.0-13.el10_1.4.aarch64",
"AppStream-10.1.Z:fence-agents-debuginfo-0:4.16.0-13.el10_1.4.ppc64le",
"AppStream-10.1.Z:fence-agents-debuginfo-0:4.16.0-13.el10_1.4.s390x",
"AppStream-10.1.Z:fence-agents-debuginfo-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-agents-debugsource-0:4.16.0-13.el10_1.4.aarch64",
"AppStream-10.1.Z:fence-agents-debugsource-0:4.16.0-13.el10_1.4.ppc64le",
"AppStream-10.1.Z:fence-agents-debugsource-0:4.16.0-13.el10_1.4.s390x",
"AppStream-10.1.Z:fence-agents-debugsource-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-agents-drac5-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-eaton-snmp-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-emerson-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-eps-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-gce-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-agents-heuristics-ping-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-hpblade-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-ibm-powervs-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-ibm-vpc-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-ibmblade-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-ifmib-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-ilo-moonshot-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-ilo-mp-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-ilo-ssh-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-ilo2-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-intelmodular-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-ipdu-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-ipmilan-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-kdump-0:4.16.0-13.el10_1.4.aarch64",
"AppStream-10.1.Z:fence-agents-kdump-0:4.16.0-13.el10_1.4.ppc64le",
"AppStream-10.1.Z:fence-agents-kdump-0:4.16.0-13.el10_1.4.s390x",
"AppStream-10.1.Z:fence-agents-kdump-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-agents-kdump-debuginfo-0:4.16.0-13.el10_1.4.aarch64",
"AppStream-10.1.Z:fence-agents-kdump-debuginfo-0:4.16.0-13.el10_1.4.ppc64le",
"AppStream-10.1.Z:fence-agents-kdump-debuginfo-0:4.16.0-13.el10_1.4.s390x",
"AppStream-10.1.Z:fence-agents-kdump-debuginfo-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-agents-kubevirt-0:4.16.0-13.el10_1.4.aarch64",
"AppStream-10.1.Z:fence-agents-kubevirt-0:4.16.0-13.el10_1.4.ppc64le",
"AppStream-10.1.Z:fence-agents-kubevirt-0:4.16.0-13.el10_1.4.s390x",
"AppStream-10.1.Z:fence-agents-kubevirt-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-agents-lpar-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-mpath-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-nutanix-ahv-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-openstack-0:4.16.0-13.el10_1.4.ppc64le",
"AppStream-10.1.Z:fence-agents-openstack-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-agents-redfish-0:4.16.0-13.el10_1.4.aarch64",
"AppStream-10.1.Z:fence-agents-redfish-0:4.16.0-13.el10_1.4.ppc64le",
"AppStream-10.1.Z:fence-agents-redfish-0:4.16.0-13.el10_1.4.s390x",
"AppStream-10.1.Z:fence-agents-redfish-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-agents-rhevm-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-rsa-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-rsb-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-sbd-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-scsi-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-virsh-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-vmware-rest-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-vmware-soap-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-wti-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-zvm-0:4.16.0-13.el10_1.4.s390x",
"AppStream-10.1.Z:fence-virt-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-virt-debuginfo-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-virtd-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-virtd-cpg-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-virtd-cpg-debuginfo-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-virtd-debuginfo-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-virtd-libvirt-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-virtd-libvirt-debuginfo-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-virtd-multicast-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-virtd-multicast-debuginfo-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-virtd-serial-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-virtd-serial-debuginfo-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-virtd-tcp-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-virtd-tcp-debuginfo-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:ha-cloud-support-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:ha-cloud-support-debuginfo-0:4.16.0-13.el10_1.4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "pyasn1: pyasn1 Vulnerable to Denial of Service via Unbounded Recursion"
},
{
"cve": "CVE-2026-32597",
"cwe": {
"id": "CWE-347",
"name": "Improper Verification of Cryptographic Signature"
},
"discovery_date": "2026-03-12T22:01:29.967713+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2447194"
}
],
"notes": [
{
"category": "description",
"text": "A missing verification step has been discovered in PyJWT. PyJWT does not validate the crit (Critical) Header Parameter defined in RFC 7515 \u00a74.1.11. When a JWS token contains a crit array listing extensions that PyJWT does not understand, the library accepts the token instead of rejecting it. This violates the MUST requirement in the RFC.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "pyjwt: PyJWT accepts unknown `crit` header extensions (RFC 7515 \u00a74.1.11 MUST violation)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.1.Z:fence-agents-0:4.16.0-13.el10_1.4.src",
"AppStream-10.1.Z:fence-agents-aliyun-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-agents-all-0:4.16.0-13.el10_1.4.aarch64",
"AppStream-10.1.Z:fence-agents-all-0:4.16.0-13.el10_1.4.ppc64le",
"AppStream-10.1.Z:fence-agents-all-0:4.16.0-13.el10_1.4.s390x",
"AppStream-10.1.Z:fence-agents-all-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-agents-amt-ws-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-apc-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-apc-snmp-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-aws-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-agents-azure-arm-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-agents-bladecenter-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-brocade-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-cisco-mds-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-cisco-ucs-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-common-0:4.16.0-13.el10_1.4.aarch64",
"AppStream-10.1.Z:fence-agents-common-0:4.16.0-13.el10_1.4.ppc64le",
"AppStream-10.1.Z:fence-agents-common-0:4.16.0-13.el10_1.4.s390x",
"AppStream-10.1.Z:fence-agents-common-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-agents-common-debuginfo-0:4.16.0-13.el10_1.4.aarch64",
"AppStream-10.1.Z:fence-agents-common-debuginfo-0:4.16.0-13.el10_1.4.ppc64le",
"AppStream-10.1.Z:fence-agents-common-debuginfo-0:4.16.0-13.el10_1.4.s390x",
"AppStream-10.1.Z:fence-agents-common-debuginfo-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-agents-debuginfo-0:4.16.0-13.el10_1.4.aarch64",
"AppStream-10.1.Z:fence-agents-debuginfo-0:4.16.0-13.el10_1.4.ppc64le",
"AppStream-10.1.Z:fence-agents-debuginfo-0:4.16.0-13.el10_1.4.s390x",
"AppStream-10.1.Z:fence-agents-debuginfo-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-agents-debugsource-0:4.16.0-13.el10_1.4.aarch64",
"AppStream-10.1.Z:fence-agents-debugsource-0:4.16.0-13.el10_1.4.ppc64le",
"AppStream-10.1.Z:fence-agents-debugsource-0:4.16.0-13.el10_1.4.s390x",
"AppStream-10.1.Z:fence-agents-debugsource-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-agents-drac5-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-eaton-snmp-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-emerson-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-eps-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-gce-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-agents-heuristics-ping-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-hpblade-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-ibm-powervs-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-ibm-vpc-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-ibmblade-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-ifmib-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-ilo-moonshot-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-ilo-mp-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-ilo-ssh-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-ilo2-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-intelmodular-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-ipdu-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-ipmilan-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-kdump-0:4.16.0-13.el10_1.4.aarch64",
"AppStream-10.1.Z:fence-agents-kdump-0:4.16.0-13.el10_1.4.ppc64le",
"AppStream-10.1.Z:fence-agents-kdump-0:4.16.0-13.el10_1.4.s390x",
"AppStream-10.1.Z:fence-agents-kdump-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-agents-kdump-debuginfo-0:4.16.0-13.el10_1.4.aarch64",
"AppStream-10.1.Z:fence-agents-kdump-debuginfo-0:4.16.0-13.el10_1.4.ppc64le",
"AppStream-10.1.Z:fence-agents-kdump-debuginfo-0:4.16.0-13.el10_1.4.s390x",
"AppStream-10.1.Z:fence-agents-kdump-debuginfo-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-agents-kubevirt-0:4.16.0-13.el10_1.4.aarch64",
"AppStream-10.1.Z:fence-agents-kubevirt-0:4.16.0-13.el10_1.4.ppc64le",
"AppStream-10.1.Z:fence-agents-kubevirt-0:4.16.0-13.el10_1.4.s390x",
"AppStream-10.1.Z:fence-agents-kubevirt-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-agents-lpar-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-mpath-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-nutanix-ahv-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-openstack-0:4.16.0-13.el10_1.4.ppc64le",
"AppStream-10.1.Z:fence-agents-openstack-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-agents-redfish-0:4.16.0-13.el10_1.4.aarch64",
"AppStream-10.1.Z:fence-agents-redfish-0:4.16.0-13.el10_1.4.ppc64le",
"AppStream-10.1.Z:fence-agents-redfish-0:4.16.0-13.el10_1.4.s390x",
"AppStream-10.1.Z:fence-agents-redfish-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-agents-rhevm-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-rsa-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-rsb-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-sbd-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-scsi-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-virsh-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-vmware-rest-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-vmware-soap-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-wti-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-zvm-0:4.16.0-13.el10_1.4.s390x",
"AppStream-10.1.Z:fence-virt-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-virt-debuginfo-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-virtd-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-virtd-cpg-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-virtd-cpg-debuginfo-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-virtd-debuginfo-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-virtd-libvirt-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-virtd-libvirt-debuginfo-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-virtd-multicast-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-virtd-multicast-debuginfo-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-virtd-serial-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-virtd-serial-debuginfo-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-virtd-tcp-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-virtd-tcp-debuginfo-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:ha-cloud-support-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:ha-cloud-support-debuginfo-0:4.16.0-13.el10_1.4.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32597"
},
{
"category": "external",
"summary": "RHBZ#2447194",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2447194"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32597",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32597"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32597",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32597"
},
{
"category": "external",
"summary": "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-752w-5fwx-jx9f",
"url": "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-752w-5fwx-jx9f"
}
],
"release_date": "2026-03-12T21:41:50.427000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-06T06:40:52+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.1.Z:fence-agents-0:4.16.0-13.el10_1.4.src",
"AppStream-10.1.Z:fence-agents-aliyun-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-agents-all-0:4.16.0-13.el10_1.4.aarch64",
"AppStream-10.1.Z:fence-agents-all-0:4.16.0-13.el10_1.4.ppc64le",
"AppStream-10.1.Z:fence-agents-all-0:4.16.0-13.el10_1.4.s390x",
"AppStream-10.1.Z:fence-agents-all-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-agents-amt-ws-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-apc-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-apc-snmp-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-aws-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-agents-azure-arm-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-agents-bladecenter-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-brocade-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-cisco-mds-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-cisco-ucs-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-common-0:4.16.0-13.el10_1.4.aarch64",
"AppStream-10.1.Z:fence-agents-common-0:4.16.0-13.el10_1.4.ppc64le",
"AppStream-10.1.Z:fence-agents-common-0:4.16.0-13.el10_1.4.s390x",
"AppStream-10.1.Z:fence-agents-common-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-agents-common-debuginfo-0:4.16.0-13.el10_1.4.aarch64",
"AppStream-10.1.Z:fence-agents-common-debuginfo-0:4.16.0-13.el10_1.4.ppc64le",
"AppStream-10.1.Z:fence-agents-common-debuginfo-0:4.16.0-13.el10_1.4.s390x",
"AppStream-10.1.Z:fence-agents-common-debuginfo-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-agents-debuginfo-0:4.16.0-13.el10_1.4.aarch64",
"AppStream-10.1.Z:fence-agents-debuginfo-0:4.16.0-13.el10_1.4.ppc64le",
"AppStream-10.1.Z:fence-agents-debuginfo-0:4.16.0-13.el10_1.4.s390x",
"AppStream-10.1.Z:fence-agents-debuginfo-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-agents-debugsource-0:4.16.0-13.el10_1.4.aarch64",
"AppStream-10.1.Z:fence-agents-debugsource-0:4.16.0-13.el10_1.4.ppc64le",
"AppStream-10.1.Z:fence-agents-debugsource-0:4.16.0-13.el10_1.4.s390x",
"AppStream-10.1.Z:fence-agents-debugsource-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-agents-drac5-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-eaton-snmp-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-emerson-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-eps-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-gce-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-agents-heuristics-ping-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-hpblade-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-ibm-powervs-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-ibm-vpc-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-ibmblade-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-ifmib-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-ilo-moonshot-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-ilo-mp-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-ilo-ssh-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-ilo2-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-intelmodular-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-ipdu-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-ipmilan-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-kdump-0:4.16.0-13.el10_1.4.aarch64",
"AppStream-10.1.Z:fence-agents-kdump-0:4.16.0-13.el10_1.4.ppc64le",
"AppStream-10.1.Z:fence-agents-kdump-0:4.16.0-13.el10_1.4.s390x",
"AppStream-10.1.Z:fence-agents-kdump-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-agents-kdump-debuginfo-0:4.16.0-13.el10_1.4.aarch64",
"AppStream-10.1.Z:fence-agents-kdump-debuginfo-0:4.16.0-13.el10_1.4.ppc64le",
"AppStream-10.1.Z:fence-agents-kdump-debuginfo-0:4.16.0-13.el10_1.4.s390x",
"AppStream-10.1.Z:fence-agents-kdump-debuginfo-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-agents-kubevirt-0:4.16.0-13.el10_1.4.aarch64",
"AppStream-10.1.Z:fence-agents-kubevirt-0:4.16.0-13.el10_1.4.ppc64le",
"AppStream-10.1.Z:fence-agents-kubevirt-0:4.16.0-13.el10_1.4.s390x",
"AppStream-10.1.Z:fence-agents-kubevirt-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-agents-lpar-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-mpath-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-nutanix-ahv-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-openstack-0:4.16.0-13.el10_1.4.ppc64le",
"AppStream-10.1.Z:fence-agents-openstack-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-agents-redfish-0:4.16.0-13.el10_1.4.aarch64",
"AppStream-10.1.Z:fence-agents-redfish-0:4.16.0-13.el10_1.4.ppc64le",
"AppStream-10.1.Z:fence-agents-redfish-0:4.16.0-13.el10_1.4.s390x",
"AppStream-10.1.Z:fence-agents-redfish-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-agents-rhevm-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-rsa-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-rsb-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-sbd-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-scsi-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-virsh-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-vmware-rest-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-vmware-soap-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-wti-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-zvm-0:4.16.0-13.el10_1.4.s390x",
"AppStream-10.1.Z:fence-virt-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-virt-debuginfo-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-virtd-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-virtd-cpg-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-virtd-cpg-debuginfo-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-virtd-debuginfo-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-virtd-libvirt-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-virtd-libvirt-debuginfo-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-virtd-multicast-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-virtd-multicast-debuginfo-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-virtd-serial-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-virtd-serial-debuginfo-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-virtd-tcp-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-virtd-tcp-debuginfo-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:ha-cloud-support-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:ha-cloud-support-debuginfo-0:4.16.0-13.el10_1.4.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:13916"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"AppStream-10.1.Z:fence-agents-0:4.16.0-13.el10_1.4.src",
"AppStream-10.1.Z:fence-agents-aliyun-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-agents-all-0:4.16.0-13.el10_1.4.aarch64",
"AppStream-10.1.Z:fence-agents-all-0:4.16.0-13.el10_1.4.ppc64le",
"AppStream-10.1.Z:fence-agents-all-0:4.16.0-13.el10_1.4.s390x",
"AppStream-10.1.Z:fence-agents-all-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-agents-amt-ws-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-apc-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-apc-snmp-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-aws-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-agents-azure-arm-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-agents-bladecenter-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-brocade-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-cisco-mds-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-cisco-ucs-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-common-0:4.16.0-13.el10_1.4.aarch64",
"AppStream-10.1.Z:fence-agents-common-0:4.16.0-13.el10_1.4.ppc64le",
"AppStream-10.1.Z:fence-agents-common-0:4.16.0-13.el10_1.4.s390x",
"AppStream-10.1.Z:fence-agents-common-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-agents-common-debuginfo-0:4.16.0-13.el10_1.4.aarch64",
"AppStream-10.1.Z:fence-agents-common-debuginfo-0:4.16.0-13.el10_1.4.ppc64le",
"AppStream-10.1.Z:fence-agents-common-debuginfo-0:4.16.0-13.el10_1.4.s390x",
"AppStream-10.1.Z:fence-agents-common-debuginfo-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-agents-debuginfo-0:4.16.0-13.el10_1.4.aarch64",
"AppStream-10.1.Z:fence-agents-debuginfo-0:4.16.0-13.el10_1.4.ppc64le",
"AppStream-10.1.Z:fence-agents-debuginfo-0:4.16.0-13.el10_1.4.s390x",
"AppStream-10.1.Z:fence-agents-debuginfo-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-agents-debugsource-0:4.16.0-13.el10_1.4.aarch64",
"AppStream-10.1.Z:fence-agents-debugsource-0:4.16.0-13.el10_1.4.ppc64le",
"AppStream-10.1.Z:fence-agents-debugsource-0:4.16.0-13.el10_1.4.s390x",
"AppStream-10.1.Z:fence-agents-debugsource-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-agents-drac5-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-eaton-snmp-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-emerson-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-eps-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-gce-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-agents-heuristics-ping-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-hpblade-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-ibm-powervs-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-ibm-vpc-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-ibmblade-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-ifmib-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-ilo-moonshot-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-ilo-mp-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-ilo-ssh-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-ilo2-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-intelmodular-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-ipdu-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-ipmilan-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-kdump-0:4.16.0-13.el10_1.4.aarch64",
"AppStream-10.1.Z:fence-agents-kdump-0:4.16.0-13.el10_1.4.ppc64le",
"AppStream-10.1.Z:fence-agents-kdump-0:4.16.0-13.el10_1.4.s390x",
"AppStream-10.1.Z:fence-agents-kdump-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-agents-kdump-debuginfo-0:4.16.0-13.el10_1.4.aarch64",
"AppStream-10.1.Z:fence-agents-kdump-debuginfo-0:4.16.0-13.el10_1.4.ppc64le",
"AppStream-10.1.Z:fence-agents-kdump-debuginfo-0:4.16.0-13.el10_1.4.s390x",
"AppStream-10.1.Z:fence-agents-kdump-debuginfo-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-agents-kubevirt-0:4.16.0-13.el10_1.4.aarch64",
"AppStream-10.1.Z:fence-agents-kubevirt-0:4.16.0-13.el10_1.4.ppc64le",
"AppStream-10.1.Z:fence-agents-kubevirt-0:4.16.0-13.el10_1.4.s390x",
"AppStream-10.1.Z:fence-agents-kubevirt-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-agents-lpar-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-mpath-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-nutanix-ahv-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-openstack-0:4.16.0-13.el10_1.4.ppc64le",
"AppStream-10.1.Z:fence-agents-openstack-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-agents-redfish-0:4.16.0-13.el10_1.4.aarch64",
"AppStream-10.1.Z:fence-agents-redfish-0:4.16.0-13.el10_1.4.ppc64le",
"AppStream-10.1.Z:fence-agents-redfish-0:4.16.0-13.el10_1.4.s390x",
"AppStream-10.1.Z:fence-agents-redfish-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-agents-rhevm-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-rsa-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-rsb-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-sbd-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-scsi-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-virsh-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-vmware-rest-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-vmware-soap-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-wti-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-zvm-0:4.16.0-13.el10_1.4.s390x",
"AppStream-10.1.Z:fence-virt-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-virt-debuginfo-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-virtd-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-virtd-cpg-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-virtd-cpg-debuginfo-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-virtd-debuginfo-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-virtd-libvirt-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-virtd-libvirt-debuginfo-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-virtd-multicast-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-virtd-multicast-debuginfo-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-virtd-serial-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-virtd-serial-debuginfo-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-virtd-tcp-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-virtd-tcp-debuginfo-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:ha-cloud-support-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:ha-cloud-support-debuginfo-0:4.16.0-13.el10_1.4.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"AppStream-10.1.Z:fence-agents-0:4.16.0-13.el10_1.4.src",
"AppStream-10.1.Z:fence-agents-aliyun-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-agents-all-0:4.16.0-13.el10_1.4.aarch64",
"AppStream-10.1.Z:fence-agents-all-0:4.16.0-13.el10_1.4.ppc64le",
"AppStream-10.1.Z:fence-agents-all-0:4.16.0-13.el10_1.4.s390x",
"AppStream-10.1.Z:fence-agents-all-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-agents-amt-ws-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-apc-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-apc-snmp-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-aws-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-agents-azure-arm-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-agents-bladecenter-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-brocade-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-cisco-mds-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-cisco-ucs-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-common-0:4.16.0-13.el10_1.4.aarch64",
"AppStream-10.1.Z:fence-agents-common-0:4.16.0-13.el10_1.4.ppc64le",
"AppStream-10.1.Z:fence-agents-common-0:4.16.0-13.el10_1.4.s390x",
"AppStream-10.1.Z:fence-agents-common-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-agents-common-debuginfo-0:4.16.0-13.el10_1.4.aarch64",
"AppStream-10.1.Z:fence-agents-common-debuginfo-0:4.16.0-13.el10_1.4.ppc64le",
"AppStream-10.1.Z:fence-agents-common-debuginfo-0:4.16.0-13.el10_1.4.s390x",
"AppStream-10.1.Z:fence-agents-common-debuginfo-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-agents-debuginfo-0:4.16.0-13.el10_1.4.aarch64",
"AppStream-10.1.Z:fence-agents-debuginfo-0:4.16.0-13.el10_1.4.ppc64le",
"AppStream-10.1.Z:fence-agents-debuginfo-0:4.16.0-13.el10_1.4.s390x",
"AppStream-10.1.Z:fence-agents-debuginfo-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-agents-debugsource-0:4.16.0-13.el10_1.4.aarch64",
"AppStream-10.1.Z:fence-agents-debugsource-0:4.16.0-13.el10_1.4.ppc64le",
"AppStream-10.1.Z:fence-agents-debugsource-0:4.16.0-13.el10_1.4.s390x",
"AppStream-10.1.Z:fence-agents-debugsource-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-agents-drac5-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-eaton-snmp-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-emerson-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-eps-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-gce-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-agents-heuristics-ping-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-hpblade-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-ibm-powervs-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-ibm-vpc-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-ibmblade-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-ifmib-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-ilo-moonshot-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-ilo-mp-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-ilo-ssh-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-ilo2-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-intelmodular-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-ipdu-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-ipmilan-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-kdump-0:4.16.0-13.el10_1.4.aarch64",
"AppStream-10.1.Z:fence-agents-kdump-0:4.16.0-13.el10_1.4.ppc64le",
"AppStream-10.1.Z:fence-agents-kdump-0:4.16.0-13.el10_1.4.s390x",
"AppStream-10.1.Z:fence-agents-kdump-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-agents-kdump-debuginfo-0:4.16.0-13.el10_1.4.aarch64",
"AppStream-10.1.Z:fence-agents-kdump-debuginfo-0:4.16.0-13.el10_1.4.ppc64le",
"AppStream-10.1.Z:fence-agents-kdump-debuginfo-0:4.16.0-13.el10_1.4.s390x",
"AppStream-10.1.Z:fence-agents-kdump-debuginfo-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-agents-kubevirt-0:4.16.0-13.el10_1.4.aarch64",
"AppStream-10.1.Z:fence-agents-kubevirt-0:4.16.0-13.el10_1.4.ppc64le",
"AppStream-10.1.Z:fence-agents-kubevirt-0:4.16.0-13.el10_1.4.s390x",
"AppStream-10.1.Z:fence-agents-kubevirt-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-agents-lpar-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-mpath-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-nutanix-ahv-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-openstack-0:4.16.0-13.el10_1.4.ppc64le",
"AppStream-10.1.Z:fence-agents-openstack-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-agents-redfish-0:4.16.0-13.el10_1.4.aarch64",
"AppStream-10.1.Z:fence-agents-redfish-0:4.16.0-13.el10_1.4.ppc64le",
"AppStream-10.1.Z:fence-agents-redfish-0:4.16.0-13.el10_1.4.s390x",
"AppStream-10.1.Z:fence-agents-redfish-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-agents-rhevm-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-rsa-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-rsb-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-sbd-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-scsi-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-virsh-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-vmware-rest-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-vmware-soap-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-wti-0:4.16.0-13.el10_1.4.noarch",
"AppStream-10.1.Z:fence-agents-zvm-0:4.16.0-13.el10_1.4.s390x",
"AppStream-10.1.Z:fence-virt-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-virt-debuginfo-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-virtd-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-virtd-cpg-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-virtd-cpg-debuginfo-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-virtd-debuginfo-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-virtd-libvirt-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-virtd-libvirt-debuginfo-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-virtd-multicast-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-virtd-multicast-debuginfo-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-virtd-serial-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-virtd-serial-debuginfo-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-virtd-tcp-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:fence-virtd-tcp-debuginfo-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:ha-cloud-support-0:4.16.0-13.el10_1.4.x86_64",
"AppStream-10.1.Z:ha-cloud-support-debuginfo-0:4.16.0-13.el10_1.4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "pyjwt: PyJWT accepts unknown `crit` header extensions (RFC 7515 \u00a74.1.11 MUST violation)"
}
]
}
RHSA-2026:13917
Vulnerability from csaf_redhat - Published: 2026-05-06 06:52 - Updated: 2026-07-20 04:36Summary
Red Hat Security Advisory: fence-agents security update
Severity
Important
Notes
Topic: An update for fence-agents is now available for Red Hat Enterprise Linux 9.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster.
Security Fix(es):
* pyasn1: pyasn1 Vulnerable to Denial of Service via Unbounded Recursion (CVE-2026-30922)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
An unbounded recursion flaw has been discovered in the pypi pyasn1 library. This uncontrolled recursion occurs when decoding ASN.1 data with deeply nested structures. An attacker can supply a crafted payload containing nested SEQUENCE (0x30) or SET (0x31) tags with Indefinite Length (0x80) markers. This forces the decoder to recursively call itself until the Python interpreter crashes with a RecursionError or consumes all available memory (OOM), crashing the host application.
7.5 (High)
Affected products
Fixed
96 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:fence-agents-0:4.10.0-98.el9_7.13.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:fence-agents-aliyun-0:4.10.0-98.el9_7.13.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:fence-agents-all-0:4.10.0-98.el9_7.13.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:fence-agents-all-0:4.10.0-98.el9_7.13.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:fence-agents-all-0:4.10.0-98.el9_7.13.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:fence-agents-all-0:4.10.0-98.el9_7.13.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:fence-agents-amt-ws-0:4.10.0-98.el9_7.13.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:fence-agents-apc-0:4.10.0-98.el9_7.13.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:fence-agents-apc-snmp-0:4.10.0-98.el9_7.13.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:fence-agents-aws-0:4.10.0-98.el9_7.13.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:fence-agents-azure-arm-0:4.10.0-98.el9_7.13.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:fence-agents-bladecenter-0:4.10.0-98.el9_7.13.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:fence-agents-brocade-0:4.10.0-98.el9_7.13.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:fence-agents-cisco-mds-0:4.10.0-98.el9_7.13.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:fence-agents-cisco-ucs-0:4.10.0-98.el9_7.13.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:fence-agents-common-0:4.10.0-98.el9_7.13.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:fence-agents-compute-0:4.10.0-98.el9_7.13.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:fence-agents-compute-0:4.10.0-98.el9_7.13.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:fence-agents-debuginfo-0:4.10.0-98.el9_7.13.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:fence-agents-debuginfo-0:4.10.0-98.el9_7.13.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:fence-agents-debuginfo-0:4.10.0-98.el9_7.13.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:fence-agents-debuginfo-0:4.10.0-98.el9_7.13.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:fence-agents-debugsource-0:4.10.0-98.el9_7.13.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:fence-agents-debugsource-0:4.10.0-98.el9_7.13.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:fence-agents-debugsource-0:4.10.0-98.el9_7.13.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:fence-agents-debugsource-0:4.10.0-98.el9_7.13.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:fence-agents-drac5-0:4.10.0-98.el9_7.13.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:fence-agents-eaton-snmp-0:4.10.0-98.el9_7.13.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:fence-agents-emerson-0:4.10.0-98.el9_7.13.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:fence-agents-eps-0:4.10.0-98.el9_7.13.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:fence-agents-gce-0:4.10.0-98.el9_7.13.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:fence-agents-heuristics-ping-0:4.10.0-98.el9_7.13.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:fence-agents-hpblade-0:4.10.0-98.el9_7.13.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:fence-agents-ibm-powervs-0:4.10.0-98.el9_7.13.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:fence-agents-ibm-vpc-0:4.10.0-98.el9_7.13.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:fence-agents-ibmblade-0:4.10.0-98.el9_7.13.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:fence-agents-ifmib-0:4.10.0-98.el9_7.13.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:fence-agents-ilo-moonshot-0:4.10.0-98.el9_7.13.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:fence-agents-ilo-mp-0:4.10.0-98.el9_7.13.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:fence-agents-ilo-ssh-0:4.10.0-98.el9_7.13.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:fence-agents-ilo2-0:4.10.0-98.el9_7.13.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:fence-agents-intelmodular-0:4.10.0-98.el9_7.13.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:fence-agents-ipdu-0:4.10.0-98.el9_7.13.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:fence-agents-ipmilan-0:4.10.0-98.el9_7.13.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:fence-agents-kdump-0:4.10.0-98.el9_7.13.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:fence-agents-kdump-0:4.10.0-98.el9_7.13.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:fence-agents-kdump-0:4.10.0-98.el9_7.13.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:fence-agents-kdump-0:4.10.0-98.el9_7.13.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:fence-agents-kdump-debuginfo-0:4.10.0-98.el9_7.13.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:fence-agents-kdump-debuginfo-0:4.10.0-98.el9_7.13.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:fence-agents-kdump-debuginfo-0:4.10.0-98.el9_7.13.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:fence-agents-kdump-debuginfo-0:4.10.0-98.el9_7.13.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:fence-agents-kubevirt-0:4.10.0-98.el9_7.13.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:fence-agents-kubevirt-0:4.10.0-98.el9_7.13.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:fence-agents-kubevirt-0:4.10.0-98.el9_7.13.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:fence-agents-kubevirt-0:4.10.0-98.el9_7.13.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:fence-agents-kubevirt-debuginfo-0:4.10.0-98.el9_7.13.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:fence-agents-kubevirt-debuginfo-0:4.10.0-98.el9_7.13.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:fence-agents-kubevirt-debuginfo-0:4.10.0-98.el9_7.13.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:fence-agents-kubevirt-debuginfo-0:4.10.0-98.el9_7.13.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:fence-agents-lpar-0:4.10.0-98.el9_7.13.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:fence-agents-mpath-0:4.10.0-98.el9_7.13.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:fence-agents-nutanix-ahv-0:4.10.0-98.el9_7.13.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:fence-agents-openstack-0:4.10.0-98.el9_7.13.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:fence-agents-openstack-0:4.10.0-98.el9_7.13.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:fence-agents-redfish-0:4.10.0-98.el9_7.13.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:fence-agents-redfish-0:4.10.0-98.el9_7.13.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:fence-agents-redfish-0:4.10.0-98.el9_7.13.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:fence-agents-redfish-0:4.10.0-98.el9_7.13.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:fence-agents-rhevm-0:4.10.0-98.el9_7.13.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:fence-agents-rsa-0:4.10.0-98.el9_7.13.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:fence-agents-rsb-0:4.10.0-98.el9_7.13.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:fence-agents-sbd-0:4.10.0-98.el9_7.13.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:fence-agents-scsi-0:4.10.0-98.el9_7.13.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:fence-agents-virsh-0:4.10.0-98.el9_7.13.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:fence-agents-vmware-rest-0:4.10.0-98.el9_7.13.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:fence-agents-vmware-soap-0:4.10.0-98.el9_7.13.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:fence-agents-wti-0:4.10.0-98.el9_7.13.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:fence-agents-zvm-0:4.10.0-98.el9_7.13.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:fence-virt-0:4.10.0-98.el9_7.13.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:fence-virt-debuginfo-0:4.10.0-98.el9_7.13.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:fence-virtd-0:4.10.0-98.el9_7.13.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:fence-virtd-cpg-0:4.10.0-98.el9_7.13.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:fence-virtd-cpg-debuginfo-0:4.10.0-98.el9_7.13.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:fence-virtd-debuginfo-0:4.10.0-98.el9_7.13.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:fence-virtd-libvirt-0:4.10.0-98.el9_7.13.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:fence-virtd-libvirt-debuginfo-0:4.10.0-98.el9_7.13.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:fence-virtd-multicast-0:4.10.0-98.el9_7.13.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:fence-virtd-multicast-debuginfo-0:4.10.0-98.el9_7.13.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:fence-virtd-serial-0:4.10.0-98.el9_7.13.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:fence-virtd-serial-debuginfo-0:4.10.0-98.el9_7.13.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:fence-virtd-tcp-0:4.10.0-98.el9_7.13.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:fence-virtd-tcp-debuginfo-0:4.10.0-98.el9_7.13.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:ha-cloud-support-0:4.10.0-98.el9_7.13.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:ha-cloud-support-0:4.10.0-98.el9_7.13.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.7.0.Z.MAIN:ha-cloud-support-debuginfo-0:4.10.0-98.el9_7.13.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
References
10 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for fence-agents is now available for Red Hat Enterprise Linux 9.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster. \n\nSecurity Fix(es):\n\n* pyasn1: pyasn1 Vulnerable to Denial of Service via Unbounded Recursion (CVE-2026-30922)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:13917",
"url": "https://access.redhat.com/errata/RHSA-2026:13917"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2448553",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2448553"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_13917.json"
}
],
"title": "Red Hat Security Advisory: fence-agents security update",
"tracking": {
"current_release_date": "2026-07-20T04:36:51+00:00",
"generator": {
"date": "2026-07-20T04:36:51+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.7"
}
},
"id": "RHSA-2026:13917",
"initial_release_date": "2026-05-06T06:52:25+00:00",
"revision_history": [
{
"date": "2026-05-06T06:52:25+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-05-06T06:52:25+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-07-20T04:36:51+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AppStream (v. 9)",
"product": {
"name": "Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:enterprise_linux:9::appstream"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "fence-agents-0:4.10.0-98.el9_7.13.src",
"product": {
"name": "fence-agents-0:4.10.0-98.el9_7.13.src",
"product_id": "fence-agents-0:4.10.0-98.el9_7.13.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents@4.10.0-98.el9_7.13?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "fence-agents-aliyun-0:4.10.0-98.el9_7.13.x86_64",
"product": {
"name": "fence-agents-aliyun-0:4.10.0-98.el9_7.13.x86_64",
"product_id": "fence-agents-aliyun-0:4.10.0-98.el9_7.13.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-aliyun@4.10.0-98.el9_7.13?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "fence-agents-all-0:4.10.0-98.el9_7.13.x86_64",
"product": {
"name": "fence-agents-all-0:4.10.0-98.el9_7.13.x86_64",
"product_id": "fence-agents-all-0:4.10.0-98.el9_7.13.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-all@4.10.0-98.el9_7.13?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "fence-agents-aws-0:4.10.0-98.el9_7.13.x86_64",
"product": {
"name": "fence-agents-aws-0:4.10.0-98.el9_7.13.x86_64",
"product_id": "fence-agents-aws-0:4.10.0-98.el9_7.13.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-aws@4.10.0-98.el9_7.13?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "fence-agents-azure-arm-0:4.10.0-98.el9_7.13.x86_64",
"product": {
"name": "fence-agents-azure-arm-0:4.10.0-98.el9_7.13.x86_64",
"product_id": "fence-agents-azure-arm-0:4.10.0-98.el9_7.13.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-azure-arm@4.10.0-98.el9_7.13?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "fence-agents-compute-0:4.10.0-98.el9_7.13.x86_64",
"product": {
"name": "fence-agents-compute-0:4.10.0-98.el9_7.13.x86_64",
"product_id": "fence-agents-compute-0:4.10.0-98.el9_7.13.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-compute@4.10.0-98.el9_7.13?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "fence-agents-gce-0:4.10.0-98.el9_7.13.x86_64",
"product": {
"name": "fence-agents-gce-0:4.10.0-98.el9_7.13.x86_64",
"product_id": "fence-agents-gce-0:4.10.0-98.el9_7.13.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-gce@4.10.0-98.el9_7.13?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "fence-agents-kdump-0:4.10.0-98.el9_7.13.x86_64",
"product": {
"name": "fence-agents-kdump-0:4.10.0-98.el9_7.13.x86_64",
"product_id": "fence-agents-kdump-0:4.10.0-98.el9_7.13.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-kdump@4.10.0-98.el9_7.13?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "fence-agents-kubevirt-0:4.10.0-98.el9_7.13.x86_64",
"product": {
"name": "fence-agents-kubevirt-0:4.10.0-98.el9_7.13.x86_64",
"product_id": "fence-agents-kubevirt-0:4.10.0-98.el9_7.13.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-kubevirt@4.10.0-98.el9_7.13?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "fence-agents-openstack-0:4.10.0-98.el9_7.13.x86_64",
"product": {
"name": "fence-agents-openstack-0:4.10.0-98.el9_7.13.x86_64",
"product_id": "fence-agents-openstack-0:4.10.0-98.el9_7.13.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-openstack@4.10.0-98.el9_7.13?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "fence-agents-redfish-0:4.10.0-98.el9_7.13.x86_64",
"product": {
"name": "fence-agents-redfish-0:4.10.0-98.el9_7.13.x86_64",
"product_id": "fence-agents-redfish-0:4.10.0-98.el9_7.13.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-redfish@4.10.0-98.el9_7.13?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "fence-virt-0:4.10.0-98.el9_7.13.x86_64",
"product": {
"name": "fence-virt-0:4.10.0-98.el9_7.13.x86_64",
"product_id": "fence-virt-0:4.10.0-98.el9_7.13.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-virt@4.10.0-98.el9_7.13?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "fence-virtd-0:4.10.0-98.el9_7.13.x86_64",
"product": {
"name": "fence-virtd-0:4.10.0-98.el9_7.13.x86_64",
"product_id": "fence-virtd-0:4.10.0-98.el9_7.13.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-virtd@4.10.0-98.el9_7.13?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "fence-virtd-cpg-0:4.10.0-98.el9_7.13.x86_64",
"product": {
"name": "fence-virtd-cpg-0:4.10.0-98.el9_7.13.x86_64",
"product_id": "fence-virtd-cpg-0:4.10.0-98.el9_7.13.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-virtd-cpg@4.10.0-98.el9_7.13?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "fence-virtd-libvirt-0:4.10.0-98.el9_7.13.x86_64",
"product": {
"name": "fence-virtd-libvirt-0:4.10.0-98.el9_7.13.x86_64",
"product_id": "fence-virtd-libvirt-0:4.10.0-98.el9_7.13.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-virtd-libvirt@4.10.0-98.el9_7.13?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "fence-virtd-multicast-0:4.10.0-98.el9_7.13.x86_64",
"product": {
"name": "fence-virtd-multicast-0:4.10.0-98.el9_7.13.x86_64",
"product_id": "fence-virtd-multicast-0:4.10.0-98.el9_7.13.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-virtd-multicast@4.10.0-98.el9_7.13?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "fence-virtd-serial-0:4.10.0-98.el9_7.13.x86_64",
"product": {
"name": "fence-virtd-serial-0:4.10.0-98.el9_7.13.x86_64",
"product_id": "fence-virtd-serial-0:4.10.0-98.el9_7.13.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-virtd-serial@4.10.0-98.el9_7.13?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "fence-virtd-tcp-0:4.10.0-98.el9_7.13.x86_64",
"product": {
"name": "fence-virtd-tcp-0:4.10.0-98.el9_7.13.x86_64",
"product_id": "fence-virtd-tcp-0:4.10.0-98.el9_7.13.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-virtd-tcp@4.10.0-98.el9_7.13?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "ha-cloud-support-0:4.10.0-98.el9_7.13.x86_64",
"product": {
"name": "ha-cloud-support-0:4.10.0-98.el9_7.13.x86_64",
"product_id": "ha-cloud-support-0:4.10.0-98.el9_7.13.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ha-cloud-support@4.10.0-98.el9_7.13?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "fence-agents-debugsource-0:4.10.0-98.el9_7.13.x86_64",
"product": {
"name": "fence-agents-debugsource-0:4.10.0-98.el9_7.13.x86_64",
"product_id": "fence-agents-debugsource-0:4.10.0-98.el9_7.13.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-debugsource@4.10.0-98.el9_7.13?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "fence-agents-debuginfo-0:4.10.0-98.el9_7.13.x86_64",
"product": {
"name": "fence-agents-debuginfo-0:4.10.0-98.el9_7.13.x86_64",
"product_id": "fence-agents-debuginfo-0:4.10.0-98.el9_7.13.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-debuginfo@4.10.0-98.el9_7.13?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "fence-agents-kdump-debuginfo-0:4.10.0-98.el9_7.13.x86_64",
"product": {
"name": "fence-agents-kdump-debuginfo-0:4.10.0-98.el9_7.13.x86_64",
"product_id": "fence-agents-kdump-debuginfo-0:4.10.0-98.el9_7.13.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-kdump-debuginfo@4.10.0-98.el9_7.13?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "fence-agents-kubevirt-debuginfo-0:4.10.0-98.el9_7.13.x86_64",
"product": {
"name": "fence-agents-kubevirt-debuginfo-0:4.10.0-98.el9_7.13.x86_64",
"product_id": "fence-agents-kubevirt-debuginfo-0:4.10.0-98.el9_7.13.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-kubevirt-debuginfo@4.10.0-98.el9_7.13?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "fence-virt-debuginfo-0:4.10.0-98.el9_7.13.x86_64",
"product": {
"name": "fence-virt-debuginfo-0:4.10.0-98.el9_7.13.x86_64",
"product_id": "fence-virt-debuginfo-0:4.10.0-98.el9_7.13.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-virt-debuginfo@4.10.0-98.el9_7.13?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "fence-virtd-cpg-debuginfo-0:4.10.0-98.el9_7.13.x86_64",
"product": {
"name": "fence-virtd-cpg-debuginfo-0:4.10.0-98.el9_7.13.x86_64",
"product_id": "fence-virtd-cpg-debuginfo-0:4.10.0-98.el9_7.13.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-virtd-cpg-debuginfo@4.10.0-98.el9_7.13?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "fence-virtd-debuginfo-0:4.10.0-98.el9_7.13.x86_64",
"product": {
"name": "fence-virtd-debuginfo-0:4.10.0-98.el9_7.13.x86_64",
"product_id": "fence-virtd-debuginfo-0:4.10.0-98.el9_7.13.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-virtd-debuginfo@4.10.0-98.el9_7.13?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "fence-virtd-libvirt-debuginfo-0:4.10.0-98.el9_7.13.x86_64",
"product": {
"name": "fence-virtd-libvirt-debuginfo-0:4.10.0-98.el9_7.13.x86_64",
"product_id": "fence-virtd-libvirt-debuginfo-0:4.10.0-98.el9_7.13.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-virtd-libvirt-debuginfo@4.10.0-98.el9_7.13?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "fence-virtd-multicast-debuginfo-0:4.10.0-98.el9_7.13.x86_64",
"product": {
"name": "fence-virtd-multicast-debuginfo-0:4.10.0-98.el9_7.13.x86_64",
"product_id": "fence-virtd-multicast-debuginfo-0:4.10.0-98.el9_7.13.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-virtd-multicast-debuginfo@4.10.0-98.el9_7.13?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "fence-virtd-serial-debuginfo-0:4.10.0-98.el9_7.13.x86_64",
"product": {
"name": "fence-virtd-serial-debuginfo-0:4.10.0-98.el9_7.13.x86_64",
"product_id": "fence-virtd-serial-debuginfo-0:4.10.0-98.el9_7.13.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-virtd-serial-debuginfo@4.10.0-98.el9_7.13?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "fence-virtd-tcp-debuginfo-0:4.10.0-98.el9_7.13.x86_64",
"product": {
"name": "fence-virtd-tcp-debuginfo-0:4.10.0-98.el9_7.13.x86_64",
"product_id": "fence-virtd-tcp-debuginfo-0:4.10.0-98.el9_7.13.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-virtd-tcp-debuginfo@4.10.0-98.el9_7.13?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "ha-cloud-support-debuginfo-0:4.10.0-98.el9_7.13.x86_64",
"product": {
"name": "ha-cloud-support-debuginfo-0:4.10.0-98.el9_7.13.x86_64",
"product_id": "ha-cloud-support-debuginfo-0:4.10.0-98.el9_7.13.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ha-cloud-support-debuginfo@4.10.0-98.el9_7.13?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "fence-agents-all-0:4.10.0-98.el9_7.13.aarch64",
"product": {
"name": "fence-agents-all-0:4.10.0-98.el9_7.13.aarch64",
"product_id": "fence-agents-all-0:4.10.0-98.el9_7.13.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-all@4.10.0-98.el9_7.13?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "fence-agents-kdump-0:4.10.0-98.el9_7.13.aarch64",
"product": {
"name": "fence-agents-kdump-0:4.10.0-98.el9_7.13.aarch64",
"product_id": "fence-agents-kdump-0:4.10.0-98.el9_7.13.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-kdump@4.10.0-98.el9_7.13?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "fence-agents-kubevirt-0:4.10.0-98.el9_7.13.aarch64",
"product": {
"name": "fence-agents-kubevirt-0:4.10.0-98.el9_7.13.aarch64",
"product_id": "fence-agents-kubevirt-0:4.10.0-98.el9_7.13.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-kubevirt@4.10.0-98.el9_7.13?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "fence-agents-redfish-0:4.10.0-98.el9_7.13.aarch64",
"product": {
"name": "fence-agents-redfish-0:4.10.0-98.el9_7.13.aarch64",
"product_id": "fence-agents-redfish-0:4.10.0-98.el9_7.13.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-redfish@4.10.0-98.el9_7.13?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "fence-agents-debugsource-0:4.10.0-98.el9_7.13.aarch64",
"product": {
"name": "fence-agents-debugsource-0:4.10.0-98.el9_7.13.aarch64",
"product_id": "fence-agents-debugsource-0:4.10.0-98.el9_7.13.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-debugsource@4.10.0-98.el9_7.13?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "fence-agents-debuginfo-0:4.10.0-98.el9_7.13.aarch64",
"product": {
"name": "fence-agents-debuginfo-0:4.10.0-98.el9_7.13.aarch64",
"product_id": "fence-agents-debuginfo-0:4.10.0-98.el9_7.13.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-debuginfo@4.10.0-98.el9_7.13?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "fence-agents-kdump-debuginfo-0:4.10.0-98.el9_7.13.aarch64",
"product": {
"name": "fence-agents-kdump-debuginfo-0:4.10.0-98.el9_7.13.aarch64",
"product_id": "fence-agents-kdump-debuginfo-0:4.10.0-98.el9_7.13.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-kdump-debuginfo@4.10.0-98.el9_7.13?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "fence-agents-kubevirt-debuginfo-0:4.10.0-98.el9_7.13.aarch64",
"product": {
"name": "fence-agents-kubevirt-debuginfo-0:4.10.0-98.el9_7.13.aarch64",
"product_id": "fence-agents-kubevirt-debuginfo-0:4.10.0-98.el9_7.13.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-kubevirt-debuginfo@4.10.0-98.el9_7.13?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "fence-agents-all-0:4.10.0-98.el9_7.13.ppc64le",
"product": {
"name": "fence-agents-all-0:4.10.0-98.el9_7.13.ppc64le",
"product_id": "fence-agents-all-0:4.10.0-98.el9_7.13.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-all@4.10.0-98.el9_7.13?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "fence-agents-compute-0:4.10.0-98.el9_7.13.ppc64le",
"product": {
"name": "fence-agents-compute-0:4.10.0-98.el9_7.13.ppc64le",
"product_id": "fence-agents-compute-0:4.10.0-98.el9_7.13.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-compute@4.10.0-98.el9_7.13?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "fence-agents-kdump-0:4.10.0-98.el9_7.13.ppc64le",
"product": {
"name": "fence-agents-kdump-0:4.10.0-98.el9_7.13.ppc64le",
"product_id": "fence-agents-kdump-0:4.10.0-98.el9_7.13.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-kdump@4.10.0-98.el9_7.13?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "fence-agents-kubevirt-0:4.10.0-98.el9_7.13.ppc64le",
"product": {
"name": "fence-agents-kubevirt-0:4.10.0-98.el9_7.13.ppc64le",
"product_id": "fence-agents-kubevirt-0:4.10.0-98.el9_7.13.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-kubevirt@4.10.0-98.el9_7.13?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "fence-agents-openstack-0:4.10.0-98.el9_7.13.ppc64le",
"product": {
"name": "fence-agents-openstack-0:4.10.0-98.el9_7.13.ppc64le",
"product_id": "fence-agents-openstack-0:4.10.0-98.el9_7.13.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-openstack@4.10.0-98.el9_7.13?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "fence-agents-redfish-0:4.10.0-98.el9_7.13.ppc64le",
"product": {
"name": "fence-agents-redfish-0:4.10.0-98.el9_7.13.ppc64le",
"product_id": "fence-agents-redfish-0:4.10.0-98.el9_7.13.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-redfish@4.10.0-98.el9_7.13?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "ha-cloud-support-0:4.10.0-98.el9_7.13.ppc64le",
"product": {
"name": "ha-cloud-support-0:4.10.0-98.el9_7.13.ppc64le",
"product_id": "ha-cloud-support-0:4.10.0-98.el9_7.13.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ha-cloud-support@4.10.0-98.el9_7.13?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "fence-agents-debugsource-0:4.10.0-98.el9_7.13.ppc64le",
"product": {
"name": "fence-agents-debugsource-0:4.10.0-98.el9_7.13.ppc64le",
"product_id": "fence-agents-debugsource-0:4.10.0-98.el9_7.13.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-debugsource@4.10.0-98.el9_7.13?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "fence-agents-debuginfo-0:4.10.0-98.el9_7.13.ppc64le",
"product": {
"name": "fence-agents-debuginfo-0:4.10.0-98.el9_7.13.ppc64le",
"product_id": "fence-agents-debuginfo-0:4.10.0-98.el9_7.13.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-debuginfo@4.10.0-98.el9_7.13?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "fence-agents-kdump-debuginfo-0:4.10.0-98.el9_7.13.ppc64le",
"product": {
"name": "fence-agents-kdump-debuginfo-0:4.10.0-98.el9_7.13.ppc64le",
"product_id": "fence-agents-kdump-debuginfo-0:4.10.0-98.el9_7.13.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-kdump-debuginfo@4.10.0-98.el9_7.13?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "fence-agents-kubevirt-debuginfo-0:4.10.0-98.el9_7.13.ppc64le",
"product": {
"name": "fence-agents-kubevirt-debuginfo-0:4.10.0-98.el9_7.13.ppc64le",
"product_id": "fence-agents-kubevirt-debuginfo-0:4.10.0-98.el9_7.13.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-kubevirt-debuginfo@4.10.0-98.el9_7.13?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "fence-agents-all-0:4.10.0-98.el9_7.13.s390x",
"product": {
"name": "fence-agents-all-0:4.10.0-98.el9_7.13.s390x",
"product_id": "fence-agents-all-0:4.10.0-98.el9_7.13.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-all@4.10.0-98.el9_7.13?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "fence-agents-kdump-0:4.10.0-98.el9_7.13.s390x",
"product": {
"name": "fence-agents-kdump-0:4.10.0-98.el9_7.13.s390x",
"product_id": "fence-agents-kdump-0:4.10.0-98.el9_7.13.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-kdump@4.10.0-98.el9_7.13?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "fence-agents-kubevirt-0:4.10.0-98.el9_7.13.s390x",
"product": {
"name": "fence-agents-kubevirt-0:4.10.0-98.el9_7.13.s390x",
"product_id": "fence-agents-kubevirt-0:4.10.0-98.el9_7.13.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-kubevirt@4.10.0-98.el9_7.13?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "fence-agents-redfish-0:4.10.0-98.el9_7.13.s390x",
"product": {
"name": "fence-agents-redfish-0:4.10.0-98.el9_7.13.s390x",
"product_id": "fence-agents-redfish-0:4.10.0-98.el9_7.13.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-redfish@4.10.0-98.el9_7.13?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "fence-agents-zvm-0:4.10.0-98.el9_7.13.s390x",
"product": {
"name": "fence-agents-zvm-0:4.10.0-98.el9_7.13.s390x",
"product_id": "fence-agents-zvm-0:4.10.0-98.el9_7.13.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-zvm@4.10.0-98.el9_7.13?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "fence-agents-debugsource-0:4.10.0-98.el9_7.13.s390x",
"product": {
"name": "fence-agents-debugsource-0:4.10.0-98.el9_7.13.s390x",
"product_id": "fence-agents-debugsource-0:4.10.0-98.el9_7.13.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-debugsource@4.10.0-98.el9_7.13?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "fence-agents-debuginfo-0:4.10.0-98.el9_7.13.s390x",
"product": {
"name": "fence-agents-debuginfo-0:4.10.0-98.el9_7.13.s390x",
"product_id": "fence-agents-debuginfo-0:4.10.0-98.el9_7.13.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-debuginfo@4.10.0-98.el9_7.13?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "fence-agents-kdump-debuginfo-0:4.10.0-98.el9_7.13.s390x",
"product": {
"name": "fence-agents-kdump-debuginfo-0:4.10.0-98.el9_7.13.s390x",
"product_id": "fence-agents-kdump-debuginfo-0:4.10.0-98.el9_7.13.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-kdump-debuginfo@4.10.0-98.el9_7.13?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "fence-agents-kubevirt-debuginfo-0:4.10.0-98.el9_7.13.s390x",
"product": {
"name": "fence-agents-kubevirt-debuginfo-0:4.10.0-98.el9_7.13.s390x",
"product_id": "fence-agents-kubevirt-debuginfo-0:4.10.0-98.el9_7.13.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-kubevirt-debuginfo@4.10.0-98.el9_7.13?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "fence-agents-amt-ws-0:4.10.0-98.el9_7.13.noarch",
"product": {
"name": "fence-agents-amt-ws-0:4.10.0-98.el9_7.13.noarch",
"product_id": "fence-agents-amt-ws-0:4.10.0-98.el9_7.13.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-amt-ws@4.10.0-98.el9_7.13?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-apc-0:4.10.0-98.el9_7.13.noarch",
"product": {
"name": "fence-agents-apc-0:4.10.0-98.el9_7.13.noarch",
"product_id": "fence-agents-apc-0:4.10.0-98.el9_7.13.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-apc@4.10.0-98.el9_7.13?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-apc-snmp-0:4.10.0-98.el9_7.13.noarch",
"product": {
"name": "fence-agents-apc-snmp-0:4.10.0-98.el9_7.13.noarch",
"product_id": "fence-agents-apc-snmp-0:4.10.0-98.el9_7.13.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-apc-snmp@4.10.0-98.el9_7.13?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-bladecenter-0:4.10.0-98.el9_7.13.noarch",
"product": {
"name": "fence-agents-bladecenter-0:4.10.0-98.el9_7.13.noarch",
"product_id": "fence-agents-bladecenter-0:4.10.0-98.el9_7.13.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-bladecenter@4.10.0-98.el9_7.13?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-brocade-0:4.10.0-98.el9_7.13.noarch",
"product": {
"name": "fence-agents-brocade-0:4.10.0-98.el9_7.13.noarch",
"product_id": "fence-agents-brocade-0:4.10.0-98.el9_7.13.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-brocade@4.10.0-98.el9_7.13?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-cisco-mds-0:4.10.0-98.el9_7.13.noarch",
"product": {
"name": "fence-agents-cisco-mds-0:4.10.0-98.el9_7.13.noarch",
"product_id": "fence-agents-cisco-mds-0:4.10.0-98.el9_7.13.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-cisco-mds@4.10.0-98.el9_7.13?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-cisco-ucs-0:4.10.0-98.el9_7.13.noarch",
"product": {
"name": "fence-agents-cisco-ucs-0:4.10.0-98.el9_7.13.noarch",
"product_id": "fence-agents-cisco-ucs-0:4.10.0-98.el9_7.13.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-cisco-ucs@4.10.0-98.el9_7.13?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-common-0:4.10.0-98.el9_7.13.noarch",
"product": {
"name": "fence-agents-common-0:4.10.0-98.el9_7.13.noarch",
"product_id": "fence-agents-common-0:4.10.0-98.el9_7.13.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-common@4.10.0-98.el9_7.13?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-drac5-0:4.10.0-98.el9_7.13.noarch",
"product": {
"name": "fence-agents-drac5-0:4.10.0-98.el9_7.13.noarch",
"product_id": "fence-agents-drac5-0:4.10.0-98.el9_7.13.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-drac5@4.10.0-98.el9_7.13?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-eaton-snmp-0:4.10.0-98.el9_7.13.noarch",
"product": {
"name": "fence-agents-eaton-snmp-0:4.10.0-98.el9_7.13.noarch",
"product_id": "fence-agents-eaton-snmp-0:4.10.0-98.el9_7.13.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-eaton-snmp@4.10.0-98.el9_7.13?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-emerson-0:4.10.0-98.el9_7.13.noarch",
"product": {
"name": "fence-agents-emerson-0:4.10.0-98.el9_7.13.noarch",
"product_id": "fence-agents-emerson-0:4.10.0-98.el9_7.13.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-emerson@4.10.0-98.el9_7.13?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-eps-0:4.10.0-98.el9_7.13.noarch",
"product": {
"name": "fence-agents-eps-0:4.10.0-98.el9_7.13.noarch",
"product_id": "fence-agents-eps-0:4.10.0-98.el9_7.13.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-eps@4.10.0-98.el9_7.13?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-heuristics-ping-0:4.10.0-98.el9_7.13.noarch",
"product": {
"name": "fence-agents-heuristics-ping-0:4.10.0-98.el9_7.13.noarch",
"product_id": "fence-agents-heuristics-ping-0:4.10.0-98.el9_7.13.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-heuristics-ping@4.10.0-98.el9_7.13?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-hpblade-0:4.10.0-98.el9_7.13.noarch",
"product": {
"name": "fence-agents-hpblade-0:4.10.0-98.el9_7.13.noarch",
"product_id": "fence-agents-hpblade-0:4.10.0-98.el9_7.13.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-hpblade@4.10.0-98.el9_7.13?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-ibm-powervs-0:4.10.0-98.el9_7.13.noarch",
"product": {
"name": "fence-agents-ibm-powervs-0:4.10.0-98.el9_7.13.noarch",
"product_id": "fence-agents-ibm-powervs-0:4.10.0-98.el9_7.13.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-ibm-powervs@4.10.0-98.el9_7.13?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-ibm-vpc-0:4.10.0-98.el9_7.13.noarch",
"product": {
"name": "fence-agents-ibm-vpc-0:4.10.0-98.el9_7.13.noarch",
"product_id": "fence-agents-ibm-vpc-0:4.10.0-98.el9_7.13.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-ibm-vpc@4.10.0-98.el9_7.13?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-ibmblade-0:4.10.0-98.el9_7.13.noarch",
"product": {
"name": "fence-agents-ibmblade-0:4.10.0-98.el9_7.13.noarch",
"product_id": "fence-agents-ibmblade-0:4.10.0-98.el9_7.13.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-ibmblade@4.10.0-98.el9_7.13?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-ifmib-0:4.10.0-98.el9_7.13.noarch",
"product": {
"name": "fence-agents-ifmib-0:4.10.0-98.el9_7.13.noarch",
"product_id": "fence-agents-ifmib-0:4.10.0-98.el9_7.13.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-ifmib@4.10.0-98.el9_7.13?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-ilo-moonshot-0:4.10.0-98.el9_7.13.noarch",
"product": {
"name": "fence-agents-ilo-moonshot-0:4.10.0-98.el9_7.13.noarch",
"product_id": "fence-agents-ilo-moonshot-0:4.10.0-98.el9_7.13.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-ilo-moonshot@4.10.0-98.el9_7.13?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-ilo-mp-0:4.10.0-98.el9_7.13.noarch",
"product": {
"name": "fence-agents-ilo-mp-0:4.10.0-98.el9_7.13.noarch",
"product_id": "fence-agents-ilo-mp-0:4.10.0-98.el9_7.13.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-ilo-mp@4.10.0-98.el9_7.13?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-ilo-ssh-0:4.10.0-98.el9_7.13.noarch",
"product": {
"name": "fence-agents-ilo-ssh-0:4.10.0-98.el9_7.13.noarch",
"product_id": "fence-agents-ilo-ssh-0:4.10.0-98.el9_7.13.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-ilo-ssh@4.10.0-98.el9_7.13?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-ilo2-0:4.10.0-98.el9_7.13.noarch",
"product": {
"name": "fence-agents-ilo2-0:4.10.0-98.el9_7.13.noarch",
"product_id": "fence-agents-ilo2-0:4.10.0-98.el9_7.13.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-ilo2@4.10.0-98.el9_7.13?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-intelmodular-0:4.10.0-98.el9_7.13.noarch",
"product": {
"name": "fence-agents-intelmodular-0:4.10.0-98.el9_7.13.noarch",
"product_id": "fence-agents-intelmodular-0:4.10.0-98.el9_7.13.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-intelmodular@4.10.0-98.el9_7.13?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-ipdu-0:4.10.0-98.el9_7.13.noarch",
"product": {
"name": "fence-agents-ipdu-0:4.10.0-98.el9_7.13.noarch",
"product_id": "fence-agents-ipdu-0:4.10.0-98.el9_7.13.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-ipdu@4.10.0-98.el9_7.13?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-ipmilan-0:4.10.0-98.el9_7.13.noarch",
"product": {
"name": "fence-agents-ipmilan-0:4.10.0-98.el9_7.13.noarch",
"product_id": "fence-agents-ipmilan-0:4.10.0-98.el9_7.13.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-ipmilan@4.10.0-98.el9_7.13?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-lpar-0:4.10.0-98.el9_7.13.noarch",
"product": {
"name": "fence-agents-lpar-0:4.10.0-98.el9_7.13.noarch",
"product_id": "fence-agents-lpar-0:4.10.0-98.el9_7.13.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-lpar@4.10.0-98.el9_7.13?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-mpath-0:4.10.0-98.el9_7.13.noarch",
"product": {
"name": "fence-agents-mpath-0:4.10.0-98.el9_7.13.noarch",
"product_id": "fence-agents-mpath-0:4.10.0-98.el9_7.13.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-mpath@4.10.0-98.el9_7.13?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-nutanix-ahv-0:4.10.0-98.el9_7.13.noarch",
"product": {
"name": "fence-agents-nutanix-ahv-0:4.10.0-98.el9_7.13.noarch",
"product_id": "fence-agents-nutanix-ahv-0:4.10.0-98.el9_7.13.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-nutanix-ahv@4.10.0-98.el9_7.13?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-rhevm-0:4.10.0-98.el9_7.13.noarch",
"product": {
"name": "fence-agents-rhevm-0:4.10.0-98.el9_7.13.noarch",
"product_id": "fence-agents-rhevm-0:4.10.0-98.el9_7.13.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-rhevm@4.10.0-98.el9_7.13?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-rsa-0:4.10.0-98.el9_7.13.noarch",
"product": {
"name": "fence-agents-rsa-0:4.10.0-98.el9_7.13.noarch",
"product_id": "fence-agents-rsa-0:4.10.0-98.el9_7.13.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-rsa@4.10.0-98.el9_7.13?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-rsb-0:4.10.0-98.el9_7.13.noarch",
"product": {
"name": "fence-agents-rsb-0:4.10.0-98.el9_7.13.noarch",
"product_id": "fence-agents-rsb-0:4.10.0-98.el9_7.13.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-rsb@4.10.0-98.el9_7.13?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-sbd-0:4.10.0-98.el9_7.13.noarch",
"product": {
"name": "fence-agents-sbd-0:4.10.0-98.el9_7.13.noarch",
"product_id": "fence-agents-sbd-0:4.10.0-98.el9_7.13.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-sbd@4.10.0-98.el9_7.13?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-scsi-0:4.10.0-98.el9_7.13.noarch",
"product": {
"name": "fence-agents-scsi-0:4.10.0-98.el9_7.13.noarch",
"product_id": "fence-agents-scsi-0:4.10.0-98.el9_7.13.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-scsi@4.10.0-98.el9_7.13?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-virsh-0:4.10.0-98.el9_7.13.noarch",
"product": {
"name": "fence-agents-virsh-0:4.10.0-98.el9_7.13.noarch",
"product_id": "fence-agents-virsh-0:4.10.0-98.el9_7.13.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-virsh@4.10.0-98.el9_7.13?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-vmware-rest-0:4.10.0-98.el9_7.13.noarch",
"product": {
"name": "fence-agents-vmware-rest-0:4.10.0-98.el9_7.13.noarch",
"product_id": "fence-agents-vmware-rest-0:4.10.0-98.el9_7.13.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-vmware-rest@4.10.0-98.el9_7.13?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-vmware-soap-0:4.10.0-98.el9_7.13.noarch",
"product": {
"name": "fence-agents-vmware-soap-0:4.10.0-98.el9_7.13.noarch",
"product_id": "fence-agents-vmware-soap-0:4.10.0-98.el9_7.13.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-vmware-soap@4.10.0-98.el9_7.13?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-wti-0:4.10.0-98.el9_7.13.noarch",
"product": {
"name": "fence-agents-wti-0:4.10.0-98.el9_7.13.noarch",
"product_id": "fence-agents-wti-0:4.10.0-98.el9_7.13.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-wti@4.10.0-98.el9_7.13?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-0:4.10.0-98.el9_7.13.src as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:fence-agents-0:4.10.0-98.el9_7.13.src"
},
"product_reference": "fence-agents-0:4.10.0-98.el9_7.13.src",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-aliyun-0:4.10.0-98.el9_7.13.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:fence-agents-aliyun-0:4.10.0-98.el9_7.13.x86_64"
},
"product_reference": "fence-agents-aliyun-0:4.10.0-98.el9_7.13.x86_64",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-all-0:4.10.0-98.el9_7.13.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:fence-agents-all-0:4.10.0-98.el9_7.13.aarch64"
},
"product_reference": "fence-agents-all-0:4.10.0-98.el9_7.13.aarch64",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-all-0:4.10.0-98.el9_7.13.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:fence-agents-all-0:4.10.0-98.el9_7.13.ppc64le"
},
"product_reference": "fence-agents-all-0:4.10.0-98.el9_7.13.ppc64le",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-all-0:4.10.0-98.el9_7.13.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:fence-agents-all-0:4.10.0-98.el9_7.13.s390x"
},
"product_reference": "fence-agents-all-0:4.10.0-98.el9_7.13.s390x",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-all-0:4.10.0-98.el9_7.13.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:fence-agents-all-0:4.10.0-98.el9_7.13.x86_64"
},
"product_reference": "fence-agents-all-0:4.10.0-98.el9_7.13.x86_64",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-amt-ws-0:4.10.0-98.el9_7.13.noarch as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:fence-agents-amt-ws-0:4.10.0-98.el9_7.13.noarch"
},
"product_reference": "fence-agents-amt-ws-0:4.10.0-98.el9_7.13.noarch",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-apc-0:4.10.0-98.el9_7.13.noarch as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:fence-agents-apc-0:4.10.0-98.el9_7.13.noarch"
},
"product_reference": "fence-agents-apc-0:4.10.0-98.el9_7.13.noarch",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-apc-snmp-0:4.10.0-98.el9_7.13.noarch as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:fence-agents-apc-snmp-0:4.10.0-98.el9_7.13.noarch"
},
"product_reference": "fence-agents-apc-snmp-0:4.10.0-98.el9_7.13.noarch",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-aws-0:4.10.0-98.el9_7.13.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:fence-agents-aws-0:4.10.0-98.el9_7.13.x86_64"
},
"product_reference": "fence-agents-aws-0:4.10.0-98.el9_7.13.x86_64",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-azure-arm-0:4.10.0-98.el9_7.13.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:fence-agents-azure-arm-0:4.10.0-98.el9_7.13.x86_64"
},
"product_reference": "fence-agents-azure-arm-0:4.10.0-98.el9_7.13.x86_64",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-bladecenter-0:4.10.0-98.el9_7.13.noarch as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:fence-agents-bladecenter-0:4.10.0-98.el9_7.13.noarch"
},
"product_reference": "fence-agents-bladecenter-0:4.10.0-98.el9_7.13.noarch",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-brocade-0:4.10.0-98.el9_7.13.noarch as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:fence-agents-brocade-0:4.10.0-98.el9_7.13.noarch"
},
"product_reference": "fence-agents-brocade-0:4.10.0-98.el9_7.13.noarch",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-cisco-mds-0:4.10.0-98.el9_7.13.noarch as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:fence-agents-cisco-mds-0:4.10.0-98.el9_7.13.noarch"
},
"product_reference": "fence-agents-cisco-mds-0:4.10.0-98.el9_7.13.noarch",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-cisco-ucs-0:4.10.0-98.el9_7.13.noarch as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:fence-agents-cisco-ucs-0:4.10.0-98.el9_7.13.noarch"
},
"product_reference": "fence-agents-cisco-ucs-0:4.10.0-98.el9_7.13.noarch",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-common-0:4.10.0-98.el9_7.13.noarch as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:fence-agents-common-0:4.10.0-98.el9_7.13.noarch"
},
"product_reference": "fence-agents-common-0:4.10.0-98.el9_7.13.noarch",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-compute-0:4.10.0-98.el9_7.13.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:fence-agents-compute-0:4.10.0-98.el9_7.13.ppc64le"
},
"product_reference": "fence-agents-compute-0:4.10.0-98.el9_7.13.ppc64le",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-compute-0:4.10.0-98.el9_7.13.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:fence-agents-compute-0:4.10.0-98.el9_7.13.x86_64"
},
"product_reference": "fence-agents-compute-0:4.10.0-98.el9_7.13.x86_64",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-debuginfo-0:4.10.0-98.el9_7.13.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:fence-agents-debuginfo-0:4.10.0-98.el9_7.13.aarch64"
},
"product_reference": "fence-agents-debuginfo-0:4.10.0-98.el9_7.13.aarch64",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-debuginfo-0:4.10.0-98.el9_7.13.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:fence-agents-debuginfo-0:4.10.0-98.el9_7.13.ppc64le"
},
"product_reference": "fence-agents-debuginfo-0:4.10.0-98.el9_7.13.ppc64le",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-debuginfo-0:4.10.0-98.el9_7.13.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:fence-agents-debuginfo-0:4.10.0-98.el9_7.13.s390x"
},
"product_reference": "fence-agents-debuginfo-0:4.10.0-98.el9_7.13.s390x",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-debuginfo-0:4.10.0-98.el9_7.13.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:fence-agents-debuginfo-0:4.10.0-98.el9_7.13.x86_64"
},
"product_reference": "fence-agents-debuginfo-0:4.10.0-98.el9_7.13.x86_64",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-debugsource-0:4.10.0-98.el9_7.13.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:fence-agents-debugsource-0:4.10.0-98.el9_7.13.aarch64"
},
"product_reference": "fence-agents-debugsource-0:4.10.0-98.el9_7.13.aarch64",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-debugsource-0:4.10.0-98.el9_7.13.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:fence-agents-debugsource-0:4.10.0-98.el9_7.13.ppc64le"
},
"product_reference": "fence-agents-debugsource-0:4.10.0-98.el9_7.13.ppc64le",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-debugsource-0:4.10.0-98.el9_7.13.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:fence-agents-debugsource-0:4.10.0-98.el9_7.13.s390x"
},
"product_reference": "fence-agents-debugsource-0:4.10.0-98.el9_7.13.s390x",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-debugsource-0:4.10.0-98.el9_7.13.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:fence-agents-debugsource-0:4.10.0-98.el9_7.13.x86_64"
},
"product_reference": "fence-agents-debugsource-0:4.10.0-98.el9_7.13.x86_64",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-drac5-0:4.10.0-98.el9_7.13.noarch as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:fence-agents-drac5-0:4.10.0-98.el9_7.13.noarch"
},
"product_reference": "fence-agents-drac5-0:4.10.0-98.el9_7.13.noarch",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-eaton-snmp-0:4.10.0-98.el9_7.13.noarch as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:fence-agents-eaton-snmp-0:4.10.0-98.el9_7.13.noarch"
},
"product_reference": "fence-agents-eaton-snmp-0:4.10.0-98.el9_7.13.noarch",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-emerson-0:4.10.0-98.el9_7.13.noarch as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:fence-agents-emerson-0:4.10.0-98.el9_7.13.noarch"
},
"product_reference": "fence-agents-emerson-0:4.10.0-98.el9_7.13.noarch",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-eps-0:4.10.0-98.el9_7.13.noarch as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:fence-agents-eps-0:4.10.0-98.el9_7.13.noarch"
},
"product_reference": "fence-agents-eps-0:4.10.0-98.el9_7.13.noarch",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-gce-0:4.10.0-98.el9_7.13.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:fence-agents-gce-0:4.10.0-98.el9_7.13.x86_64"
},
"product_reference": "fence-agents-gce-0:4.10.0-98.el9_7.13.x86_64",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-heuristics-ping-0:4.10.0-98.el9_7.13.noarch as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:fence-agents-heuristics-ping-0:4.10.0-98.el9_7.13.noarch"
},
"product_reference": "fence-agents-heuristics-ping-0:4.10.0-98.el9_7.13.noarch",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-hpblade-0:4.10.0-98.el9_7.13.noarch as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:fence-agents-hpblade-0:4.10.0-98.el9_7.13.noarch"
},
"product_reference": "fence-agents-hpblade-0:4.10.0-98.el9_7.13.noarch",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-ibm-powervs-0:4.10.0-98.el9_7.13.noarch as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:fence-agents-ibm-powervs-0:4.10.0-98.el9_7.13.noarch"
},
"product_reference": "fence-agents-ibm-powervs-0:4.10.0-98.el9_7.13.noarch",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-ibm-vpc-0:4.10.0-98.el9_7.13.noarch as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:fence-agents-ibm-vpc-0:4.10.0-98.el9_7.13.noarch"
},
"product_reference": "fence-agents-ibm-vpc-0:4.10.0-98.el9_7.13.noarch",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-ibmblade-0:4.10.0-98.el9_7.13.noarch as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:fence-agents-ibmblade-0:4.10.0-98.el9_7.13.noarch"
},
"product_reference": "fence-agents-ibmblade-0:4.10.0-98.el9_7.13.noarch",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-ifmib-0:4.10.0-98.el9_7.13.noarch as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:fence-agents-ifmib-0:4.10.0-98.el9_7.13.noarch"
},
"product_reference": "fence-agents-ifmib-0:4.10.0-98.el9_7.13.noarch",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-ilo-moonshot-0:4.10.0-98.el9_7.13.noarch as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:fence-agents-ilo-moonshot-0:4.10.0-98.el9_7.13.noarch"
},
"product_reference": "fence-agents-ilo-moonshot-0:4.10.0-98.el9_7.13.noarch",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-ilo-mp-0:4.10.0-98.el9_7.13.noarch as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:fence-agents-ilo-mp-0:4.10.0-98.el9_7.13.noarch"
},
"product_reference": "fence-agents-ilo-mp-0:4.10.0-98.el9_7.13.noarch",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-ilo-ssh-0:4.10.0-98.el9_7.13.noarch as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:fence-agents-ilo-ssh-0:4.10.0-98.el9_7.13.noarch"
},
"product_reference": "fence-agents-ilo-ssh-0:4.10.0-98.el9_7.13.noarch",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-ilo2-0:4.10.0-98.el9_7.13.noarch as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:fence-agents-ilo2-0:4.10.0-98.el9_7.13.noarch"
},
"product_reference": "fence-agents-ilo2-0:4.10.0-98.el9_7.13.noarch",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-intelmodular-0:4.10.0-98.el9_7.13.noarch as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:fence-agents-intelmodular-0:4.10.0-98.el9_7.13.noarch"
},
"product_reference": "fence-agents-intelmodular-0:4.10.0-98.el9_7.13.noarch",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-ipdu-0:4.10.0-98.el9_7.13.noarch as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:fence-agents-ipdu-0:4.10.0-98.el9_7.13.noarch"
},
"product_reference": "fence-agents-ipdu-0:4.10.0-98.el9_7.13.noarch",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-ipmilan-0:4.10.0-98.el9_7.13.noarch as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:fence-agents-ipmilan-0:4.10.0-98.el9_7.13.noarch"
},
"product_reference": "fence-agents-ipmilan-0:4.10.0-98.el9_7.13.noarch",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-kdump-0:4.10.0-98.el9_7.13.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:fence-agents-kdump-0:4.10.0-98.el9_7.13.aarch64"
},
"product_reference": "fence-agents-kdump-0:4.10.0-98.el9_7.13.aarch64",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-kdump-0:4.10.0-98.el9_7.13.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:fence-agents-kdump-0:4.10.0-98.el9_7.13.ppc64le"
},
"product_reference": "fence-agents-kdump-0:4.10.0-98.el9_7.13.ppc64le",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-kdump-0:4.10.0-98.el9_7.13.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:fence-agents-kdump-0:4.10.0-98.el9_7.13.s390x"
},
"product_reference": "fence-agents-kdump-0:4.10.0-98.el9_7.13.s390x",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-kdump-0:4.10.0-98.el9_7.13.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:fence-agents-kdump-0:4.10.0-98.el9_7.13.x86_64"
},
"product_reference": "fence-agents-kdump-0:4.10.0-98.el9_7.13.x86_64",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-kdump-debuginfo-0:4.10.0-98.el9_7.13.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:fence-agents-kdump-debuginfo-0:4.10.0-98.el9_7.13.aarch64"
},
"product_reference": "fence-agents-kdump-debuginfo-0:4.10.0-98.el9_7.13.aarch64",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-kdump-debuginfo-0:4.10.0-98.el9_7.13.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:fence-agents-kdump-debuginfo-0:4.10.0-98.el9_7.13.ppc64le"
},
"product_reference": "fence-agents-kdump-debuginfo-0:4.10.0-98.el9_7.13.ppc64le",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-kdump-debuginfo-0:4.10.0-98.el9_7.13.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:fence-agents-kdump-debuginfo-0:4.10.0-98.el9_7.13.s390x"
},
"product_reference": "fence-agents-kdump-debuginfo-0:4.10.0-98.el9_7.13.s390x",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-kdump-debuginfo-0:4.10.0-98.el9_7.13.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:fence-agents-kdump-debuginfo-0:4.10.0-98.el9_7.13.x86_64"
},
"product_reference": "fence-agents-kdump-debuginfo-0:4.10.0-98.el9_7.13.x86_64",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-kubevirt-0:4.10.0-98.el9_7.13.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:fence-agents-kubevirt-0:4.10.0-98.el9_7.13.aarch64"
},
"product_reference": "fence-agents-kubevirt-0:4.10.0-98.el9_7.13.aarch64",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-kubevirt-0:4.10.0-98.el9_7.13.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:fence-agents-kubevirt-0:4.10.0-98.el9_7.13.ppc64le"
},
"product_reference": "fence-agents-kubevirt-0:4.10.0-98.el9_7.13.ppc64le",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-kubevirt-0:4.10.0-98.el9_7.13.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:fence-agents-kubevirt-0:4.10.0-98.el9_7.13.s390x"
},
"product_reference": "fence-agents-kubevirt-0:4.10.0-98.el9_7.13.s390x",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-kubevirt-0:4.10.0-98.el9_7.13.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:fence-agents-kubevirt-0:4.10.0-98.el9_7.13.x86_64"
},
"product_reference": "fence-agents-kubevirt-0:4.10.0-98.el9_7.13.x86_64",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-kubevirt-debuginfo-0:4.10.0-98.el9_7.13.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:fence-agents-kubevirt-debuginfo-0:4.10.0-98.el9_7.13.aarch64"
},
"product_reference": "fence-agents-kubevirt-debuginfo-0:4.10.0-98.el9_7.13.aarch64",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-kubevirt-debuginfo-0:4.10.0-98.el9_7.13.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:fence-agents-kubevirt-debuginfo-0:4.10.0-98.el9_7.13.ppc64le"
},
"product_reference": "fence-agents-kubevirt-debuginfo-0:4.10.0-98.el9_7.13.ppc64le",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-kubevirt-debuginfo-0:4.10.0-98.el9_7.13.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:fence-agents-kubevirt-debuginfo-0:4.10.0-98.el9_7.13.s390x"
},
"product_reference": "fence-agents-kubevirt-debuginfo-0:4.10.0-98.el9_7.13.s390x",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-kubevirt-debuginfo-0:4.10.0-98.el9_7.13.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:fence-agents-kubevirt-debuginfo-0:4.10.0-98.el9_7.13.x86_64"
},
"product_reference": "fence-agents-kubevirt-debuginfo-0:4.10.0-98.el9_7.13.x86_64",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-lpar-0:4.10.0-98.el9_7.13.noarch as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:fence-agents-lpar-0:4.10.0-98.el9_7.13.noarch"
},
"product_reference": "fence-agents-lpar-0:4.10.0-98.el9_7.13.noarch",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-mpath-0:4.10.0-98.el9_7.13.noarch as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:fence-agents-mpath-0:4.10.0-98.el9_7.13.noarch"
},
"product_reference": "fence-agents-mpath-0:4.10.0-98.el9_7.13.noarch",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-nutanix-ahv-0:4.10.0-98.el9_7.13.noarch as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:fence-agents-nutanix-ahv-0:4.10.0-98.el9_7.13.noarch"
},
"product_reference": "fence-agents-nutanix-ahv-0:4.10.0-98.el9_7.13.noarch",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-openstack-0:4.10.0-98.el9_7.13.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:fence-agents-openstack-0:4.10.0-98.el9_7.13.ppc64le"
},
"product_reference": "fence-agents-openstack-0:4.10.0-98.el9_7.13.ppc64le",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-openstack-0:4.10.0-98.el9_7.13.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:fence-agents-openstack-0:4.10.0-98.el9_7.13.x86_64"
},
"product_reference": "fence-agents-openstack-0:4.10.0-98.el9_7.13.x86_64",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-redfish-0:4.10.0-98.el9_7.13.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:fence-agents-redfish-0:4.10.0-98.el9_7.13.aarch64"
},
"product_reference": "fence-agents-redfish-0:4.10.0-98.el9_7.13.aarch64",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-redfish-0:4.10.0-98.el9_7.13.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:fence-agents-redfish-0:4.10.0-98.el9_7.13.ppc64le"
},
"product_reference": "fence-agents-redfish-0:4.10.0-98.el9_7.13.ppc64le",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-redfish-0:4.10.0-98.el9_7.13.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:fence-agents-redfish-0:4.10.0-98.el9_7.13.s390x"
},
"product_reference": "fence-agents-redfish-0:4.10.0-98.el9_7.13.s390x",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-redfish-0:4.10.0-98.el9_7.13.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:fence-agents-redfish-0:4.10.0-98.el9_7.13.x86_64"
},
"product_reference": "fence-agents-redfish-0:4.10.0-98.el9_7.13.x86_64",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-rhevm-0:4.10.0-98.el9_7.13.noarch as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:fence-agents-rhevm-0:4.10.0-98.el9_7.13.noarch"
},
"product_reference": "fence-agents-rhevm-0:4.10.0-98.el9_7.13.noarch",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-rsa-0:4.10.0-98.el9_7.13.noarch as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:fence-agents-rsa-0:4.10.0-98.el9_7.13.noarch"
},
"product_reference": "fence-agents-rsa-0:4.10.0-98.el9_7.13.noarch",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-rsb-0:4.10.0-98.el9_7.13.noarch as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:fence-agents-rsb-0:4.10.0-98.el9_7.13.noarch"
},
"product_reference": "fence-agents-rsb-0:4.10.0-98.el9_7.13.noarch",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-sbd-0:4.10.0-98.el9_7.13.noarch as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:fence-agents-sbd-0:4.10.0-98.el9_7.13.noarch"
},
"product_reference": "fence-agents-sbd-0:4.10.0-98.el9_7.13.noarch",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-scsi-0:4.10.0-98.el9_7.13.noarch as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:fence-agents-scsi-0:4.10.0-98.el9_7.13.noarch"
},
"product_reference": "fence-agents-scsi-0:4.10.0-98.el9_7.13.noarch",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-virsh-0:4.10.0-98.el9_7.13.noarch as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:fence-agents-virsh-0:4.10.0-98.el9_7.13.noarch"
},
"product_reference": "fence-agents-virsh-0:4.10.0-98.el9_7.13.noarch",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-vmware-rest-0:4.10.0-98.el9_7.13.noarch as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:fence-agents-vmware-rest-0:4.10.0-98.el9_7.13.noarch"
},
"product_reference": "fence-agents-vmware-rest-0:4.10.0-98.el9_7.13.noarch",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-vmware-soap-0:4.10.0-98.el9_7.13.noarch as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:fence-agents-vmware-soap-0:4.10.0-98.el9_7.13.noarch"
},
"product_reference": "fence-agents-vmware-soap-0:4.10.0-98.el9_7.13.noarch",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-wti-0:4.10.0-98.el9_7.13.noarch as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:fence-agents-wti-0:4.10.0-98.el9_7.13.noarch"
},
"product_reference": "fence-agents-wti-0:4.10.0-98.el9_7.13.noarch",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-zvm-0:4.10.0-98.el9_7.13.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:fence-agents-zvm-0:4.10.0-98.el9_7.13.s390x"
},
"product_reference": "fence-agents-zvm-0:4.10.0-98.el9_7.13.s390x",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-virt-0:4.10.0-98.el9_7.13.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:fence-virt-0:4.10.0-98.el9_7.13.x86_64"
},
"product_reference": "fence-virt-0:4.10.0-98.el9_7.13.x86_64",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-virt-debuginfo-0:4.10.0-98.el9_7.13.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:fence-virt-debuginfo-0:4.10.0-98.el9_7.13.x86_64"
},
"product_reference": "fence-virt-debuginfo-0:4.10.0-98.el9_7.13.x86_64",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-virtd-0:4.10.0-98.el9_7.13.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:fence-virtd-0:4.10.0-98.el9_7.13.x86_64"
},
"product_reference": "fence-virtd-0:4.10.0-98.el9_7.13.x86_64",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-virtd-cpg-0:4.10.0-98.el9_7.13.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:fence-virtd-cpg-0:4.10.0-98.el9_7.13.x86_64"
},
"product_reference": "fence-virtd-cpg-0:4.10.0-98.el9_7.13.x86_64",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-virtd-cpg-debuginfo-0:4.10.0-98.el9_7.13.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:fence-virtd-cpg-debuginfo-0:4.10.0-98.el9_7.13.x86_64"
},
"product_reference": "fence-virtd-cpg-debuginfo-0:4.10.0-98.el9_7.13.x86_64",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-virtd-debuginfo-0:4.10.0-98.el9_7.13.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:fence-virtd-debuginfo-0:4.10.0-98.el9_7.13.x86_64"
},
"product_reference": "fence-virtd-debuginfo-0:4.10.0-98.el9_7.13.x86_64",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-virtd-libvirt-0:4.10.0-98.el9_7.13.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:fence-virtd-libvirt-0:4.10.0-98.el9_7.13.x86_64"
},
"product_reference": "fence-virtd-libvirt-0:4.10.0-98.el9_7.13.x86_64",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-virtd-libvirt-debuginfo-0:4.10.0-98.el9_7.13.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:fence-virtd-libvirt-debuginfo-0:4.10.0-98.el9_7.13.x86_64"
},
"product_reference": "fence-virtd-libvirt-debuginfo-0:4.10.0-98.el9_7.13.x86_64",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-virtd-multicast-0:4.10.0-98.el9_7.13.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:fence-virtd-multicast-0:4.10.0-98.el9_7.13.x86_64"
},
"product_reference": "fence-virtd-multicast-0:4.10.0-98.el9_7.13.x86_64",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-virtd-multicast-debuginfo-0:4.10.0-98.el9_7.13.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:fence-virtd-multicast-debuginfo-0:4.10.0-98.el9_7.13.x86_64"
},
"product_reference": "fence-virtd-multicast-debuginfo-0:4.10.0-98.el9_7.13.x86_64",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-virtd-serial-0:4.10.0-98.el9_7.13.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:fence-virtd-serial-0:4.10.0-98.el9_7.13.x86_64"
},
"product_reference": "fence-virtd-serial-0:4.10.0-98.el9_7.13.x86_64",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-virtd-serial-debuginfo-0:4.10.0-98.el9_7.13.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:fence-virtd-serial-debuginfo-0:4.10.0-98.el9_7.13.x86_64"
},
"product_reference": "fence-virtd-serial-debuginfo-0:4.10.0-98.el9_7.13.x86_64",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-virtd-tcp-0:4.10.0-98.el9_7.13.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:fence-virtd-tcp-0:4.10.0-98.el9_7.13.x86_64"
},
"product_reference": "fence-virtd-tcp-0:4.10.0-98.el9_7.13.x86_64",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-virtd-tcp-debuginfo-0:4.10.0-98.el9_7.13.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:fence-virtd-tcp-debuginfo-0:4.10.0-98.el9_7.13.x86_64"
},
"product_reference": "fence-virtd-tcp-debuginfo-0:4.10.0-98.el9_7.13.x86_64",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ha-cloud-support-0:4.10.0-98.el9_7.13.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:ha-cloud-support-0:4.10.0-98.el9_7.13.ppc64le"
},
"product_reference": "ha-cloud-support-0:4.10.0-98.el9_7.13.ppc64le",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ha-cloud-support-0:4.10.0-98.el9_7.13.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:ha-cloud-support-0:4.10.0-98.el9_7.13.x86_64"
},
"product_reference": "ha-cloud-support-0:4.10.0-98.el9_7.13.x86_64",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ha-cloud-support-debuginfo-0:4.10.0-98.el9_7.13.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.7.0.Z.MAIN:ha-cloud-support-debuginfo-0:4.10.0-98.el9_7.13.x86_64"
},
"product_reference": "ha-cloud-support-debuginfo-0:4.10.0-98.el9_7.13.x86_64",
"relates_to_product_reference": "AppStream-9.7.0.Z.MAIN"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-30922",
"cwe": {
"id": "CWE-835",
"name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
},
"discovery_date": "2026-03-18T04:02:45.401296+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2448553"
}
],
"notes": [
{
"category": "description",
"text": "An unbounded recursion flaw has been discovered in the pypi pyasn1 library. This uncontrolled recursion occurs when decoding ASN.1 data with deeply nested structures. An attacker can supply a crafted payload containing nested SEQUENCE (0x30) or SET (0x31) tags with Indefinite Length (0x80) markers. This forces the decoder to recursively call itself until the Python interpreter crashes with a RecursionError or consumes all available memory (OOM), crashing the host application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "pyasn1: pyasn1 Vulnerable to Denial of Service via Unbounded Recursion",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.7.0.Z.MAIN:fence-agents-0:4.10.0-98.el9_7.13.src",
"AppStream-9.7.0.Z.MAIN:fence-agents-aliyun-0:4.10.0-98.el9_7.13.x86_64",
"AppStream-9.7.0.Z.MAIN:fence-agents-all-0:4.10.0-98.el9_7.13.aarch64",
"AppStream-9.7.0.Z.MAIN:fence-agents-all-0:4.10.0-98.el9_7.13.ppc64le",
"AppStream-9.7.0.Z.MAIN:fence-agents-all-0:4.10.0-98.el9_7.13.s390x",
"AppStream-9.7.0.Z.MAIN:fence-agents-all-0:4.10.0-98.el9_7.13.x86_64",
"AppStream-9.7.0.Z.MAIN:fence-agents-amt-ws-0:4.10.0-98.el9_7.13.noarch",
"AppStream-9.7.0.Z.MAIN:fence-agents-apc-0:4.10.0-98.el9_7.13.noarch",
"AppStream-9.7.0.Z.MAIN:fence-agents-apc-snmp-0:4.10.0-98.el9_7.13.noarch",
"AppStream-9.7.0.Z.MAIN:fence-agents-aws-0:4.10.0-98.el9_7.13.x86_64",
"AppStream-9.7.0.Z.MAIN:fence-agents-azure-arm-0:4.10.0-98.el9_7.13.x86_64",
"AppStream-9.7.0.Z.MAIN:fence-agents-bladecenter-0:4.10.0-98.el9_7.13.noarch",
"AppStream-9.7.0.Z.MAIN:fence-agents-brocade-0:4.10.0-98.el9_7.13.noarch",
"AppStream-9.7.0.Z.MAIN:fence-agents-cisco-mds-0:4.10.0-98.el9_7.13.noarch",
"AppStream-9.7.0.Z.MAIN:fence-agents-cisco-ucs-0:4.10.0-98.el9_7.13.noarch",
"AppStream-9.7.0.Z.MAIN:fence-agents-common-0:4.10.0-98.el9_7.13.noarch",
"AppStream-9.7.0.Z.MAIN:fence-agents-compute-0:4.10.0-98.el9_7.13.ppc64le",
"AppStream-9.7.0.Z.MAIN:fence-agents-compute-0:4.10.0-98.el9_7.13.x86_64",
"AppStream-9.7.0.Z.MAIN:fence-agents-debuginfo-0:4.10.0-98.el9_7.13.aarch64",
"AppStream-9.7.0.Z.MAIN:fence-agents-debuginfo-0:4.10.0-98.el9_7.13.ppc64le",
"AppStream-9.7.0.Z.MAIN:fence-agents-debuginfo-0:4.10.0-98.el9_7.13.s390x",
"AppStream-9.7.0.Z.MAIN:fence-agents-debuginfo-0:4.10.0-98.el9_7.13.x86_64",
"AppStream-9.7.0.Z.MAIN:fence-agents-debugsource-0:4.10.0-98.el9_7.13.aarch64",
"AppStream-9.7.0.Z.MAIN:fence-agents-debugsource-0:4.10.0-98.el9_7.13.ppc64le",
"AppStream-9.7.0.Z.MAIN:fence-agents-debugsource-0:4.10.0-98.el9_7.13.s390x",
"AppStream-9.7.0.Z.MAIN:fence-agents-debugsource-0:4.10.0-98.el9_7.13.x86_64",
"AppStream-9.7.0.Z.MAIN:fence-agents-drac5-0:4.10.0-98.el9_7.13.noarch",
"AppStream-9.7.0.Z.MAIN:fence-agents-eaton-snmp-0:4.10.0-98.el9_7.13.noarch",
"AppStream-9.7.0.Z.MAIN:fence-agents-emerson-0:4.10.0-98.el9_7.13.noarch",
"AppStream-9.7.0.Z.MAIN:fence-agents-eps-0:4.10.0-98.el9_7.13.noarch",
"AppStream-9.7.0.Z.MAIN:fence-agents-gce-0:4.10.0-98.el9_7.13.x86_64",
"AppStream-9.7.0.Z.MAIN:fence-agents-heuristics-ping-0:4.10.0-98.el9_7.13.noarch",
"AppStream-9.7.0.Z.MAIN:fence-agents-hpblade-0:4.10.0-98.el9_7.13.noarch",
"AppStream-9.7.0.Z.MAIN:fence-agents-ibm-powervs-0:4.10.0-98.el9_7.13.noarch",
"AppStream-9.7.0.Z.MAIN:fence-agents-ibm-vpc-0:4.10.0-98.el9_7.13.noarch",
"AppStream-9.7.0.Z.MAIN:fence-agents-ibmblade-0:4.10.0-98.el9_7.13.noarch",
"AppStream-9.7.0.Z.MAIN:fence-agents-ifmib-0:4.10.0-98.el9_7.13.noarch",
"AppStream-9.7.0.Z.MAIN:fence-agents-ilo-moonshot-0:4.10.0-98.el9_7.13.noarch",
"AppStream-9.7.0.Z.MAIN:fence-agents-ilo-mp-0:4.10.0-98.el9_7.13.noarch",
"AppStream-9.7.0.Z.MAIN:fence-agents-ilo-ssh-0:4.10.0-98.el9_7.13.noarch",
"AppStream-9.7.0.Z.MAIN:fence-agents-ilo2-0:4.10.0-98.el9_7.13.noarch",
"AppStream-9.7.0.Z.MAIN:fence-agents-intelmodular-0:4.10.0-98.el9_7.13.noarch",
"AppStream-9.7.0.Z.MAIN:fence-agents-ipdu-0:4.10.0-98.el9_7.13.noarch",
"AppStream-9.7.0.Z.MAIN:fence-agents-ipmilan-0:4.10.0-98.el9_7.13.noarch",
"AppStream-9.7.0.Z.MAIN:fence-agents-kdump-0:4.10.0-98.el9_7.13.aarch64",
"AppStream-9.7.0.Z.MAIN:fence-agents-kdump-0:4.10.0-98.el9_7.13.ppc64le",
"AppStream-9.7.0.Z.MAIN:fence-agents-kdump-0:4.10.0-98.el9_7.13.s390x",
"AppStream-9.7.0.Z.MAIN:fence-agents-kdump-0:4.10.0-98.el9_7.13.x86_64",
"AppStream-9.7.0.Z.MAIN:fence-agents-kdump-debuginfo-0:4.10.0-98.el9_7.13.aarch64",
"AppStream-9.7.0.Z.MAIN:fence-agents-kdump-debuginfo-0:4.10.0-98.el9_7.13.ppc64le",
"AppStream-9.7.0.Z.MAIN:fence-agents-kdump-debuginfo-0:4.10.0-98.el9_7.13.s390x",
"AppStream-9.7.0.Z.MAIN:fence-agents-kdump-debuginfo-0:4.10.0-98.el9_7.13.x86_64",
"AppStream-9.7.0.Z.MAIN:fence-agents-kubevirt-0:4.10.0-98.el9_7.13.aarch64",
"AppStream-9.7.0.Z.MAIN:fence-agents-kubevirt-0:4.10.0-98.el9_7.13.ppc64le",
"AppStream-9.7.0.Z.MAIN:fence-agents-kubevirt-0:4.10.0-98.el9_7.13.s390x",
"AppStream-9.7.0.Z.MAIN:fence-agents-kubevirt-0:4.10.0-98.el9_7.13.x86_64",
"AppStream-9.7.0.Z.MAIN:fence-agents-kubevirt-debuginfo-0:4.10.0-98.el9_7.13.aarch64",
"AppStream-9.7.0.Z.MAIN:fence-agents-kubevirt-debuginfo-0:4.10.0-98.el9_7.13.ppc64le",
"AppStream-9.7.0.Z.MAIN:fence-agents-kubevirt-debuginfo-0:4.10.0-98.el9_7.13.s390x",
"AppStream-9.7.0.Z.MAIN:fence-agents-kubevirt-debuginfo-0:4.10.0-98.el9_7.13.x86_64",
"AppStream-9.7.0.Z.MAIN:fence-agents-lpar-0:4.10.0-98.el9_7.13.noarch",
"AppStream-9.7.0.Z.MAIN:fence-agents-mpath-0:4.10.0-98.el9_7.13.noarch",
"AppStream-9.7.0.Z.MAIN:fence-agents-nutanix-ahv-0:4.10.0-98.el9_7.13.noarch",
"AppStream-9.7.0.Z.MAIN:fence-agents-openstack-0:4.10.0-98.el9_7.13.ppc64le",
"AppStream-9.7.0.Z.MAIN:fence-agents-openstack-0:4.10.0-98.el9_7.13.x86_64",
"AppStream-9.7.0.Z.MAIN:fence-agents-redfish-0:4.10.0-98.el9_7.13.aarch64",
"AppStream-9.7.0.Z.MAIN:fence-agents-redfish-0:4.10.0-98.el9_7.13.ppc64le",
"AppStream-9.7.0.Z.MAIN:fence-agents-redfish-0:4.10.0-98.el9_7.13.s390x",
"AppStream-9.7.0.Z.MAIN:fence-agents-redfish-0:4.10.0-98.el9_7.13.x86_64",
"AppStream-9.7.0.Z.MAIN:fence-agents-rhevm-0:4.10.0-98.el9_7.13.noarch",
"AppStream-9.7.0.Z.MAIN:fence-agents-rsa-0:4.10.0-98.el9_7.13.noarch",
"AppStream-9.7.0.Z.MAIN:fence-agents-rsb-0:4.10.0-98.el9_7.13.noarch",
"AppStream-9.7.0.Z.MAIN:fence-agents-sbd-0:4.10.0-98.el9_7.13.noarch",
"AppStream-9.7.0.Z.MAIN:fence-agents-scsi-0:4.10.0-98.el9_7.13.noarch",
"AppStream-9.7.0.Z.MAIN:fence-agents-virsh-0:4.10.0-98.el9_7.13.noarch",
"AppStream-9.7.0.Z.MAIN:fence-agents-vmware-rest-0:4.10.0-98.el9_7.13.noarch",
"AppStream-9.7.0.Z.MAIN:fence-agents-vmware-soap-0:4.10.0-98.el9_7.13.noarch",
"AppStream-9.7.0.Z.MAIN:fence-agents-wti-0:4.10.0-98.el9_7.13.noarch",
"AppStream-9.7.0.Z.MAIN:fence-agents-zvm-0:4.10.0-98.el9_7.13.s390x",
"AppStream-9.7.0.Z.MAIN:fence-virt-0:4.10.0-98.el9_7.13.x86_64",
"AppStream-9.7.0.Z.MAIN:fence-virt-debuginfo-0:4.10.0-98.el9_7.13.x86_64",
"AppStream-9.7.0.Z.MAIN:fence-virtd-0:4.10.0-98.el9_7.13.x86_64",
"AppStream-9.7.0.Z.MAIN:fence-virtd-cpg-0:4.10.0-98.el9_7.13.x86_64",
"AppStream-9.7.0.Z.MAIN:fence-virtd-cpg-debuginfo-0:4.10.0-98.el9_7.13.x86_64",
"AppStream-9.7.0.Z.MAIN:fence-virtd-debuginfo-0:4.10.0-98.el9_7.13.x86_64",
"AppStream-9.7.0.Z.MAIN:fence-virtd-libvirt-0:4.10.0-98.el9_7.13.x86_64",
"AppStream-9.7.0.Z.MAIN:fence-virtd-libvirt-debuginfo-0:4.10.0-98.el9_7.13.x86_64",
"AppStream-9.7.0.Z.MAIN:fence-virtd-multicast-0:4.10.0-98.el9_7.13.x86_64",
"AppStream-9.7.0.Z.MAIN:fence-virtd-multicast-debuginfo-0:4.10.0-98.el9_7.13.x86_64",
"AppStream-9.7.0.Z.MAIN:fence-virtd-serial-0:4.10.0-98.el9_7.13.x86_64",
"AppStream-9.7.0.Z.MAIN:fence-virtd-serial-debuginfo-0:4.10.0-98.el9_7.13.x86_64",
"AppStream-9.7.0.Z.MAIN:fence-virtd-tcp-0:4.10.0-98.el9_7.13.x86_64",
"AppStream-9.7.0.Z.MAIN:fence-virtd-tcp-debuginfo-0:4.10.0-98.el9_7.13.x86_64",
"AppStream-9.7.0.Z.MAIN:ha-cloud-support-0:4.10.0-98.el9_7.13.ppc64le",
"AppStream-9.7.0.Z.MAIN:ha-cloud-support-0:4.10.0-98.el9_7.13.x86_64",
"AppStream-9.7.0.Z.MAIN:ha-cloud-support-debuginfo-0:4.10.0-98.el9_7.13.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-30922"
},
{
"category": "external",
"summary": "RHBZ#2448553",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2448553"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-30922",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-30922"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-30922",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-30922"
},
{
"category": "external",
"summary": "https://github.com/pyasn1/pyasn1/commit/25ad481c19fdb006e20485ef3fc2e5b3eff30ef0",
"url": "https://github.com/pyasn1/pyasn1/commit/25ad481c19fdb006e20485ef3fc2e5b3eff30ef0"
},
{
"category": "external",
"summary": "https://github.com/pyasn1/pyasn1/security/advisories/GHSA-jr27-m4p2-rc6r",
"url": "https://github.com/pyasn1/pyasn1/security/advisories/GHSA-jr27-m4p2-rc6r"
}
],
"release_date": "2026-03-18T02:29:45.857000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-06T06:52:25+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.7.0.Z.MAIN:fence-agents-0:4.10.0-98.el9_7.13.src",
"AppStream-9.7.0.Z.MAIN:fence-agents-aliyun-0:4.10.0-98.el9_7.13.x86_64",
"AppStream-9.7.0.Z.MAIN:fence-agents-all-0:4.10.0-98.el9_7.13.aarch64",
"AppStream-9.7.0.Z.MAIN:fence-agents-all-0:4.10.0-98.el9_7.13.ppc64le",
"AppStream-9.7.0.Z.MAIN:fence-agents-all-0:4.10.0-98.el9_7.13.s390x",
"AppStream-9.7.0.Z.MAIN:fence-agents-all-0:4.10.0-98.el9_7.13.x86_64",
"AppStream-9.7.0.Z.MAIN:fence-agents-amt-ws-0:4.10.0-98.el9_7.13.noarch",
"AppStream-9.7.0.Z.MAIN:fence-agents-apc-0:4.10.0-98.el9_7.13.noarch",
"AppStream-9.7.0.Z.MAIN:fence-agents-apc-snmp-0:4.10.0-98.el9_7.13.noarch",
"AppStream-9.7.0.Z.MAIN:fence-agents-aws-0:4.10.0-98.el9_7.13.x86_64",
"AppStream-9.7.0.Z.MAIN:fence-agents-azure-arm-0:4.10.0-98.el9_7.13.x86_64",
"AppStream-9.7.0.Z.MAIN:fence-agents-bladecenter-0:4.10.0-98.el9_7.13.noarch",
"AppStream-9.7.0.Z.MAIN:fence-agents-brocade-0:4.10.0-98.el9_7.13.noarch",
"AppStream-9.7.0.Z.MAIN:fence-agents-cisco-mds-0:4.10.0-98.el9_7.13.noarch",
"AppStream-9.7.0.Z.MAIN:fence-agents-cisco-ucs-0:4.10.0-98.el9_7.13.noarch",
"AppStream-9.7.0.Z.MAIN:fence-agents-common-0:4.10.0-98.el9_7.13.noarch",
"AppStream-9.7.0.Z.MAIN:fence-agents-compute-0:4.10.0-98.el9_7.13.ppc64le",
"AppStream-9.7.0.Z.MAIN:fence-agents-compute-0:4.10.0-98.el9_7.13.x86_64",
"AppStream-9.7.0.Z.MAIN:fence-agents-debuginfo-0:4.10.0-98.el9_7.13.aarch64",
"AppStream-9.7.0.Z.MAIN:fence-agents-debuginfo-0:4.10.0-98.el9_7.13.ppc64le",
"AppStream-9.7.0.Z.MAIN:fence-agents-debuginfo-0:4.10.0-98.el9_7.13.s390x",
"AppStream-9.7.0.Z.MAIN:fence-agents-debuginfo-0:4.10.0-98.el9_7.13.x86_64",
"AppStream-9.7.0.Z.MAIN:fence-agents-debugsource-0:4.10.0-98.el9_7.13.aarch64",
"AppStream-9.7.0.Z.MAIN:fence-agents-debugsource-0:4.10.0-98.el9_7.13.ppc64le",
"AppStream-9.7.0.Z.MAIN:fence-agents-debugsource-0:4.10.0-98.el9_7.13.s390x",
"AppStream-9.7.0.Z.MAIN:fence-agents-debugsource-0:4.10.0-98.el9_7.13.x86_64",
"AppStream-9.7.0.Z.MAIN:fence-agents-drac5-0:4.10.0-98.el9_7.13.noarch",
"AppStream-9.7.0.Z.MAIN:fence-agents-eaton-snmp-0:4.10.0-98.el9_7.13.noarch",
"AppStream-9.7.0.Z.MAIN:fence-agents-emerson-0:4.10.0-98.el9_7.13.noarch",
"AppStream-9.7.0.Z.MAIN:fence-agents-eps-0:4.10.0-98.el9_7.13.noarch",
"AppStream-9.7.0.Z.MAIN:fence-agents-gce-0:4.10.0-98.el9_7.13.x86_64",
"AppStream-9.7.0.Z.MAIN:fence-agents-heuristics-ping-0:4.10.0-98.el9_7.13.noarch",
"AppStream-9.7.0.Z.MAIN:fence-agents-hpblade-0:4.10.0-98.el9_7.13.noarch",
"AppStream-9.7.0.Z.MAIN:fence-agents-ibm-powervs-0:4.10.0-98.el9_7.13.noarch",
"AppStream-9.7.0.Z.MAIN:fence-agents-ibm-vpc-0:4.10.0-98.el9_7.13.noarch",
"AppStream-9.7.0.Z.MAIN:fence-agents-ibmblade-0:4.10.0-98.el9_7.13.noarch",
"AppStream-9.7.0.Z.MAIN:fence-agents-ifmib-0:4.10.0-98.el9_7.13.noarch",
"AppStream-9.7.0.Z.MAIN:fence-agents-ilo-moonshot-0:4.10.0-98.el9_7.13.noarch",
"AppStream-9.7.0.Z.MAIN:fence-agents-ilo-mp-0:4.10.0-98.el9_7.13.noarch",
"AppStream-9.7.0.Z.MAIN:fence-agents-ilo-ssh-0:4.10.0-98.el9_7.13.noarch",
"AppStream-9.7.0.Z.MAIN:fence-agents-ilo2-0:4.10.0-98.el9_7.13.noarch",
"AppStream-9.7.0.Z.MAIN:fence-agents-intelmodular-0:4.10.0-98.el9_7.13.noarch",
"AppStream-9.7.0.Z.MAIN:fence-agents-ipdu-0:4.10.0-98.el9_7.13.noarch",
"AppStream-9.7.0.Z.MAIN:fence-agents-ipmilan-0:4.10.0-98.el9_7.13.noarch",
"AppStream-9.7.0.Z.MAIN:fence-agents-kdump-0:4.10.0-98.el9_7.13.aarch64",
"AppStream-9.7.0.Z.MAIN:fence-agents-kdump-0:4.10.0-98.el9_7.13.ppc64le",
"AppStream-9.7.0.Z.MAIN:fence-agents-kdump-0:4.10.0-98.el9_7.13.s390x",
"AppStream-9.7.0.Z.MAIN:fence-agents-kdump-0:4.10.0-98.el9_7.13.x86_64",
"AppStream-9.7.0.Z.MAIN:fence-agents-kdump-debuginfo-0:4.10.0-98.el9_7.13.aarch64",
"AppStream-9.7.0.Z.MAIN:fence-agents-kdump-debuginfo-0:4.10.0-98.el9_7.13.ppc64le",
"AppStream-9.7.0.Z.MAIN:fence-agents-kdump-debuginfo-0:4.10.0-98.el9_7.13.s390x",
"AppStream-9.7.0.Z.MAIN:fence-agents-kdump-debuginfo-0:4.10.0-98.el9_7.13.x86_64",
"AppStream-9.7.0.Z.MAIN:fence-agents-kubevirt-0:4.10.0-98.el9_7.13.aarch64",
"AppStream-9.7.0.Z.MAIN:fence-agents-kubevirt-0:4.10.0-98.el9_7.13.ppc64le",
"AppStream-9.7.0.Z.MAIN:fence-agents-kubevirt-0:4.10.0-98.el9_7.13.s390x",
"AppStream-9.7.0.Z.MAIN:fence-agents-kubevirt-0:4.10.0-98.el9_7.13.x86_64",
"AppStream-9.7.0.Z.MAIN:fence-agents-kubevirt-debuginfo-0:4.10.0-98.el9_7.13.aarch64",
"AppStream-9.7.0.Z.MAIN:fence-agents-kubevirt-debuginfo-0:4.10.0-98.el9_7.13.ppc64le",
"AppStream-9.7.0.Z.MAIN:fence-agents-kubevirt-debuginfo-0:4.10.0-98.el9_7.13.s390x",
"AppStream-9.7.0.Z.MAIN:fence-agents-kubevirt-debuginfo-0:4.10.0-98.el9_7.13.x86_64",
"AppStream-9.7.0.Z.MAIN:fence-agents-lpar-0:4.10.0-98.el9_7.13.noarch",
"AppStream-9.7.0.Z.MAIN:fence-agents-mpath-0:4.10.0-98.el9_7.13.noarch",
"AppStream-9.7.0.Z.MAIN:fence-agents-nutanix-ahv-0:4.10.0-98.el9_7.13.noarch",
"AppStream-9.7.0.Z.MAIN:fence-agents-openstack-0:4.10.0-98.el9_7.13.ppc64le",
"AppStream-9.7.0.Z.MAIN:fence-agents-openstack-0:4.10.0-98.el9_7.13.x86_64",
"AppStream-9.7.0.Z.MAIN:fence-agents-redfish-0:4.10.0-98.el9_7.13.aarch64",
"AppStream-9.7.0.Z.MAIN:fence-agents-redfish-0:4.10.0-98.el9_7.13.ppc64le",
"AppStream-9.7.0.Z.MAIN:fence-agents-redfish-0:4.10.0-98.el9_7.13.s390x",
"AppStream-9.7.0.Z.MAIN:fence-agents-redfish-0:4.10.0-98.el9_7.13.x86_64",
"AppStream-9.7.0.Z.MAIN:fence-agents-rhevm-0:4.10.0-98.el9_7.13.noarch",
"AppStream-9.7.0.Z.MAIN:fence-agents-rsa-0:4.10.0-98.el9_7.13.noarch",
"AppStream-9.7.0.Z.MAIN:fence-agents-rsb-0:4.10.0-98.el9_7.13.noarch",
"AppStream-9.7.0.Z.MAIN:fence-agents-sbd-0:4.10.0-98.el9_7.13.noarch",
"AppStream-9.7.0.Z.MAIN:fence-agents-scsi-0:4.10.0-98.el9_7.13.noarch",
"AppStream-9.7.0.Z.MAIN:fence-agents-virsh-0:4.10.0-98.el9_7.13.noarch",
"AppStream-9.7.0.Z.MAIN:fence-agents-vmware-rest-0:4.10.0-98.el9_7.13.noarch",
"AppStream-9.7.0.Z.MAIN:fence-agents-vmware-soap-0:4.10.0-98.el9_7.13.noarch",
"AppStream-9.7.0.Z.MAIN:fence-agents-wti-0:4.10.0-98.el9_7.13.noarch",
"AppStream-9.7.0.Z.MAIN:fence-agents-zvm-0:4.10.0-98.el9_7.13.s390x",
"AppStream-9.7.0.Z.MAIN:fence-virt-0:4.10.0-98.el9_7.13.x86_64",
"AppStream-9.7.0.Z.MAIN:fence-virt-debuginfo-0:4.10.0-98.el9_7.13.x86_64",
"AppStream-9.7.0.Z.MAIN:fence-virtd-0:4.10.0-98.el9_7.13.x86_64",
"AppStream-9.7.0.Z.MAIN:fence-virtd-cpg-0:4.10.0-98.el9_7.13.x86_64",
"AppStream-9.7.0.Z.MAIN:fence-virtd-cpg-debuginfo-0:4.10.0-98.el9_7.13.x86_64",
"AppStream-9.7.0.Z.MAIN:fence-virtd-debuginfo-0:4.10.0-98.el9_7.13.x86_64",
"AppStream-9.7.0.Z.MAIN:fence-virtd-libvirt-0:4.10.0-98.el9_7.13.x86_64",
"AppStream-9.7.0.Z.MAIN:fence-virtd-libvirt-debuginfo-0:4.10.0-98.el9_7.13.x86_64",
"AppStream-9.7.0.Z.MAIN:fence-virtd-multicast-0:4.10.0-98.el9_7.13.x86_64",
"AppStream-9.7.0.Z.MAIN:fence-virtd-multicast-debuginfo-0:4.10.0-98.el9_7.13.x86_64",
"AppStream-9.7.0.Z.MAIN:fence-virtd-serial-0:4.10.0-98.el9_7.13.x86_64",
"AppStream-9.7.0.Z.MAIN:fence-virtd-serial-debuginfo-0:4.10.0-98.el9_7.13.x86_64",
"AppStream-9.7.0.Z.MAIN:fence-virtd-tcp-0:4.10.0-98.el9_7.13.x86_64",
"AppStream-9.7.0.Z.MAIN:fence-virtd-tcp-debuginfo-0:4.10.0-98.el9_7.13.x86_64",
"AppStream-9.7.0.Z.MAIN:ha-cloud-support-0:4.10.0-98.el9_7.13.ppc64le",
"AppStream-9.7.0.Z.MAIN:ha-cloud-support-0:4.10.0-98.el9_7.13.x86_64",
"AppStream-9.7.0.Z.MAIN:ha-cloud-support-debuginfo-0:4.10.0-98.el9_7.13.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:13917"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"AppStream-9.7.0.Z.MAIN:fence-agents-0:4.10.0-98.el9_7.13.src",
"AppStream-9.7.0.Z.MAIN:fence-agents-aliyun-0:4.10.0-98.el9_7.13.x86_64",
"AppStream-9.7.0.Z.MAIN:fence-agents-all-0:4.10.0-98.el9_7.13.aarch64",
"AppStream-9.7.0.Z.MAIN:fence-agents-all-0:4.10.0-98.el9_7.13.ppc64le",
"AppStream-9.7.0.Z.MAIN:fence-agents-all-0:4.10.0-98.el9_7.13.s390x",
"AppStream-9.7.0.Z.MAIN:fence-agents-all-0:4.10.0-98.el9_7.13.x86_64",
"AppStream-9.7.0.Z.MAIN:fence-agents-amt-ws-0:4.10.0-98.el9_7.13.noarch",
"AppStream-9.7.0.Z.MAIN:fence-agents-apc-0:4.10.0-98.el9_7.13.noarch",
"AppStream-9.7.0.Z.MAIN:fence-agents-apc-snmp-0:4.10.0-98.el9_7.13.noarch",
"AppStream-9.7.0.Z.MAIN:fence-agents-aws-0:4.10.0-98.el9_7.13.x86_64",
"AppStream-9.7.0.Z.MAIN:fence-agents-azure-arm-0:4.10.0-98.el9_7.13.x86_64",
"AppStream-9.7.0.Z.MAIN:fence-agents-bladecenter-0:4.10.0-98.el9_7.13.noarch",
"AppStream-9.7.0.Z.MAIN:fence-agents-brocade-0:4.10.0-98.el9_7.13.noarch",
"AppStream-9.7.0.Z.MAIN:fence-agents-cisco-mds-0:4.10.0-98.el9_7.13.noarch",
"AppStream-9.7.0.Z.MAIN:fence-agents-cisco-ucs-0:4.10.0-98.el9_7.13.noarch",
"AppStream-9.7.0.Z.MAIN:fence-agents-common-0:4.10.0-98.el9_7.13.noarch",
"AppStream-9.7.0.Z.MAIN:fence-agents-compute-0:4.10.0-98.el9_7.13.ppc64le",
"AppStream-9.7.0.Z.MAIN:fence-agents-compute-0:4.10.0-98.el9_7.13.x86_64",
"AppStream-9.7.0.Z.MAIN:fence-agents-debuginfo-0:4.10.0-98.el9_7.13.aarch64",
"AppStream-9.7.0.Z.MAIN:fence-agents-debuginfo-0:4.10.0-98.el9_7.13.ppc64le",
"AppStream-9.7.0.Z.MAIN:fence-agents-debuginfo-0:4.10.0-98.el9_7.13.s390x",
"AppStream-9.7.0.Z.MAIN:fence-agents-debuginfo-0:4.10.0-98.el9_7.13.x86_64",
"AppStream-9.7.0.Z.MAIN:fence-agents-debugsource-0:4.10.0-98.el9_7.13.aarch64",
"AppStream-9.7.0.Z.MAIN:fence-agents-debugsource-0:4.10.0-98.el9_7.13.ppc64le",
"AppStream-9.7.0.Z.MAIN:fence-agents-debugsource-0:4.10.0-98.el9_7.13.s390x",
"AppStream-9.7.0.Z.MAIN:fence-agents-debugsource-0:4.10.0-98.el9_7.13.x86_64",
"AppStream-9.7.0.Z.MAIN:fence-agents-drac5-0:4.10.0-98.el9_7.13.noarch",
"AppStream-9.7.0.Z.MAIN:fence-agents-eaton-snmp-0:4.10.0-98.el9_7.13.noarch",
"AppStream-9.7.0.Z.MAIN:fence-agents-emerson-0:4.10.0-98.el9_7.13.noarch",
"AppStream-9.7.0.Z.MAIN:fence-agents-eps-0:4.10.0-98.el9_7.13.noarch",
"AppStream-9.7.0.Z.MAIN:fence-agents-gce-0:4.10.0-98.el9_7.13.x86_64",
"AppStream-9.7.0.Z.MAIN:fence-agents-heuristics-ping-0:4.10.0-98.el9_7.13.noarch",
"AppStream-9.7.0.Z.MAIN:fence-agents-hpblade-0:4.10.0-98.el9_7.13.noarch",
"AppStream-9.7.0.Z.MAIN:fence-agents-ibm-powervs-0:4.10.0-98.el9_7.13.noarch",
"AppStream-9.7.0.Z.MAIN:fence-agents-ibm-vpc-0:4.10.0-98.el9_7.13.noarch",
"AppStream-9.7.0.Z.MAIN:fence-agents-ibmblade-0:4.10.0-98.el9_7.13.noarch",
"AppStream-9.7.0.Z.MAIN:fence-agents-ifmib-0:4.10.0-98.el9_7.13.noarch",
"AppStream-9.7.0.Z.MAIN:fence-agents-ilo-moonshot-0:4.10.0-98.el9_7.13.noarch",
"AppStream-9.7.0.Z.MAIN:fence-agents-ilo-mp-0:4.10.0-98.el9_7.13.noarch",
"AppStream-9.7.0.Z.MAIN:fence-agents-ilo-ssh-0:4.10.0-98.el9_7.13.noarch",
"AppStream-9.7.0.Z.MAIN:fence-agents-ilo2-0:4.10.0-98.el9_7.13.noarch",
"AppStream-9.7.0.Z.MAIN:fence-agents-intelmodular-0:4.10.0-98.el9_7.13.noarch",
"AppStream-9.7.0.Z.MAIN:fence-agents-ipdu-0:4.10.0-98.el9_7.13.noarch",
"AppStream-9.7.0.Z.MAIN:fence-agents-ipmilan-0:4.10.0-98.el9_7.13.noarch",
"AppStream-9.7.0.Z.MAIN:fence-agents-kdump-0:4.10.0-98.el9_7.13.aarch64",
"AppStream-9.7.0.Z.MAIN:fence-agents-kdump-0:4.10.0-98.el9_7.13.ppc64le",
"AppStream-9.7.0.Z.MAIN:fence-agents-kdump-0:4.10.0-98.el9_7.13.s390x",
"AppStream-9.7.0.Z.MAIN:fence-agents-kdump-0:4.10.0-98.el9_7.13.x86_64",
"AppStream-9.7.0.Z.MAIN:fence-agents-kdump-debuginfo-0:4.10.0-98.el9_7.13.aarch64",
"AppStream-9.7.0.Z.MAIN:fence-agents-kdump-debuginfo-0:4.10.0-98.el9_7.13.ppc64le",
"AppStream-9.7.0.Z.MAIN:fence-agents-kdump-debuginfo-0:4.10.0-98.el9_7.13.s390x",
"AppStream-9.7.0.Z.MAIN:fence-agents-kdump-debuginfo-0:4.10.0-98.el9_7.13.x86_64",
"AppStream-9.7.0.Z.MAIN:fence-agents-kubevirt-0:4.10.0-98.el9_7.13.aarch64",
"AppStream-9.7.0.Z.MAIN:fence-agents-kubevirt-0:4.10.0-98.el9_7.13.ppc64le",
"AppStream-9.7.0.Z.MAIN:fence-agents-kubevirt-0:4.10.0-98.el9_7.13.s390x",
"AppStream-9.7.0.Z.MAIN:fence-agents-kubevirt-0:4.10.0-98.el9_7.13.x86_64",
"AppStream-9.7.0.Z.MAIN:fence-agents-kubevirt-debuginfo-0:4.10.0-98.el9_7.13.aarch64",
"AppStream-9.7.0.Z.MAIN:fence-agents-kubevirt-debuginfo-0:4.10.0-98.el9_7.13.ppc64le",
"AppStream-9.7.0.Z.MAIN:fence-agents-kubevirt-debuginfo-0:4.10.0-98.el9_7.13.s390x",
"AppStream-9.7.0.Z.MAIN:fence-agents-kubevirt-debuginfo-0:4.10.0-98.el9_7.13.x86_64",
"AppStream-9.7.0.Z.MAIN:fence-agents-lpar-0:4.10.0-98.el9_7.13.noarch",
"AppStream-9.7.0.Z.MAIN:fence-agents-mpath-0:4.10.0-98.el9_7.13.noarch",
"AppStream-9.7.0.Z.MAIN:fence-agents-nutanix-ahv-0:4.10.0-98.el9_7.13.noarch",
"AppStream-9.7.0.Z.MAIN:fence-agents-openstack-0:4.10.0-98.el9_7.13.ppc64le",
"AppStream-9.7.0.Z.MAIN:fence-agents-openstack-0:4.10.0-98.el9_7.13.x86_64",
"AppStream-9.7.0.Z.MAIN:fence-agents-redfish-0:4.10.0-98.el9_7.13.aarch64",
"AppStream-9.7.0.Z.MAIN:fence-agents-redfish-0:4.10.0-98.el9_7.13.ppc64le",
"AppStream-9.7.0.Z.MAIN:fence-agents-redfish-0:4.10.0-98.el9_7.13.s390x",
"AppStream-9.7.0.Z.MAIN:fence-agents-redfish-0:4.10.0-98.el9_7.13.x86_64",
"AppStream-9.7.0.Z.MAIN:fence-agents-rhevm-0:4.10.0-98.el9_7.13.noarch",
"AppStream-9.7.0.Z.MAIN:fence-agents-rsa-0:4.10.0-98.el9_7.13.noarch",
"AppStream-9.7.0.Z.MAIN:fence-agents-rsb-0:4.10.0-98.el9_7.13.noarch",
"AppStream-9.7.0.Z.MAIN:fence-agents-sbd-0:4.10.0-98.el9_7.13.noarch",
"AppStream-9.7.0.Z.MAIN:fence-agents-scsi-0:4.10.0-98.el9_7.13.noarch",
"AppStream-9.7.0.Z.MAIN:fence-agents-virsh-0:4.10.0-98.el9_7.13.noarch",
"AppStream-9.7.0.Z.MAIN:fence-agents-vmware-rest-0:4.10.0-98.el9_7.13.noarch",
"AppStream-9.7.0.Z.MAIN:fence-agents-vmware-soap-0:4.10.0-98.el9_7.13.noarch",
"AppStream-9.7.0.Z.MAIN:fence-agents-wti-0:4.10.0-98.el9_7.13.noarch",
"AppStream-9.7.0.Z.MAIN:fence-agents-zvm-0:4.10.0-98.el9_7.13.s390x",
"AppStream-9.7.0.Z.MAIN:fence-virt-0:4.10.0-98.el9_7.13.x86_64",
"AppStream-9.7.0.Z.MAIN:fence-virt-debuginfo-0:4.10.0-98.el9_7.13.x86_64",
"AppStream-9.7.0.Z.MAIN:fence-virtd-0:4.10.0-98.el9_7.13.x86_64",
"AppStream-9.7.0.Z.MAIN:fence-virtd-cpg-0:4.10.0-98.el9_7.13.x86_64",
"AppStream-9.7.0.Z.MAIN:fence-virtd-cpg-debuginfo-0:4.10.0-98.el9_7.13.x86_64",
"AppStream-9.7.0.Z.MAIN:fence-virtd-debuginfo-0:4.10.0-98.el9_7.13.x86_64",
"AppStream-9.7.0.Z.MAIN:fence-virtd-libvirt-0:4.10.0-98.el9_7.13.x86_64",
"AppStream-9.7.0.Z.MAIN:fence-virtd-libvirt-debuginfo-0:4.10.0-98.el9_7.13.x86_64",
"AppStream-9.7.0.Z.MAIN:fence-virtd-multicast-0:4.10.0-98.el9_7.13.x86_64",
"AppStream-9.7.0.Z.MAIN:fence-virtd-multicast-debuginfo-0:4.10.0-98.el9_7.13.x86_64",
"AppStream-9.7.0.Z.MAIN:fence-virtd-serial-0:4.10.0-98.el9_7.13.x86_64",
"AppStream-9.7.0.Z.MAIN:fence-virtd-serial-debuginfo-0:4.10.0-98.el9_7.13.x86_64",
"AppStream-9.7.0.Z.MAIN:fence-virtd-tcp-0:4.10.0-98.el9_7.13.x86_64",
"AppStream-9.7.0.Z.MAIN:fence-virtd-tcp-debuginfo-0:4.10.0-98.el9_7.13.x86_64",
"AppStream-9.7.0.Z.MAIN:ha-cloud-support-0:4.10.0-98.el9_7.13.ppc64le",
"AppStream-9.7.0.Z.MAIN:ha-cloud-support-0:4.10.0-98.el9_7.13.x86_64",
"AppStream-9.7.0.Z.MAIN:ha-cloud-support-debuginfo-0:4.10.0-98.el9_7.13.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"AppStream-9.7.0.Z.MAIN:fence-agents-0:4.10.0-98.el9_7.13.src",
"AppStream-9.7.0.Z.MAIN:fence-agents-aliyun-0:4.10.0-98.el9_7.13.x86_64",
"AppStream-9.7.0.Z.MAIN:fence-agents-all-0:4.10.0-98.el9_7.13.aarch64",
"AppStream-9.7.0.Z.MAIN:fence-agents-all-0:4.10.0-98.el9_7.13.ppc64le",
"AppStream-9.7.0.Z.MAIN:fence-agents-all-0:4.10.0-98.el9_7.13.s390x",
"AppStream-9.7.0.Z.MAIN:fence-agents-all-0:4.10.0-98.el9_7.13.x86_64",
"AppStream-9.7.0.Z.MAIN:fence-agents-amt-ws-0:4.10.0-98.el9_7.13.noarch",
"AppStream-9.7.0.Z.MAIN:fence-agents-apc-0:4.10.0-98.el9_7.13.noarch",
"AppStream-9.7.0.Z.MAIN:fence-agents-apc-snmp-0:4.10.0-98.el9_7.13.noarch",
"AppStream-9.7.0.Z.MAIN:fence-agents-aws-0:4.10.0-98.el9_7.13.x86_64",
"AppStream-9.7.0.Z.MAIN:fence-agents-azure-arm-0:4.10.0-98.el9_7.13.x86_64",
"AppStream-9.7.0.Z.MAIN:fence-agents-bladecenter-0:4.10.0-98.el9_7.13.noarch",
"AppStream-9.7.0.Z.MAIN:fence-agents-brocade-0:4.10.0-98.el9_7.13.noarch",
"AppStream-9.7.0.Z.MAIN:fence-agents-cisco-mds-0:4.10.0-98.el9_7.13.noarch",
"AppStream-9.7.0.Z.MAIN:fence-agents-cisco-ucs-0:4.10.0-98.el9_7.13.noarch",
"AppStream-9.7.0.Z.MAIN:fence-agents-common-0:4.10.0-98.el9_7.13.noarch",
"AppStream-9.7.0.Z.MAIN:fence-agents-compute-0:4.10.0-98.el9_7.13.ppc64le",
"AppStream-9.7.0.Z.MAIN:fence-agents-compute-0:4.10.0-98.el9_7.13.x86_64",
"AppStream-9.7.0.Z.MAIN:fence-agents-debuginfo-0:4.10.0-98.el9_7.13.aarch64",
"AppStream-9.7.0.Z.MAIN:fence-agents-debuginfo-0:4.10.0-98.el9_7.13.ppc64le",
"AppStream-9.7.0.Z.MAIN:fence-agents-debuginfo-0:4.10.0-98.el9_7.13.s390x",
"AppStream-9.7.0.Z.MAIN:fence-agents-debuginfo-0:4.10.0-98.el9_7.13.x86_64",
"AppStream-9.7.0.Z.MAIN:fence-agents-debugsource-0:4.10.0-98.el9_7.13.aarch64",
"AppStream-9.7.0.Z.MAIN:fence-agents-debugsource-0:4.10.0-98.el9_7.13.ppc64le",
"AppStream-9.7.0.Z.MAIN:fence-agents-debugsource-0:4.10.0-98.el9_7.13.s390x",
"AppStream-9.7.0.Z.MAIN:fence-agents-debugsource-0:4.10.0-98.el9_7.13.x86_64",
"AppStream-9.7.0.Z.MAIN:fence-agents-drac5-0:4.10.0-98.el9_7.13.noarch",
"AppStream-9.7.0.Z.MAIN:fence-agents-eaton-snmp-0:4.10.0-98.el9_7.13.noarch",
"AppStream-9.7.0.Z.MAIN:fence-agents-emerson-0:4.10.0-98.el9_7.13.noarch",
"AppStream-9.7.0.Z.MAIN:fence-agents-eps-0:4.10.0-98.el9_7.13.noarch",
"AppStream-9.7.0.Z.MAIN:fence-agents-gce-0:4.10.0-98.el9_7.13.x86_64",
"AppStream-9.7.0.Z.MAIN:fence-agents-heuristics-ping-0:4.10.0-98.el9_7.13.noarch",
"AppStream-9.7.0.Z.MAIN:fence-agents-hpblade-0:4.10.0-98.el9_7.13.noarch",
"AppStream-9.7.0.Z.MAIN:fence-agents-ibm-powervs-0:4.10.0-98.el9_7.13.noarch",
"AppStream-9.7.0.Z.MAIN:fence-agents-ibm-vpc-0:4.10.0-98.el9_7.13.noarch",
"AppStream-9.7.0.Z.MAIN:fence-agents-ibmblade-0:4.10.0-98.el9_7.13.noarch",
"AppStream-9.7.0.Z.MAIN:fence-agents-ifmib-0:4.10.0-98.el9_7.13.noarch",
"AppStream-9.7.0.Z.MAIN:fence-agents-ilo-moonshot-0:4.10.0-98.el9_7.13.noarch",
"AppStream-9.7.0.Z.MAIN:fence-agents-ilo-mp-0:4.10.0-98.el9_7.13.noarch",
"AppStream-9.7.0.Z.MAIN:fence-agents-ilo-ssh-0:4.10.0-98.el9_7.13.noarch",
"AppStream-9.7.0.Z.MAIN:fence-agents-ilo2-0:4.10.0-98.el9_7.13.noarch",
"AppStream-9.7.0.Z.MAIN:fence-agents-intelmodular-0:4.10.0-98.el9_7.13.noarch",
"AppStream-9.7.0.Z.MAIN:fence-agents-ipdu-0:4.10.0-98.el9_7.13.noarch",
"AppStream-9.7.0.Z.MAIN:fence-agents-ipmilan-0:4.10.0-98.el9_7.13.noarch",
"AppStream-9.7.0.Z.MAIN:fence-agents-kdump-0:4.10.0-98.el9_7.13.aarch64",
"AppStream-9.7.0.Z.MAIN:fence-agents-kdump-0:4.10.0-98.el9_7.13.ppc64le",
"AppStream-9.7.0.Z.MAIN:fence-agents-kdump-0:4.10.0-98.el9_7.13.s390x",
"AppStream-9.7.0.Z.MAIN:fence-agents-kdump-0:4.10.0-98.el9_7.13.x86_64",
"AppStream-9.7.0.Z.MAIN:fence-agents-kdump-debuginfo-0:4.10.0-98.el9_7.13.aarch64",
"AppStream-9.7.0.Z.MAIN:fence-agents-kdump-debuginfo-0:4.10.0-98.el9_7.13.ppc64le",
"AppStream-9.7.0.Z.MAIN:fence-agents-kdump-debuginfo-0:4.10.0-98.el9_7.13.s390x",
"AppStream-9.7.0.Z.MAIN:fence-agents-kdump-debuginfo-0:4.10.0-98.el9_7.13.x86_64",
"AppStream-9.7.0.Z.MAIN:fence-agents-kubevirt-0:4.10.0-98.el9_7.13.aarch64",
"AppStream-9.7.0.Z.MAIN:fence-agents-kubevirt-0:4.10.0-98.el9_7.13.ppc64le",
"AppStream-9.7.0.Z.MAIN:fence-agents-kubevirt-0:4.10.0-98.el9_7.13.s390x",
"AppStream-9.7.0.Z.MAIN:fence-agents-kubevirt-0:4.10.0-98.el9_7.13.x86_64",
"AppStream-9.7.0.Z.MAIN:fence-agents-kubevirt-debuginfo-0:4.10.0-98.el9_7.13.aarch64",
"AppStream-9.7.0.Z.MAIN:fence-agents-kubevirt-debuginfo-0:4.10.0-98.el9_7.13.ppc64le",
"AppStream-9.7.0.Z.MAIN:fence-agents-kubevirt-debuginfo-0:4.10.0-98.el9_7.13.s390x",
"AppStream-9.7.0.Z.MAIN:fence-agents-kubevirt-debuginfo-0:4.10.0-98.el9_7.13.x86_64",
"AppStream-9.7.0.Z.MAIN:fence-agents-lpar-0:4.10.0-98.el9_7.13.noarch",
"AppStream-9.7.0.Z.MAIN:fence-agents-mpath-0:4.10.0-98.el9_7.13.noarch",
"AppStream-9.7.0.Z.MAIN:fence-agents-nutanix-ahv-0:4.10.0-98.el9_7.13.noarch",
"AppStream-9.7.0.Z.MAIN:fence-agents-openstack-0:4.10.0-98.el9_7.13.ppc64le",
"AppStream-9.7.0.Z.MAIN:fence-agents-openstack-0:4.10.0-98.el9_7.13.x86_64",
"AppStream-9.7.0.Z.MAIN:fence-agents-redfish-0:4.10.0-98.el9_7.13.aarch64",
"AppStream-9.7.0.Z.MAIN:fence-agents-redfish-0:4.10.0-98.el9_7.13.ppc64le",
"AppStream-9.7.0.Z.MAIN:fence-agents-redfish-0:4.10.0-98.el9_7.13.s390x",
"AppStream-9.7.0.Z.MAIN:fence-agents-redfish-0:4.10.0-98.el9_7.13.x86_64",
"AppStream-9.7.0.Z.MAIN:fence-agents-rhevm-0:4.10.0-98.el9_7.13.noarch",
"AppStream-9.7.0.Z.MAIN:fence-agents-rsa-0:4.10.0-98.el9_7.13.noarch",
"AppStream-9.7.0.Z.MAIN:fence-agents-rsb-0:4.10.0-98.el9_7.13.noarch",
"AppStream-9.7.0.Z.MAIN:fence-agents-sbd-0:4.10.0-98.el9_7.13.noarch",
"AppStream-9.7.0.Z.MAIN:fence-agents-scsi-0:4.10.0-98.el9_7.13.noarch",
"AppStream-9.7.0.Z.MAIN:fence-agents-virsh-0:4.10.0-98.el9_7.13.noarch",
"AppStream-9.7.0.Z.MAIN:fence-agents-vmware-rest-0:4.10.0-98.el9_7.13.noarch",
"AppStream-9.7.0.Z.MAIN:fence-agents-vmware-soap-0:4.10.0-98.el9_7.13.noarch",
"AppStream-9.7.0.Z.MAIN:fence-agents-wti-0:4.10.0-98.el9_7.13.noarch",
"AppStream-9.7.0.Z.MAIN:fence-agents-zvm-0:4.10.0-98.el9_7.13.s390x",
"AppStream-9.7.0.Z.MAIN:fence-virt-0:4.10.0-98.el9_7.13.x86_64",
"AppStream-9.7.0.Z.MAIN:fence-virt-debuginfo-0:4.10.0-98.el9_7.13.x86_64",
"AppStream-9.7.0.Z.MAIN:fence-virtd-0:4.10.0-98.el9_7.13.x86_64",
"AppStream-9.7.0.Z.MAIN:fence-virtd-cpg-0:4.10.0-98.el9_7.13.x86_64",
"AppStream-9.7.0.Z.MAIN:fence-virtd-cpg-debuginfo-0:4.10.0-98.el9_7.13.x86_64",
"AppStream-9.7.0.Z.MAIN:fence-virtd-debuginfo-0:4.10.0-98.el9_7.13.x86_64",
"AppStream-9.7.0.Z.MAIN:fence-virtd-libvirt-0:4.10.0-98.el9_7.13.x86_64",
"AppStream-9.7.0.Z.MAIN:fence-virtd-libvirt-debuginfo-0:4.10.0-98.el9_7.13.x86_64",
"AppStream-9.7.0.Z.MAIN:fence-virtd-multicast-0:4.10.0-98.el9_7.13.x86_64",
"AppStream-9.7.0.Z.MAIN:fence-virtd-multicast-debuginfo-0:4.10.0-98.el9_7.13.x86_64",
"AppStream-9.7.0.Z.MAIN:fence-virtd-serial-0:4.10.0-98.el9_7.13.x86_64",
"AppStream-9.7.0.Z.MAIN:fence-virtd-serial-debuginfo-0:4.10.0-98.el9_7.13.x86_64",
"AppStream-9.7.0.Z.MAIN:fence-virtd-tcp-0:4.10.0-98.el9_7.13.x86_64",
"AppStream-9.7.0.Z.MAIN:fence-virtd-tcp-debuginfo-0:4.10.0-98.el9_7.13.x86_64",
"AppStream-9.7.0.Z.MAIN:ha-cloud-support-0:4.10.0-98.el9_7.13.ppc64le",
"AppStream-9.7.0.Z.MAIN:ha-cloud-support-0:4.10.0-98.el9_7.13.x86_64",
"AppStream-9.7.0.Z.MAIN:ha-cloud-support-debuginfo-0:4.10.0-98.el9_7.13.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "pyasn1: pyasn1 Vulnerable to Denial of Service via Unbounded Recursion"
}
]
}
RHSA-2026:14020
Vulnerability from csaf_redhat - Published: 2026-05-06 11:39 - Updated: 2026-07-20 04:45Summary
Red Hat Security Advisory: Release of components for Service Telemetry Framework 1.5.7
Severity
Important
Notes
Topic: Release of components for the Service Telemetry Framework
Details: Service Telemetry Framework (STF) provides automated collection of measurements and data from remote clients, such as Red Hat OpenStack Platform or third-party nodes. STF then transmits the information to a centralized, receiving Red Hat OpenShift Container Platform deployment for storage, retrieval, and monitoring.
Security Fixes:
* pyasn1: Denial of Service due to memory exhaustion from malformed RELATIVE-OID (CVE-2026-23490)
* Privilege Escalation or Arbitrary Code Execution via malicious wheel file unpacking (CVE-2026-24049)
* Incorrect parsing of IPv6 host literals in net/url (CVE-2026-25679)
* pyasn1 Vulnerable to Denial of Service via Unbounded Recursion (CVE-2026-30922)
* Denial of Service vulnerability in certificate chain building (CVE-2026-32280)
* Excessive resource consumption when printing error string for host certificate validation in crypto/x509 (CVE-2025-61729)
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in pyasn1, a generic ASN.1 library for Python. A remote attacker could exploit this vulnerability by sending a specially crafted RELATIVE-OID with excessive continuation octets. This input validation vulnerability leads to memory exhaustion, resulting in a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenStack 1.5:registry.redhat.io/stf/prometheus-webhook-snmp-rhel9@sha256:f491bfd1f9829050d5ca68786aa1bdf74f1ce6e030b7c1112cc68b3858d83b88_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenStack 1.5:registry.redhat.io/stf/service-telemetry-rhel9-operator@sha256:6a9a6329f33c56bd44d760fa0d80a6c34b6a5d5942cf5a32b46e49899f546483_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat OpenStack 1.5:registry.redhat.io/stf/smart-gateway-rhel9-operator@sha256:247fd48abbb8862bff7aa76d742a8edcbb4bc0cef35b5624c458a502cd709a8d_amd64 | — |
Vendor Fix
fix
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenStack 1.5:registry.redhat.io/stf/service-telemetry-operator-bundle@sha256:1abefb6eb3d624f2b9b827f31ecae69a2c84e50a2fe91be81d01d6c2b4ec766b_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack 1.5:registry.redhat.io/stf/sg-bridge-rhel9@sha256:58085c6b3136a28e803409d7203486650b276f2c7aaf124936b0166738a11f8b_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack 1.5:registry.redhat.io/stf/sg-core-rhel9@sha256:73bbc51fe49e965907f35d7176759235bff876032e40616366093ead21372c71_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack 1.5:registry.redhat.io/stf/smart-gateway-operator-bundle@sha256:fdff297b0f11bac06d6e4d82e1dc8724ab42f0be6a0fdcbc5cd6c80c7bc7bffe_amd64 | — |
Threats
Impact
Important
A path traversal flaw has been discovered in the python wheel too. The unpack function is vulnerable to file permission modification through mishandling of file permissions after extraction. The logic blindly trusts the filename from the archive header for the chmod operation, even though the extraction process itself might have sanitized the path. Attackers can craft a malicious wheel file that, when unpacked, changes the permissions of critical system files (e.g., /etc/passwd, SSH keys, config files), allowing for Privilege Escalation or arbitrary code execution by modifying now-writable scripts.
7.1 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenStack 1.5:registry.redhat.io/stf/prometheus-webhook-snmp-rhel9@sha256:f491bfd1f9829050d5ca68786aa1bdf74f1ce6e030b7c1112cc68b3858d83b88_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenStack 1.5:registry.redhat.io/stf/service-telemetry-operator-bundle@sha256:1abefb6eb3d624f2b9b827f31ecae69a2c84e50a2fe91be81d01d6c2b4ec766b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenStack 1.5:registry.redhat.io/stf/service-telemetry-rhel9-operator@sha256:6a9a6329f33c56bd44d760fa0d80a6c34b6a5d5942cf5a32b46e49899f546483_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenStack 1.5:registry.redhat.io/stf/sg-bridge-rhel9@sha256:58085c6b3136a28e803409d7203486650b276f2c7aaf124936b0166738a11f8b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenStack 1.5:registry.redhat.io/stf/sg-core-rhel9@sha256:73bbc51fe49e965907f35d7176759235bff876032e40616366093ead21372c71_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenStack 1.5:registry.redhat.io/stf/smart-gateway-operator-bundle@sha256:fdff297b0f11bac06d6e4d82e1dc8724ab42f0be6a0fdcbc5cd6c80c7bc7bffe_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenStack 1.5:registry.redhat.io/stf/smart-gateway-rhel9-operator@sha256:247fd48abbb8862bff7aa76d742a8edcbb4bc0cef35b5624c458a502cd709a8d_amd64 | — |
Workaround
|
Threats
Impact
Important
The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenStack 1.5:registry.redhat.io/stf/sg-core-rhel9@sha256:73bbc51fe49e965907f35d7176759235bff876032e40616366093ead21372c71_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenStack 1.5:registry.redhat.io/stf/prometheus-webhook-snmp-rhel9@sha256:f491bfd1f9829050d5ca68786aa1bdf74f1ce6e030b7c1112cc68b3858d83b88_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenStack 1.5:registry.redhat.io/stf/service-telemetry-operator-bundle@sha256:1abefb6eb3d624f2b9b827f31ecae69a2c84e50a2fe91be81d01d6c2b4ec766b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenStack 1.5:registry.redhat.io/stf/service-telemetry-rhel9-operator@sha256:6a9a6329f33c56bd44d760fa0d80a6c34b6a5d5942cf5a32b46e49899f546483_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenStack 1.5:registry.redhat.io/stf/sg-bridge-rhel9@sha256:58085c6b3136a28e803409d7203486650b276f2c7aaf124936b0166738a11f8b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenStack 1.5:registry.redhat.io/stf/smart-gateway-operator-bundle@sha256:fdff297b0f11bac06d6e4d82e1dc8724ab42f0be6a0fdcbc5cd6c80c7bc7bffe_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenStack 1.5:registry.redhat.io/stf/smart-gateway-rhel9-operator@sha256:247fd48abbb8862bff7aa76d742a8edcbb4bc0cef35b5624c458a502cd709a8d_amd64 | — |
Workaround
|
Threats
Impact
Important
An unbounded recursion flaw has been discovered in the pypi pyasn1 library. This uncontrolled recursion occurs when decoding ASN.1 data with deeply nested structures. An attacker can supply a crafted payload containing nested SEQUENCE (0x30) or SET (0x31) tags with Indefinite Length (0x80) markers. This forces the decoder to recursively call itself until the Python interpreter crashes with a RecursionError or consumes all available memory (OOM), crashing the host application.
7.5 (High)
Affected products
Fixed
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenStack 1.5:registry.redhat.io/stf/prometheus-webhook-snmp-rhel9@sha256:f491bfd1f9829050d5ca68786aa1bdf74f1ce6e030b7c1112cc68b3858d83b88_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenStack 1.5:registry.redhat.io/stf/service-telemetry-rhel9-operator@sha256:6a9a6329f33c56bd44d760fa0d80a6c34b6a5d5942cf5a32b46e49899f546483_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenStack 1.5:registry.redhat.io/stf/smart-gateway-rhel9-operator@sha256:247fd48abbb8862bff7aa76d742a8edcbb4bc0cef35b5624c458a502cd709a8d_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenStack 1.5:registry.redhat.io/stf/service-telemetry-operator-bundle@sha256:1abefb6eb3d624f2b9b827f31ecae69a2c84e50a2fe91be81d01d6c2b4ec766b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenStack 1.5:registry.redhat.io/stf/sg-bridge-rhel9@sha256:58085c6b3136a28e803409d7203486650b276f2c7aaf124936b0166738a11f8b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenStack 1.5:registry.redhat.io/stf/sg-core-rhel9@sha256:73bbc51fe49e965907f35d7176759235bff876032e40616366093ead21372c71_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenStack 1.5:registry.redhat.io/stf/smart-gateway-operator-bundle@sha256:fdff297b0f11bac06d6e4d82e1dc8724ab42f0be6a0fdcbc5cd6c80c7bc7bffe_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the Go standard library packages `crypto/x509` and `crypto/tls`. During the process of building a certificate chain, an attacker can provide a large number of intermediate certificates. This excessive input is not properly limited, leading to an uncontrolled amount of work being performed. This can result in a denial of service (DoS) condition, making the affected system or application unavailable to legitimate users.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenStack 1.5:registry.redhat.io/stf/sg-core-rhel9@sha256:73bbc51fe49e965907f35d7176759235bff876032e40616366093ead21372c71_amd64 | — |
Vendor Fix
fix
|
Known not affected
6 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenStack 1.5:registry.redhat.io/stf/prometheus-webhook-snmp-rhel9@sha256:f491bfd1f9829050d5ca68786aa1bdf74f1ce6e030b7c1112cc68b3858d83b88_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack 1.5:registry.redhat.io/stf/service-telemetry-operator-bundle@sha256:1abefb6eb3d624f2b9b827f31ecae69a2c84e50a2fe91be81d01d6c2b4ec766b_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack 1.5:registry.redhat.io/stf/service-telemetry-rhel9-operator@sha256:6a9a6329f33c56bd44d760fa0d80a6c34b6a5d5942cf5a32b46e49899f546483_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack 1.5:registry.redhat.io/stf/sg-bridge-rhel9@sha256:58085c6b3136a28e803409d7203486650b276f2c7aaf124936b0166738a11f8b_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack 1.5:registry.redhat.io/stf/smart-gateway-operator-bundle@sha256:fdff297b0f11bac06d6e4d82e1dc8724ab42f0be6a0fdcbc5cd6c80c7bc7bffe_amd64 | — | ||
| Unresolved product id: Red Hat OpenStack 1.5:registry.redhat.io/stf/smart-gateway-rhel9-operator@sha256:247fd48abbb8862bff7aa76d742a8edcbb4bc0cef35b5624c458a502cd709a8d_amd64 | — |
Threats
Impact
Important
References
45 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Release of components for the Service Telemetry Framework",
"title": "Topic"
},
{
"category": "general",
"text": "Service Telemetry Framework (STF) provides automated collection of measurements and data from remote clients, such as Red Hat OpenStack Platform or third-party nodes. STF then transmits the information to a centralized, receiving Red Hat OpenShift Container Platform deployment for storage, retrieval, and monitoring.\n\nSecurity Fixes:\n* pyasn1: Denial of Service due to memory exhaustion from malformed RELATIVE-OID (CVE-2026-23490)\n* Privilege Escalation or Arbitrary Code Execution via malicious wheel file unpacking (CVE-2026-24049)\n* Incorrect parsing of IPv6 host literals in net/url (CVE-2026-25679)\n* pyasn1 Vulnerable to Denial of Service via Unbounded Recursion (CVE-2026-30922)\n* Denial of Service vulnerability in certificate chain building (CVE-2026-32280)\n* Excessive resource consumption when printing error string for host certificate validation in crypto/x509 (CVE-2025-61729)",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:14020",
"url": "https://access.redhat.com/errata/RHSA-2026:14020"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-23490",
"url": "https://access.redhat.com/security/cve/CVE-2026-23490"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-24049",
"url": "https://access.redhat.com/security/cve/CVE-2026-24049"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-25679",
"url": "https://access.redhat.com/security/cve/CVE-2026-25679"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-30922",
"url": "https://access.redhat.com/security/cve/CVE-2026-30922"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32280",
"url": "https://access.redhat.com/security/cve/CVE-2026-32280"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "external",
"summary": "https://catalog.redhat.com/software/containers/search",
"url": "https://catalog.redhat.com/software/containers/search"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_14020.json"
}
],
"title": "Red Hat Security Advisory: Release of components for Service Telemetry Framework 1.5.7",
"tracking": {
"current_release_date": "2026-07-20T04:45:46+00:00",
"generator": {
"date": "2026-07-20T04:45:46+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.7"
}
},
"id": "RHSA-2026:14020",
"initial_release_date": "2026-05-06T11:39:14+00:00",
"revision_history": [
{
"date": "2026-05-06T11:39:14+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-07-18T05:32:03+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-07-20T04:45:46+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat OpenStack 1.5",
"product": {
"name": "Red Hat OpenStack 1.5",
"product_id": "Red Hat OpenStack 1.5",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:stf:1.5::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenStack"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/stf/prometheus-webhook-snmp-rhel9@sha256:f491bfd1f9829050d5ca68786aa1bdf74f1ce6e030b7c1112cc68b3858d83b88_amd64",
"product": {
"name": "registry.redhat.io/stf/prometheus-webhook-snmp-rhel9@sha256:f491bfd1f9829050d5ca68786aa1bdf74f1ce6e030b7c1112cc68b3858d83b88_amd64",
"product_id": "registry.redhat.io/stf/prometheus-webhook-snmp-rhel9@sha256:f491bfd1f9829050d5ca68786aa1bdf74f1ce6e030b7c1112cc68b3858d83b88_amd64",
"product_identification_helper": {
"purl": "pkg:oci/prometheus-webhook-snmp-rhel9@sha256%3Af491bfd1f9829050d5ca68786aa1bdf74f1ce6e030b7c1112cc68b3858d83b88?arch=amd64\u0026repository_url=registry.redhat.io/stf\u0026tag=1777452540"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/stf/service-telemetry-operator-bundle@sha256:1abefb6eb3d624f2b9b827f31ecae69a2c84e50a2fe91be81d01d6c2b4ec766b_amd64",
"product": {
"name": "registry.redhat.io/stf/service-telemetry-operator-bundle@sha256:1abefb6eb3d624f2b9b827f31ecae69a2c84e50a2fe91be81d01d6c2b4ec766b_amd64",
"product_id": "registry.redhat.io/stf/service-telemetry-operator-bundle@sha256:1abefb6eb3d624f2b9b827f31ecae69a2c84e50a2fe91be81d01d6c2b4ec766b_amd64",
"product_identification_helper": {
"purl": "pkg:oci/service-telemetry-operator-bundle@sha256%3A1abefb6eb3d624f2b9b827f31ecae69a2c84e50a2fe91be81d01d6c2b4ec766b?arch=amd64\u0026repository_url=registry.redhat.io/stf\u0026tag=1777453299"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/stf/service-telemetry-rhel9-operator@sha256:6a9a6329f33c56bd44d760fa0d80a6c34b6a5d5942cf5a32b46e49899f546483_amd64",
"product": {
"name": "registry.redhat.io/stf/service-telemetry-rhel9-operator@sha256:6a9a6329f33c56bd44d760fa0d80a6c34b6a5d5942cf5a32b46e49899f546483_amd64",
"product_id": "registry.redhat.io/stf/service-telemetry-rhel9-operator@sha256:6a9a6329f33c56bd44d760fa0d80a6c34b6a5d5942cf5a32b46e49899f546483_amd64",
"product_identification_helper": {
"purl": "pkg:oci/service-telemetry-rhel9-operator@sha256%3A6a9a6329f33c56bd44d760fa0d80a6c34b6a5d5942cf5a32b46e49899f546483?arch=amd64\u0026repository_url=registry.redhat.io/stf\u0026tag=1777407251"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/stf/sg-bridge-rhel9@sha256:58085c6b3136a28e803409d7203486650b276f2c7aaf124936b0166738a11f8b_amd64",
"product": {
"name": "registry.redhat.io/stf/sg-bridge-rhel9@sha256:58085c6b3136a28e803409d7203486650b276f2c7aaf124936b0166738a11f8b_amd64",
"product_id": "registry.redhat.io/stf/sg-bridge-rhel9@sha256:58085c6b3136a28e803409d7203486650b276f2c7aaf124936b0166738a11f8b_amd64",
"product_identification_helper": {
"purl": "pkg:oci/sg-bridge-rhel9@sha256%3A58085c6b3136a28e803409d7203486650b276f2c7aaf124936b0166738a11f8b?arch=amd64\u0026repository_url=registry.redhat.io/stf\u0026tag=1777463768"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/stf/sg-core-rhel9@sha256:73bbc51fe49e965907f35d7176759235bff876032e40616366093ead21372c71_amd64",
"product": {
"name": "registry.redhat.io/stf/sg-core-rhel9@sha256:73bbc51fe49e965907f35d7176759235bff876032e40616366093ead21372c71_amd64",
"product_id": "registry.redhat.io/stf/sg-core-rhel9@sha256:73bbc51fe49e965907f35d7176759235bff876032e40616366093ead21372c71_amd64",
"product_identification_helper": {
"purl": "pkg:oci/sg-core-rhel9@sha256%3A73bbc51fe49e965907f35d7176759235bff876032e40616366093ead21372c71?arch=amd64\u0026repository_url=registry.redhat.io/stf\u0026tag=1777452570"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/stf/smart-gateway-operator-bundle@sha256:fdff297b0f11bac06d6e4d82e1dc8724ab42f0be6a0fdcbc5cd6c80c7bc7bffe_amd64",
"product": {
"name": "registry.redhat.io/stf/smart-gateway-operator-bundle@sha256:fdff297b0f11bac06d6e4d82e1dc8724ab42f0be6a0fdcbc5cd6c80c7bc7bffe_amd64",
"product_id": "registry.redhat.io/stf/smart-gateway-operator-bundle@sha256:fdff297b0f11bac06d6e4d82e1dc8724ab42f0be6a0fdcbc5cd6c80c7bc7bffe_amd64",
"product_identification_helper": {
"purl": "pkg:oci/smart-gateway-operator-bundle@sha256%3Afdff297b0f11bac06d6e4d82e1dc8724ab42f0be6a0fdcbc5cd6c80c7bc7bffe?arch=amd64\u0026repository_url=registry.redhat.io/stf\u0026tag=1777464350"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/stf/smart-gateway-rhel9-operator@sha256:247fd48abbb8862bff7aa76d742a8edcbb4bc0cef35b5624c458a502cd709a8d_amd64",
"product": {
"name": "registry.redhat.io/stf/smart-gateway-rhel9-operator@sha256:247fd48abbb8862bff7aa76d742a8edcbb4bc0cef35b5624c458a502cd709a8d_amd64",
"product_id": "registry.redhat.io/stf/smart-gateway-rhel9-operator@sha256:247fd48abbb8862bff7aa76d742a8edcbb4bc0cef35b5624c458a502cd709a8d_amd64",
"product_identification_helper": {
"purl": "pkg:oci/smart-gateway-rhel9-operator@sha256%3A247fd48abbb8862bff7aa76d742a8edcbb4bc0cef35b5624c458a502cd709a8d?arch=amd64\u0026repository_url=registry.redhat.io/stf\u0026tag=1777436150"
}
}
}
],
"category": "architecture",
"name": "amd64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/stf/prometheus-webhook-snmp-rhel9@sha256:f491bfd1f9829050d5ca68786aa1bdf74f1ce6e030b7c1112cc68b3858d83b88_amd64 as a component of Red Hat OpenStack 1.5",
"product_id": "Red Hat OpenStack 1.5:registry.redhat.io/stf/prometheus-webhook-snmp-rhel9@sha256:f491bfd1f9829050d5ca68786aa1bdf74f1ce6e030b7c1112cc68b3858d83b88_amd64"
},
"product_reference": "registry.redhat.io/stf/prometheus-webhook-snmp-rhel9@sha256:f491bfd1f9829050d5ca68786aa1bdf74f1ce6e030b7c1112cc68b3858d83b88_amd64",
"relates_to_product_reference": "Red Hat OpenStack 1.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/stf/service-telemetry-operator-bundle@sha256:1abefb6eb3d624f2b9b827f31ecae69a2c84e50a2fe91be81d01d6c2b4ec766b_amd64 as a component of Red Hat OpenStack 1.5",
"product_id": "Red Hat OpenStack 1.5:registry.redhat.io/stf/service-telemetry-operator-bundle@sha256:1abefb6eb3d624f2b9b827f31ecae69a2c84e50a2fe91be81d01d6c2b4ec766b_amd64"
},
"product_reference": "registry.redhat.io/stf/service-telemetry-operator-bundle@sha256:1abefb6eb3d624f2b9b827f31ecae69a2c84e50a2fe91be81d01d6c2b4ec766b_amd64",
"relates_to_product_reference": "Red Hat OpenStack 1.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/stf/service-telemetry-rhel9-operator@sha256:6a9a6329f33c56bd44d760fa0d80a6c34b6a5d5942cf5a32b46e49899f546483_amd64 as a component of Red Hat OpenStack 1.5",
"product_id": "Red Hat OpenStack 1.5:registry.redhat.io/stf/service-telemetry-rhel9-operator@sha256:6a9a6329f33c56bd44d760fa0d80a6c34b6a5d5942cf5a32b46e49899f546483_amd64"
},
"product_reference": "registry.redhat.io/stf/service-telemetry-rhel9-operator@sha256:6a9a6329f33c56bd44d760fa0d80a6c34b6a5d5942cf5a32b46e49899f546483_amd64",
"relates_to_product_reference": "Red Hat OpenStack 1.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/stf/sg-bridge-rhel9@sha256:58085c6b3136a28e803409d7203486650b276f2c7aaf124936b0166738a11f8b_amd64 as a component of Red Hat OpenStack 1.5",
"product_id": "Red Hat OpenStack 1.5:registry.redhat.io/stf/sg-bridge-rhel9@sha256:58085c6b3136a28e803409d7203486650b276f2c7aaf124936b0166738a11f8b_amd64"
},
"product_reference": "registry.redhat.io/stf/sg-bridge-rhel9@sha256:58085c6b3136a28e803409d7203486650b276f2c7aaf124936b0166738a11f8b_amd64",
"relates_to_product_reference": "Red Hat OpenStack 1.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/stf/sg-core-rhel9@sha256:73bbc51fe49e965907f35d7176759235bff876032e40616366093ead21372c71_amd64 as a component of Red Hat OpenStack 1.5",
"product_id": "Red Hat OpenStack 1.5:registry.redhat.io/stf/sg-core-rhel9@sha256:73bbc51fe49e965907f35d7176759235bff876032e40616366093ead21372c71_amd64"
},
"product_reference": "registry.redhat.io/stf/sg-core-rhel9@sha256:73bbc51fe49e965907f35d7176759235bff876032e40616366093ead21372c71_amd64",
"relates_to_product_reference": "Red Hat OpenStack 1.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/stf/smart-gateway-operator-bundle@sha256:fdff297b0f11bac06d6e4d82e1dc8724ab42f0be6a0fdcbc5cd6c80c7bc7bffe_amd64 as a component of Red Hat OpenStack 1.5",
"product_id": "Red Hat OpenStack 1.5:registry.redhat.io/stf/smart-gateway-operator-bundle@sha256:fdff297b0f11bac06d6e4d82e1dc8724ab42f0be6a0fdcbc5cd6c80c7bc7bffe_amd64"
},
"product_reference": "registry.redhat.io/stf/smart-gateway-operator-bundle@sha256:fdff297b0f11bac06d6e4d82e1dc8724ab42f0be6a0fdcbc5cd6c80c7bc7bffe_amd64",
"relates_to_product_reference": "Red Hat OpenStack 1.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/stf/smart-gateway-rhel9-operator@sha256:247fd48abbb8862bff7aa76d742a8edcbb4bc0cef35b5624c458a502cd709a8d_amd64 as a component of Red Hat OpenStack 1.5",
"product_id": "Red Hat OpenStack 1.5:registry.redhat.io/stf/smart-gateway-rhel9-operator@sha256:247fd48abbb8862bff7aa76d742a8edcbb4bc0cef35b5624c458a502cd709a8d_amd64"
},
"product_reference": "registry.redhat.io/stf/smart-gateway-rhel9-operator@sha256:247fd48abbb8862bff7aa76d742a8edcbb4bc0cef35b5624c458a502cd709a8d_amd64",
"relates_to_product_reference": "Red Hat OpenStack 1.5"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-23490",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-01-16T20:03:33.790513+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenStack 1.5:registry.redhat.io/stf/service-telemetry-operator-bundle@sha256:1abefb6eb3d624f2b9b827f31ecae69a2c84e50a2fe91be81d01d6c2b4ec766b_amd64",
"Red Hat OpenStack 1.5:registry.redhat.io/stf/sg-bridge-rhel9@sha256:58085c6b3136a28e803409d7203486650b276f2c7aaf124936b0166738a11f8b_amd64",
"Red Hat OpenStack 1.5:registry.redhat.io/stf/sg-core-rhel9@sha256:73bbc51fe49e965907f35d7176759235bff876032e40616366093ead21372c71_amd64",
"Red Hat OpenStack 1.5:registry.redhat.io/stf/smart-gateway-operator-bundle@sha256:fdff297b0f11bac06d6e4d82e1dc8724ab42f0be6a0fdcbc5cd6c80c7bc7bffe_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2430472"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in pyasn1, a generic ASN.1 library for Python. A remote attacker could exploit this vulnerability by sending a specially crafted RELATIVE-OID with excessive continuation octets. This input validation vulnerability leads to memory exhaustion, resulting in a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "pyasn1: pyasn1: Denial of Service due to memory exhaustion from malformed RELATIVE-OID",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenStack 1.5:registry.redhat.io/stf/prometheus-webhook-snmp-rhel9@sha256:f491bfd1f9829050d5ca68786aa1bdf74f1ce6e030b7c1112cc68b3858d83b88_amd64",
"Red Hat OpenStack 1.5:registry.redhat.io/stf/service-telemetry-rhel9-operator@sha256:6a9a6329f33c56bd44d760fa0d80a6c34b6a5d5942cf5a32b46e49899f546483_amd64",
"Red Hat OpenStack 1.5:registry.redhat.io/stf/smart-gateway-rhel9-operator@sha256:247fd48abbb8862bff7aa76d742a8edcbb4bc0cef35b5624c458a502cd709a8d_amd64"
],
"known_not_affected": [
"Red Hat OpenStack 1.5:registry.redhat.io/stf/service-telemetry-operator-bundle@sha256:1abefb6eb3d624f2b9b827f31ecae69a2c84e50a2fe91be81d01d6c2b4ec766b_amd64",
"Red Hat OpenStack 1.5:registry.redhat.io/stf/sg-bridge-rhel9@sha256:58085c6b3136a28e803409d7203486650b276f2c7aaf124936b0166738a11f8b_amd64",
"Red Hat OpenStack 1.5:registry.redhat.io/stf/sg-core-rhel9@sha256:73bbc51fe49e965907f35d7176759235bff876032e40616366093ead21372c71_amd64",
"Red Hat OpenStack 1.5:registry.redhat.io/stf/smart-gateway-operator-bundle@sha256:fdff297b0f11bac06d6e4d82e1dc8724ab42f0be6a0fdcbc5cd6c80c7bc7bffe_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-23490"
},
{
"category": "external",
"summary": "RHBZ#2430472",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2430472"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-23490",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-23490"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-23490",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23490"
},
{
"category": "external",
"summary": "https://github.com/pyasn1/pyasn1/commit/3908f144229eed4df24bd569d16e5991ace44970",
"url": "https://github.com/pyasn1/pyasn1/commit/3908f144229eed4df24bd569d16e5991ace44970"
},
{
"category": "external",
"summary": "https://github.com/pyasn1/pyasn1/releases/tag/v0.6.2",
"url": "https://github.com/pyasn1/pyasn1/releases/tag/v0.6.2"
},
{
"category": "external",
"summary": "https://github.com/pyasn1/pyasn1/security/advisories/GHSA-63vm-454h-vhhq",
"url": "https://github.com/pyasn1/pyasn1/security/advisories/GHSA-63vm-454h-vhhq"
}
],
"release_date": "2026-01-16T19:03:36.442000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-06T11:39:14+00:00",
"details": "The Service Telemetry Framework container image provided by this update can be downloaded from the Red Hat Container Registry at registry.access.redhat.com. Installation instructions for your platform are available at Red Hat Container\nCatalog (see References).\n\nDockerfiles and scripts should be amended either to refer to this new image specifically, or to the latest image generally.",
"product_ids": [
"Red Hat OpenStack 1.5:registry.redhat.io/stf/prometheus-webhook-snmp-rhel9@sha256:f491bfd1f9829050d5ca68786aa1bdf74f1ce6e030b7c1112cc68b3858d83b88_amd64",
"Red Hat OpenStack 1.5:registry.redhat.io/stf/service-telemetry-rhel9-operator@sha256:6a9a6329f33c56bd44d760fa0d80a6c34b6a5d5942cf5a32b46e49899f546483_amd64",
"Red Hat OpenStack 1.5:registry.redhat.io/stf/smart-gateway-rhel9-operator@sha256:247fd48abbb8862bff7aa76d742a8edcbb4bc0cef35b5624c458a502cd709a8d_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:14020"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenStack 1.5:registry.redhat.io/stf/prometheus-webhook-snmp-rhel9@sha256:f491bfd1f9829050d5ca68786aa1bdf74f1ce6e030b7c1112cc68b3858d83b88_amd64",
"Red Hat OpenStack 1.5:registry.redhat.io/stf/service-telemetry-operator-bundle@sha256:1abefb6eb3d624f2b9b827f31ecae69a2c84e50a2fe91be81d01d6c2b4ec766b_amd64",
"Red Hat OpenStack 1.5:registry.redhat.io/stf/service-telemetry-rhel9-operator@sha256:6a9a6329f33c56bd44d760fa0d80a6c34b6a5d5942cf5a32b46e49899f546483_amd64",
"Red Hat OpenStack 1.5:registry.redhat.io/stf/sg-bridge-rhel9@sha256:58085c6b3136a28e803409d7203486650b276f2c7aaf124936b0166738a11f8b_amd64",
"Red Hat OpenStack 1.5:registry.redhat.io/stf/sg-core-rhel9@sha256:73bbc51fe49e965907f35d7176759235bff876032e40616366093ead21372c71_amd64",
"Red Hat OpenStack 1.5:registry.redhat.io/stf/smart-gateway-operator-bundle@sha256:fdff297b0f11bac06d6e4d82e1dc8724ab42f0be6a0fdcbc5cd6c80c7bc7bffe_amd64",
"Red Hat OpenStack 1.5:registry.redhat.io/stf/smart-gateway-rhel9-operator@sha256:247fd48abbb8862bff7aa76d742a8edcbb4bc0cef35b5624c458a502cd709a8d_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "pyasn1: pyasn1: Denial of Service due to memory exhaustion from malformed RELATIVE-OID"
},
{
"cve": "CVE-2026-24049",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"discovery_date": "2026-01-22T05:00:54.709179+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenStack 1.5:registry.redhat.io/stf/service-telemetry-operator-bundle@sha256:1abefb6eb3d624f2b9b827f31ecae69a2c84e50a2fe91be81d01d6c2b4ec766b_amd64",
"Red Hat OpenStack 1.5:registry.redhat.io/stf/service-telemetry-rhel9-operator@sha256:6a9a6329f33c56bd44d760fa0d80a6c34b6a5d5942cf5a32b46e49899f546483_amd64",
"Red Hat OpenStack 1.5:registry.redhat.io/stf/sg-bridge-rhel9@sha256:58085c6b3136a28e803409d7203486650b276f2c7aaf124936b0166738a11f8b_amd64",
"Red Hat OpenStack 1.5:registry.redhat.io/stf/sg-core-rhel9@sha256:73bbc51fe49e965907f35d7176759235bff876032e40616366093ead21372c71_amd64",
"Red Hat OpenStack 1.5:registry.redhat.io/stf/smart-gateway-operator-bundle@sha256:fdff297b0f11bac06d6e4d82e1dc8724ab42f0be6a0fdcbc5cd6c80c7bc7bffe_amd64",
"Red Hat OpenStack 1.5:registry.redhat.io/stf/smart-gateway-rhel9-operator@sha256:247fd48abbb8862bff7aa76d742a8edcbb4bc0cef35b5624c458a502cd709a8d_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2431959"
}
],
"notes": [
{
"category": "description",
"text": "A path traversal flaw has been discovered in the python wheel too. The unpack function is vulnerable to file permission modification through mishandling of file permissions after extraction. The logic blindly trusts the filename from the archive header for the chmod operation, even though the extraction process itself might have sanitized the path. Attackers can craft a malicious wheel file that, when unpacked, changes the permissions of critical system files (e.g., /etc/passwd, SSH keys, config files), allowing for Privilege Escalation or arbitrary code execution by modifying now-writable scripts.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "wheel: wheel: Privilege Escalation or Arbitrary Code Execution via malicious wheel file unpacking",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenStack 1.5:registry.redhat.io/stf/prometheus-webhook-snmp-rhel9@sha256:f491bfd1f9829050d5ca68786aa1bdf74f1ce6e030b7c1112cc68b3858d83b88_amd64"
],
"known_not_affected": [
"Red Hat OpenStack 1.5:registry.redhat.io/stf/service-telemetry-operator-bundle@sha256:1abefb6eb3d624f2b9b827f31ecae69a2c84e50a2fe91be81d01d6c2b4ec766b_amd64",
"Red Hat OpenStack 1.5:registry.redhat.io/stf/service-telemetry-rhel9-operator@sha256:6a9a6329f33c56bd44d760fa0d80a6c34b6a5d5942cf5a32b46e49899f546483_amd64",
"Red Hat OpenStack 1.5:registry.redhat.io/stf/sg-bridge-rhel9@sha256:58085c6b3136a28e803409d7203486650b276f2c7aaf124936b0166738a11f8b_amd64",
"Red Hat OpenStack 1.5:registry.redhat.io/stf/sg-core-rhel9@sha256:73bbc51fe49e965907f35d7176759235bff876032e40616366093ead21372c71_amd64",
"Red Hat OpenStack 1.5:registry.redhat.io/stf/smart-gateway-operator-bundle@sha256:fdff297b0f11bac06d6e4d82e1dc8724ab42f0be6a0fdcbc5cd6c80c7bc7bffe_amd64",
"Red Hat OpenStack 1.5:registry.redhat.io/stf/smart-gateway-rhel9-operator@sha256:247fd48abbb8862bff7aa76d742a8edcbb4bc0cef35b5624c458a502cd709a8d_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-24049"
},
{
"category": "external",
"summary": "RHBZ#2431959",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2431959"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-24049",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-24049"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-24049",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-24049"
},
{
"category": "external",
"summary": "https://github.com/pypa/wheel/commit/7a7d2de96b22a9adf9208afcc9547e1001569fef",
"url": "https://github.com/pypa/wheel/commit/7a7d2de96b22a9adf9208afcc9547e1001569fef"
},
{
"category": "external",
"summary": "https://github.com/pypa/wheel/releases/tag/0.46.2",
"url": "https://github.com/pypa/wheel/releases/tag/0.46.2"
},
{
"category": "external",
"summary": "https://github.com/pypa/wheel/security/advisories/GHSA-8rrh-rw8j-w5fx",
"url": "https://github.com/pypa/wheel/security/advisories/GHSA-8rrh-rw8j-w5fx"
}
],
"release_date": "2026-01-22T04:02:08.706000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-06T11:39:14+00:00",
"details": "The Service Telemetry Framework container image provided by this update can be downloaded from the Red Hat Container Registry at registry.access.redhat.com. Installation instructions for your platform are available at Red Hat Container\nCatalog (see References).\n\nDockerfiles and scripts should be amended either to refer to this new image specifically, or to the latest image generally.",
"product_ids": [
"Red Hat OpenStack 1.5:registry.redhat.io/stf/prometheus-webhook-snmp-rhel9@sha256:f491bfd1f9829050d5ca68786aa1bdf74f1ce6e030b7c1112cc68b3858d83b88_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:14020"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenStack 1.5:registry.redhat.io/stf/prometheus-webhook-snmp-rhel9@sha256:f491bfd1f9829050d5ca68786aa1bdf74f1ce6e030b7c1112cc68b3858d83b88_amd64",
"Red Hat OpenStack 1.5:registry.redhat.io/stf/service-telemetry-operator-bundle@sha256:1abefb6eb3d624f2b9b827f31ecae69a2c84e50a2fe91be81d01d6c2b4ec766b_amd64",
"Red Hat OpenStack 1.5:registry.redhat.io/stf/service-telemetry-rhel9-operator@sha256:6a9a6329f33c56bd44d760fa0d80a6c34b6a5d5942cf5a32b46e49899f546483_amd64",
"Red Hat OpenStack 1.5:registry.redhat.io/stf/sg-bridge-rhel9@sha256:58085c6b3136a28e803409d7203486650b276f2c7aaf124936b0166738a11f8b_amd64",
"Red Hat OpenStack 1.5:registry.redhat.io/stf/sg-core-rhel9@sha256:73bbc51fe49e965907f35d7176759235bff876032e40616366093ead21372c71_amd64",
"Red Hat OpenStack 1.5:registry.redhat.io/stf/smart-gateway-operator-bundle@sha256:fdff297b0f11bac06d6e4d82e1dc8724ab42f0be6a0fdcbc5cd6c80c7bc7bffe_amd64",
"Red Hat OpenStack 1.5:registry.redhat.io/stf/smart-gateway-rhel9-operator@sha256:247fd48abbb8862bff7aa76d742a8edcbb4bc0cef35b5624c458a502cd709a8d_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenStack 1.5:registry.redhat.io/stf/prometheus-webhook-snmp-rhel9@sha256:f491bfd1f9829050d5ca68786aa1bdf74f1ce6e030b7c1112cc68b3858d83b88_amd64",
"Red Hat OpenStack 1.5:registry.redhat.io/stf/service-telemetry-operator-bundle@sha256:1abefb6eb3d624f2b9b827f31ecae69a2c84e50a2fe91be81d01d6c2b4ec766b_amd64",
"Red Hat OpenStack 1.5:registry.redhat.io/stf/service-telemetry-rhel9-operator@sha256:6a9a6329f33c56bd44d760fa0d80a6c34b6a5d5942cf5a32b46e49899f546483_amd64",
"Red Hat OpenStack 1.5:registry.redhat.io/stf/sg-bridge-rhel9@sha256:58085c6b3136a28e803409d7203486650b276f2c7aaf124936b0166738a11f8b_amd64",
"Red Hat OpenStack 1.5:registry.redhat.io/stf/sg-core-rhel9@sha256:73bbc51fe49e965907f35d7176759235bff876032e40616366093ead21372c71_amd64",
"Red Hat OpenStack 1.5:registry.redhat.io/stf/smart-gateway-operator-bundle@sha256:fdff297b0f11bac06d6e4d82e1dc8724ab42f0be6a0fdcbc5cd6c80c7bc7bffe_amd64",
"Red Hat OpenStack 1.5:registry.redhat.io/stf/smart-gateway-rhel9-operator@sha256:247fd48abbb8862bff7aa76d742a8edcbb4bc0cef35b5624c458a502cd709a8d_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "wheel: wheel: Privilege Escalation or Arbitrary Code Execution via malicious wheel file unpacking"
},
{
"cve": "CVE-2026-25679",
"cwe": {
"id": "CWE-1286",
"name": "Improper Validation of Syntactic Correctness of Input"
},
"discovery_date": "2026-03-06T22:02:11.567841+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenStack 1.5:registry.redhat.io/stf/prometheus-webhook-snmp-rhel9@sha256:f491bfd1f9829050d5ca68786aa1bdf74f1ce6e030b7c1112cc68b3858d83b88_amd64",
"Red Hat OpenStack 1.5:registry.redhat.io/stf/service-telemetry-operator-bundle@sha256:1abefb6eb3d624f2b9b827f31ecae69a2c84e50a2fe91be81d01d6c2b4ec766b_amd64",
"Red Hat OpenStack 1.5:registry.redhat.io/stf/service-telemetry-rhel9-operator@sha256:6a9a6329f33c56bd44d760fa0d80a6c34b6a5d5942cf5a32b46e49899f546483_amd64",
"Red Hat OpenStack 1.5:registry.redhat.io/stf/sg-bridge-rhel9@sha256:58085c6b3136a28e803409d7203486650b276f2c7aaf124936b0166738a11f8b_amd64",
"Red Hat OpenStack 1.5:registry.redhat.io/stf/smart-gateway-operator-bundle@sha256:fdff297b0f11bac06d6e4d82e1dc8724ab42f0be6a0fdcbc5cd6c80c7bc7bffe_amd64",
"Red Hat OpenStack 1.5:registry.redhat.io/stf/smart-gateway-rhel9-operator@sha256:247fd48abbb8862bff7aa76d742a8edcbb4bc0cef35b5624c458a502cd709a8d_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445356"
}
],
"notes": [
{
"category": "description",
"text": "The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/url: Incorrect parsing of IPv6 host literals in net/url",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenStack 1.5:registry.redhat.io/stf/sg-core-rhel9@sha256:73bbc51fe49e965907f35d7176759235bff876032e40616366093ead21372c71_amd64"
],
"known_not_affected": [
"Red Hat OpenStack 1.5:registry.redhat.io/stf/prometheus-webhook-snmp-rhel9@sha256:f491bfd1f9829050d5ca68786aa1bdf74f1ce6e030b7c1112cc68b3858d83b88_amd64",
"Red Hat OpenStack 1.5:registry.redhat.io/stf/service-telemetry-operator-bundle@sha256:1abefb6eb3d624f2b9b827f31ecae69a2c84e50a2fe91be81d01d6c2b4ec766b_amd64",
"Red Hat OpenStack 1.5:registry.redhat.io/stf/service-telemetry-rhel9-operator@sha256:6a9a6329f33c56bd44d760fa0d80a6c34b6a5d5942cf5a32b46e49899f546483_amd64",
"Red Hat OpenStack 1.5:registry.redhat.io/stf/sg-bridge-rhel9@sha256:58085c6b3136a28e803409d7203486650b276f2c7aaf124936b0166738a11f8b_amd64",
"Red Hat OpenStack 1.5:registry.redhat.io/stf/smart-gateway-operator-bundle@sha256:fdff297b0f11bac06d6e4d82e1dc8724ab42f0be6a0fdcbc5cd6c80c7bc7bffe_amd64",
"Red Hat OpenStack 1.5:registry.redhat.io/stf/smart-gateway-rhel9-operator@sha256:247fd48abbb8862bff7aa76d742a8edcbb4bc0cef35b5624c458a502cd709a8d_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-25679"
},
{
"category": "external",
"summary": "RHBZ#2445356",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445356"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-25679",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25679"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679"
},
{
"category": "external",
"summary": "https://go.dev/cl/752180",
"url": "https://go.dev/cl/752180"
},
{
"category": "external",
"summary": "https://go.dev/issue/77578",
"url": "https://go.dev/issue/77578"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk",
"url": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4601",
"url": "https://pkg.go.dev/vuln/GO-2026-4601"
}
],
"release_date": "2026-03-06T21:28:14.211000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-06T11:39:14+00:00",
"details": "The Service Telemetry Framework container image provided by this update can be downloaded from the Red Hat Container Registry at registry.access.redhat.com. Installation instructions for your platform are available at Red Hat Container\nCatalog (see References).\n\nDockerfiles and scripts should be amended either to refer to this new image specifically, or to the latest image generally.",
"product_ids": [
"Red Hat OpenStack 1.5:registry.redhat.io/stf/sg-core-rhel9@sha256:73bbc51fe49e965907f35d7176759235bff876032e40616366093ead21372c71_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:14020"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenStack 1.5:registry.redhat.io/stf/prometheus-webhook-snmp-rhel9@sha256:f491bfd1f9829050d5ca68786aa1bdf74f1ce6e030b7c1112cc68b3858d83b88_amd64",
"Red Hat OpenStack 1.5:registry.redhat.io/stf/service-telemetry-operator-bundle@sha256:1abefb6eb3d624f2b9b827f31ecae69a2c84e50a2fe91be81d01d6c2b4ec766b_amd64",
"Red Hat OpenStack 1.5:registry.redhat.io/stf/service-telemetry-rhel9-operator@sha256:6a9a6329f33c56bd44d760fa0d80a6c34b6a5d5942cf5a32b46e49899f546483_amd64",
"Red Hat OpenStack 1.5:registry.redhat.io/stf/sg-bridge-rhel9@sha256:58085c6b3136a28e803409d7203486650b276f2c7aaf124936b0166738a11f8b_amd64",
"Red Hat OpenStack 1.5:registry.redhat.io/stf/sg-core-rhel9@sha256:73bbc51fe49e965907f35d7176759235bff876032e40616366093ead21372c71_amd64",
"Red Hat OpenStack 1.5:registry.redhat.io/stf/smart-gateway-operator-bundle@sha256:fdff297b0f11bac06d6e4d82e1dc8724ab42f0be6a0fdcbc5cd6c80c7bc7bffe_amd64",
"Red Hat OpenStack 1.5:registry.redhat.io/stf/smart-gateway-rhel9-operator@sha256:247fd48abbb8862bff7aa76d742a8edcbb4bc0cef35b5624c458a502cd709a8d_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenStack 1.5:registry.redhat.io/stf/prometheus-webhook-snmp-rhel9@sha256:f491bfd1f9829050d5ca68786aa1bdf74f1ce6e030b7c1112cc68b3858d83b88_amd64",
"Red Hat OpenStack 1.5:registry.redhat.io/stf/service-telemetry-operator-bundle@sha256:1abefb6eb3d624f2b9b827f31ecae69a2c84e50a2fe91be81d01d6c2b4ec766b_amd64",
"Red Hat OpenStack 1.5:registry.redhat.io/stf/service-telemetry-rhel9-operator@sha256:6a9a6329f33c56bd44d760fa0d80a6c34b6a5d5942cf5a32b46e49899f546483_amd64",
"Red Hat OpenStack 1.5:registry.redhat.io/stf/sg-bridge-rhel9@sha256:58085c6b3136a28e803409d7203486650b276f2c7aaf124936b0166738a11f8b_amd64",
"Red Hat OpenStack 1.5:registry.redhat.io/stf/sg-core-rhel9@sha256:73bbc51fe49e965907f35d7176759235bff876032e40616366093ead21372c71_amd64",
"Red Hat OpenStack 1.5:registry.redhat.io/stf/smart-gateway-operator-bundle@sha256:fdff297b0f11bac06d6e4d82e1dc8724ab42f0be6a0fdcbc5cd6c80c7bc7bffe_amd64",
"Red Hat OpenStack 1.5:registry.redhat.io/stf/smart-gateway-rhel9-operator@sha256:247fd48abbb8862bff7aa76d742a8edcbb4bc0cef35b5624c458a502cd709a8d_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/url: Incorrect parsing of IPv6 host literals in net/url"
},
{
"cve": "CVE-2026-30922",
"cwe": {
"id": "CWE-835",
"name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
},
"discovery_date": "2026-03-18T04:02:45.401296+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenStack 1.5:registry.redhat.io/stf/service-telemetry-operator-bundle@sha256:1abefb6eb3d624f2b9b827f31ecae69a2c84e50a2fe91be81d01d6c2b4ec766b_amd64",
"Red Hat OpenStack 1.5:registry.redhat.io/stf/sg-bridge-rhel9@sha256:58085c6b3136a28e803409d7203486650b276f2c7aaf124936b0166738a11f8b_amd64",
"Red Hat OpenStack 1.5:registry.redhat.io/stf/sg-core-rhel9@sha256:73bbc51fe49e965907f35d7176759235bff876032e40616366093ead21372c71_amd64",
"Red Hat OpenStack 1.5:registry.redhat.io/stf/smart-gateway-operator-bundle@sha256:fdff297b0f11bac06d6e4d82e1dc8724ab42f0be6a0fdcbc5cd6c80c7bc7bffe_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2448553"
}
],
"notes": [
{
"category": "description",
"text": "An unbounded recursion flaw has been discovered in the pypi pyasn1 library. This uncontrolled recursion occurs when decoding ASN.1 data with deeply nested structures. An attacker can supply a crafted payload containing nested SEQUENCE (0x30) or SET (0x31) tags with Indefinite Length (0x80) markers. This forces the decoder to recursively call itself until the Python interpreter crashes with a RecursionError or consumes all available memory (OOM), crashing the host application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "pyasn1: pyasn1 Vulnerable to Denial of Service via Unbounded Recursion",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenStack 1.5:registry.redhat.io/stf/prometheus-webhook-snmp-rhel9@sha256:f491bfd1f9829050d5ca68786aa1bdf74f1ce6e030b7c1112cc68b3858d83b88_amd64",
"Red Hat OpenStack 1.5:registry.redhat.io/stf/service-telemetry-rhel9-operator@sha256:6a9a6329f33c56bd44d760fa0d80a6c34b6a5d5942cf5a32b46e49899f546483_amd64",
"Red Hat OpenStack 1.5:registry.redhat.io/stf/smart-gateway-rhel9-operator@sha256:247fd48abbb8862bff7aa76d742a8edcbb4bc0cef35b5624c458a502cd709a8d_amd64"
],
"known_not_affected": [
"Red Hat OpenStack 1.5:registry.redhat.io/stf/service-telemetry-operator-bundle@sha256:1abefb6eb3d624f2b9b827f31ecae69a2c84e50a2fe91be81d01d6c2b4ec766b_amd64",
"Red Hat OpenStack 1.5:registry.redhat.io/stf/sg-bridge-rhel9@sha256:58085c6b3136a28e803409d7203486650b276f2c7aaf124936b0166738a11f8b_amd64",
"Red Hat OpenStack 1.5:registry.redhat.io/stf/sg-core-rhel9@sha256:73bbc51fe49e965907f35d7176759235bff876032e40616366093ead21372c71_amd64",
"Red Hat OpenStack 1.5:registry.redhat.io/stf/smart-gateway-operator-bundle@sha256:fdff297b0f11bac06d6e4d82e1dc8724ab42f0be6a0fdcbc5cd6c80c7bc7bffe_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-30922"
},
{
"category": "external",
"summary": "RHBZ#2448553",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2448553"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-30922",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-30922"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-30922",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-30922"
},
{
"category": "external",
"summary": "https://github.com/pyasn1/pyasn1/commit/25ad481c19fdb006e20485ef3fc2e5b3eff30ef0",
"url": "https://github.com/pyasn1/pyasn1/commit/25ad481c19fdb006e20485ef3fc2e5b3eff30ef0"
},
{
"category": "external",
"summary": "https://github.com/pyasn1/pyasn1/security/advisories/GHSA-jr27-m4p2-rc6r",
"url": "https://github.com/pyasn1/pyasn1/security/advisories/GHSA-jr27-m4p2-rc6r"
}
],
"release_date": "2026-03-18T02:29:45.857000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-06T11:39:14+00:00",
"details": "The Service Telemetry Framework container image provided by this update can be downloaded from the Red Hat Container Registry at registry.access.redhat.com. Installation instructions for your platform are available at Red Hat Container\nCatalog (see References).\n\nDockerfiles and scripts should be amended either to refer to this new image specifically, or to the latest image generally.",
"product_ids": [
"Red Hat OpenStack 1.5:registry.redhat.io/stf/prometheus-webhook-snmp-rhel9@sha256:f491bfd1f9829050d5ca68786aa1bdf74f1ce6e030b7c1112cc68b3858d83b88_amd64",
"Red Hat OpenStack 1.5:registry.redhat.io/stf/service-telemetry-rhel9-operator@sha256:6a9a6329f33c56bd44d760fa0d80a6c34b6a5d5942cf5a32b46e49899f546483_amd64",
"Red Hat OpenStack 1.5:registry.redhat.io/stf/smart-gateway-rhel9-operator@sha256:247fd48abbb8862bff7aa76d742a8edcbb4bc0cef35b5624c458a502cd709a8d_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:14020"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat OpenStack 1.5:registry.redhat.io/stf/prometheus-webhook-snmp-rhel9@sha256:f491bfd1f9829050d5ca68786aa1bdf74f1ce6e030b7c1112cc68b3858d83b88_amd64",
"Red Hat OpenStack 1.5:registry.redhat.io/stf/service-telemetry-operator-bundle@sha256:1abefb6eb3d624f2b9b827f31ecae69a2c84e50a2fe91be81d01d6c2b4ec766b_amd64",
"Red Hat OpenStack 1.5:registry.redhat.io/stf/service-telemetry-rhel9-operator@sha256:6a9a6329f33c56bd44d760fa0d80a6c34b6a5d5942cf5a32b46e49899f546483_amd64",
"Red Hat OpenStack 1.5:registry.redhat.io/stf/sg-bridge-rhel9@sha256:58085c6b3136a28e803409d7203486650b276f2c7aaf124936b0166738a11f8b_amd64",
"Red Hat OpenStack 1.5:registry.redhat.io/stf/sg-core-rhel9@sha256:73bbc51fe49e965907f35d7176759235bff876032e40616366093ead21372c71_amd64",
"Red Hat OpenStack 1.5:registry.redhat.io/stf/smart-gateway-operator-bundle@sha256:fdff297b0f11bac06d6e4d82e1dc8724ab42f0be6a0fdcbc5cd6c80c7bc7bffe_amd64",
"Red Hat OpenStack 1.5:registry.redhat.io/stf/smart-gateway-rhel9-operator@sha256:247fd48abbb8862bff7aa76d742a8edcbb4bc0cef35b5624c458a502cd709a8d_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"Red Hat OpenStack 1.5:registry.redhat.io/stf/prometheus-webhook-snmp-rhel9@sha256:f491bfd1f9829050d5ca68786aa1bdf74f1ce6e030b7c1112cc68b3858d83b88_amd64",
"Red Hat OpenStack 1.5:registry.redhat.io/stf/service-telemetry-operator-bundle@sha256:1abefb6eb3d624f2b9b827f31ecae69a2c84e50a2fe91be81d01d6c2b4ec766b_amd64",
"Red Hat OpenStack 1.5:registry.redhat.io/stf/service-telemetry-rhel9-operator@sha256:6a9a6329f33c56bd44d760fa0d80a6c34b6a5d5942cf5a32b46e49899f546483_amd64",
"Red Hat OpenStack 1.5:registry.redhat.io/stf/sg-bridge-rhel9@sha256:58085c6b3136a28e803409d7203486650b276f2c7aaf124936b0166738a11f8b_amd64",
"Red Hat OpenStack 1.5:registry.redhat.io/stf/sg-core-rhel9@sha256:73bbc51fe49e965907f35d7176759235bff876032e40616366093ead21372c71_amd64",
"Red Hat OpenStack 1.5:registry.redhat.io/stf/smart-gateway-operator-bundle@sha256:fdff297b0f11bac06d6e4d82e1dc8724ab42f0be6a0fdcbc5cd6c80c7bc7bffe_amd64",
"Red Hat OpenStack 1.5:registry.redhat.io/stf/smart-gateway-rhel9-operator@sha256:247fd48abbb8862bff7aa76d742a8edcbb4bc0cef35b5624c458a502cd709a8d_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "pyasn1: pyasn1 Vulnerable to Denial of Service via Unbounded Recursion"
},
{
"cve": "CVE-2026-32280",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-04-08T02:01:19.572351+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenStack 1.5:registry.redhat.io/stf/prometheus-webhook-snmp-rhel9@sha256:f491bfd1f9829050d5ca68786aa1bdf74f1ce6e030b7c1112cc68b3858d83b88_amd64",
"Red Hat OpenStack 1.5:registry.redhat.io/stf/service-telemetry-operator-bundle@sha256:1abefb6eb3d624f2b9b827f31ecae69a2c84e50a2fe91be81d01d6c2b4ec766b_amd64",
"Red Hat OpenStack 1.5:registry.redhat.io/stf/service-telemetry-rhel9-operator@sha256:6a9a6329f33c56bd44d760fa0d80a6c34b6a5d5942cf5a32b46e49899f546483_amd64",
"Red Hat OpenStack 1.5:registry.redhat.io/stf/sg-bridge-rhel9@sha256:58085c6b3136a28e803409d7203486650b276f2c7aaf124936b0166738a11f8b_amd64",
"Red Hat OpenStack 1.5:registry.redhat.io/stf/smart-gateway-operator-bundle@sha256:fdff297b0f11bac06d6e4d82e1dc8724ab42f0be6a0fdcbc5cd6c80c7bc7bffe_amd64",
"Red Hat OpenStack 1.5:registry.redhat.io/stf/smart-gateway-rhel9-operator@sha256:247fd48abbb8862bff7aa76d742a8edcbb4bc0cef35b5624c458a502cd709a8d_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456339"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Go standard library packages `crypto/x509` and `crypto/tls`. During the process of building a certificate chain, an attacker can provide a large number of intermediate certificates. This excessive input is not properly limited, leading to an uncontrolled amount of work being performed. This can result in a denial of service (DoS) condition, making the affected system or application unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go standard library\u0027s certificate chain building process. Systems utilizing Go applications that process untrusted TLS certificates or X.509 certificate chains are susceptible to resource exhaustion when presented with an excessive number of intermediate certificates, potentially leading to service unavailability. This flaw impacts applications directly using `crypto/x509` or `crypto/tls`.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenStack 1.5:registry.redhat.io/stf/sg-core-rhel9@sha256:73bbc51fe49e965907f35d7176759235bff876032e40616366093ead21372c71_amd64"
],
"known_not_affected": [
"Red Hat OpenStack 1.5:registry.redhat.io/stf/prometheus-webhook-snmp-rhel9@sha256:f491bfd1f9829050d5ca68786aa1bdf74f1ce6e030b7c1112cc68b3858d83b88_amd64",
"Red Hat OpenStack 1.5:registry.redhat.io/stf/service-telemetry-operator-bundle@sha256:1abefb6eb3d624f2b9b827f31ecae69a2c84e50a2fe91be81d01d6c2b4ec766b_amd64",
"Red Hat OpenStack 1.5:registry.redhat.io/stf/service-telemetry-rhel9-operator@sha256:6a9a6329f33c56bd44d760fa0d80a6c34b6a5d5942cf5a32b46e49899f546483_amd64",
"Red Hat OpenStack 1.5:registry.redhat.io/stf/sg-bridge-rhel9@sha256:58085c6b3136a28e803409d7203486650b276f2c7aaf124936b0166738a11f8b_amd64",
"Red Hat OpenStack 1.5:registry.redhat.io/stf/smart-gateway-operator-bundle@sha256:fdff297b0f11bac06d6e4d82e1dc8724ab42f0be6a0fdcbc5cd6c80c7bc7bffe_amd64",
"Red Hat OpenStack 1.5:registry.redhat.io/stf/smart-gateway-rhel9-operator@sha256:247fd48abbb8862bff7aa76d742a8edcbb4bc0cef35b5624c458a502cd709a8d_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32280"
},
{
"category": "external",
"summary": "RHBZ#2456339",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456339"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32280",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32280"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32280",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32280"
},
{
"category": "external",
"summary": "https://go.dev/cl/758320",
"url": "https://go.dev/cl/758320"
},
{
"category": "external",
"summary": "https://go.dev/issue/78282",
"url": "https://go.dev/issue/78282"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4947",
"url": "https://pkg.go.dev/vuln/GO-2026-4947"
}
],
"release_date": "2026-04-08T01:06:58.595000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-06T11:39:14+00:00",
"details": "The Service Telemetry Framework container image provided by this update can be downloaded from the Red Hat Container Registry at registry.access.redhat.com. Installation instructions for your platform are available at Red Hat Container\nCatalog (see References).\n\nDockerfiles and scripts should be amended either to refer to this new image specifically, or to the latest image generally.",
"product_ids": [
"Red Hat OpenStack 1.5:registry.redhat.io/stf/sg-core-rhel9@sha256:73bbc51fe49e965907f35d7176759235bff876032e40616366093ead21372c71_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:14020"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenStack 1.5:registry.redhat.io/stf/prometheus-webhook-snmp-rhel9@sha256:f491bfd1f9829050d5ca68786aa1bdf74f1ce6e030b7c1112cc68b3858d83b88_amd64",
"Red Hat OpenStack 1.5:registry.redhat.io/stf/service-telemetry-operator-bundle@sha256:1abefb6eb3d624f2b9b827f31ecae69a2c84e50a2fe91be81d01d6c2b4ec766b_amd64",
"Red Hat OpenStack 1.5:registry.redhat.io/stf/service-telemetry-rhel9-operator@sha256:6a9a6329f33c56bd44d760fa0d80a6c34b6a5d5942cf5a32b46e49899f546483_amd64",
"Red Hat OpenStack 1.5:registry.redhat.io/stf/sg-bridge-rhel9@sha256:58085c6b3136a28e803409d7203486650b276f2c7aaf124936b0166738a11f8b_amd64",
"Red Hat OpenStack 1.5:registry.redhat.io/stf/sg-core-rhel9@sha256:73bbc51fe49e965907f35d7176759235bff876032e40616366093ead21372c71_amd64",
"Red Hat OpenStack 1.5:registry.redhat.io/stf/smart-gateway-operator-bundle@sha256:fdff297b0f11bac06d6e4d82e1dc8724ab42f0be6a0fdcbc5cd6c80c7bc7bffe_amd64",
"Red Hat OpenStack 1.5:registry.redhat.io/stf/smart-gateway-rhel9-operator@sha256:247fd48abbb8862bff7aa76d742a8edcbb4bc0cef35b5624c458a502cd709a8d_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building"
}
]
}
RHSA-2026:16009
Vulnerability from csaf_redhat - Published: 2026-05-11 14:14 - Updated: 2026-07-20 04:36Summary
Red Hat Security Advisory: Red Hat AI Inference Server 3.3.3 (ROCm)
Severity
Important
Notes
Topic: Red Hat AI Inference Server 3.3.3 (ROCm) is now available.
Details: Red Hat® AI Inference Server
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in libxslt package. Processing web content may disclose sensitive information. This issue was addressed with improved memory handling.
6.5 (Medium)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:da9b415acbfa49de5960e3d255a1ba0ffad6d0bf67ec1272b1ff70842e819629_amd64 | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
A flaw was found in GnuTLS. This vulnerability allows a denial of service (DoS) by excessive CPU (Central Processing Unit) and memory consumption via specially crafted malicious certificates containing a large number of name constraints and subject alternative names (SANs).
5.3 (Medium)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:da9b415acbfa49de5960e3d255a1ba0ffad6d0bf67ec1272b1ff70842e819629_amd64 | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
A flaw was found in the OpenSSH GSSAPI (Generic Security Service Application Program Interface) delta patches, as included in various Linux distributions. A remote attacker could exploit this by sending an unexpected GSSAPI message type during the key exchange process. This occurs because the `sshpkt_disconnect()` function, when called on an error, does not properly terminate the process, leading to the continued execution of the program with uninitialized connection variables. Accessing these uninitialized variables can lead to undefined behavior, potentially resulting in information disclosure or a denial of service.
8.2 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:da9b415acbfa49de5960e3d255a1ba0ffad6d0bf67ec1272b1ff70842e819629_amd64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was identified in the RAR5 archive decompression logic of the libarchive library, specifically within the archive_read_data() processing path. When a specially crafted RAR5 archive is processed, the decompression routine may enter a state where internal logic prevents forward progress. This condition results in an infinite loop that continuously consumes CPU resources. Because the archive passes checksum validation and appears structurally valid, affected applications cannot detect the issue before processing. This can allow attackers to cause persistent denial-of-service conditions in services that automatically process archives.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:da9b415acbfa49de5960e3d255a1ba0ffad6d0bf67ec1272b1ff70842e819629_amd64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in libarchive. This heap out-of-bounds read vulnerability exists in the RAR archive processing logic due to improper validation of the LZSS sliding window size after transitions between compression methods. A remote attacker can exploit this by providing a specially crafted RAR archive, leading to the disclosure of sensitive heap memory information without requiring authentication or user interaction.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:da9b415acbfa49de5960e3d255a1ba0ffad6d0bf67ec1272b1ff70842e819629_amd64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in Python. The `webbrowser.open()` API, used to launch web browsers, does not properly sanitize input. This allows a remote attacker to craft a malicious URL containing leading dashes. When such a URL is opened, certain web browsers may interpret these dashes as command-line options, which could lead to unexpected behavior, information disclosure, or potentially arbitrary code execution, impacting the integrity of the system.
7.1 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:da9b415acbfa49de5960e3d255a1ba0ffad6d0bf67ec1272b1ff70842e819629_amd64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in libarchive. On 32-bit systems, an integer overflow vulnerability exists in the zisofs block pointer allocation logic. A remote attacker can exploit this by providing a specially crafted ISO9660 image, which can lead to a heap buffer overflow. This could potentially allow for arbitrary code execution on the affected system.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:da9b415acbfa49de5960e3d255a1ba0ffad6d0bf67ec1272b1ff70842e819629_amd64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in the gdk-pixbuf library. This heap-based buffer overflow vulnerability occurs in the JPEG image loader due to improper validation of color component counts when processing a specially crafted JPEG image. A remote attacker can exploit this flaw without user interaction, for example, via thumbnail generation. Successful exploitation leads to application crashes and denial of service (DoS) conditions.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:da9b415acbfa49de5960e3d255a1ba0ffad6d0bf67ec1272b1ff70842e819629_amd64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in giflib. This double-free vulnerability, caused by a shallow copy in GifMakeSavedImage and incorrect error handling, may allow an attacker to corrupt memory. While difficult to trigger, successful exploitation could potentially lead to arbitrary code execution or a denial of service.
7.0 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:da9b415acbfa49de5960e3d255a1ba0ffad6d0bf67ec1272b1ff70842e819629_amd64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in Vim, an open source, command line text editor. This heap buffer overflow vulnerability exists in the tag file resolution logic when processing the 'helpfile' option. A local user could exploit this by providing a specially crafted 'helpfile' option value, leading to a heap buffer overflow. This could result in arbitrary code execution or a denial of service.
7.3 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:da9b415acbfa49de5960e3d255a1ba0ffad6d0bf67ec1272b1ff70842e819629_amd64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in cbor2, a library for encoding and decoding Concise Binary Object Representation (CBOR) data. A remote attacker can exploit this vulnerability by sending a specially crafted CBOR payload containing deeply nested structures. This can cause the application to crash due to uncontrolled recursion, leading to a complete Denial of Service (DoS) for the affected application.
5.5 (Medium)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:da9b415acbfa49de5960e3d255a1ba0ffad6d0bf67ec1272b1ff70842e819629_amd64 | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
A flaw was found in nghttp2. Due to missing internal state validation, the library continues to process incoming data even after a session has been terminated. A remote attacker could exploit this by sending a specially crafted HTTP/2 frame, leading to an assertion failure and a denial of service (DoS).
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:da9b415acbfa49de5960e3d255a1ba0ffad6d0bf67ec1272b1ff70842e819629_amd64 | — |
Vendor Fix
fix
|
Threats
Impact
Important
A flaw was found in OpenEXR, an image storage format library for the motion picture industry. An attacker can craft a malicious EXR file that, when processed, causes an integer overflow in the `CompositeDeepScanLine::readPixels` function. This overflow leads to an undersized buffer allocation, which can then be overrun during write operations. Successful exploitation could result in arbitrary code execution or a denial of service (DoS).
7.4 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:da9b415acbfa49de5960e3d255a1ba0ffad6d0bf67ec1272b1ff70842e819629_amd64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in Vim, an open-source command-line text editor. Specifically, an operating system (OS) command injection vulnerability exists in the `netrw` standard plugin. A remote attacker could exploit this by tricking a user into opening a specially crafted URL, such as one using the `scp://` protocol handler. Successful exploitation allows the attacker to execute arbitrary shell commands with the same privileges as the Vim process, leading to potential system compromise.
4.4 (Medium)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:da9b415acbfa49de5960e3d255a1ba0ffad6d0bf67ec1272b1ff70842e819629_amd64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in Vim. This vulnerability, a heap-buffer-overflow and a segmentation fault, exists in the swap file recovery logic. A local attacker could exploit this by providing a specially crafted swap file. This could lead to a denial of service (DoS) or potentially information disclosure.
5.3 (Medium)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:da9b415acbfa49de5960e3d255a1ba0ffad6d0bf67ec1272b1ff70842e819629_amd64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
An unbounded recursion flaw has been discovered in the pypi pyasn1 library. This uncontrolled recursion occurs when decoding ASN.1 data with deeply nested structures. An attacker can supply a crafted payload containing nested SEQUENCE (0x30) or SET (0x31) tags with Indefinite Length (0x80) markers. This forces the decoder to recursively call itself until the Python interpreter crashes with a RecursionError or consumes all available memory (OOM), crashing the host application.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:da9b415acbfa49de5960e3d255a1ba0ffad6d0bf67ec1272b1ff70842e819629_amd64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in Vim. By including a newline character in a pattern passed to Vim's glob() function, an attacker may be able to execute arbitrary shell commands. This command injection vulnerability allows for arbitrary code execution, depending on the user's shell settings.
7.3 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:da9b415acbfa49de5960e3d255a1ba0ffad6d0bf67ec1272b1ff70842e819629_amd64 | — |
Vendor Fix
fix
|
Threats
Impact
Important
A flaw was found in Pillow, a Python imaging library. This vulnerability allows a remote attacker to trigger a denial of service (DoS) by providing a specially crafted FITS image file. The library's failure to limit the amount of GZIP-compressed data during decoding can lead to unbounded memory consumption, causing the system to crash or experience severe performance issues.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:da9b415acbfa49de5960e3d255a1ba0ffad6d0bf67ec1272b1ff70842e819629_amd64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in Pillow, a Python imaging library. If a font advances for each glyph by an exceeding large amount, an integer overflow can occur when Pillow tracks the current position. This could lead to a denial of service (DoS) condition, making the application unavailable.
6.2 (Medium)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:da9b415acbfa49de5960e3d255a1ba0ffad6d0bf67ec1272b1ff70842e819629_amd64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in Pillow, a Python imaging library. A malicious actor could exploit this vulnerability by providing specially crafted nested lists as coordinates to image processing APIs within Pillow. This could lead to a heap buffer overflow, potentially causing a denial of service in applications using the library.
5.1 (Medium)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:da9b415acbfa49de5960e3d255a1ba0ffad6d0bf67ec1272b1ff70842e819629_amd64 | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
A flaw was found in Pillow, a Python imaging library. A remote attacker could supply a specially crafted malicious PDF file, causing the application to hang indefinitely and consume 100% CPU. This vulnerability leads to a Denial of Service (DoS), making the application unresponsive.
4.0 (Medium)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:da9b415acbfa49de5960e3d255a1ba0ffad6d0bf67ec1272b1ff70842e819629_amd64 | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
A flaw was found in Pillow, a Python imaging library. An attacker could exploit this vulnerability by tricking a user into processing a specially crafted malicious PSD file. This could lead to memory corruption, potentially causing the application to crash or allowing for arbitrary code execution.
7.8 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:da9b415acbfa49de5960e3d255a1ba0ffad6d0bf67ec1272b1ff70842e819629_amd64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
References
172 references
Acknowledgments
Elhanan Haenel
Kağan Çapar
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat AI Inference Server 3.3.3 (ROCm) is now available.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat\u00ae AI Inference Server",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:16009",
"url": "https://access.redhat.com/errata/RHSA-2026:16009"
},
{
"category": "external",
"summary": "https://www.redhat.com/en/products/ai/inference-server",
"url": "https://www.redhat.com/en/products/ai/inference-server"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2023-40403",
"url": "https://access.redhat.com/security/cve/CVE-2023-40403"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-14831",
"url": "https://access.redhat.com/security/cve/CVE-2025-14831"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-23868",
"url": "https://access.redhat.com/security/cve/CVE-2026-23868"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-25749",
"url": "https://access.redhat.com/security/cve/CVE-2026-25749"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-26209",
"url": "https://access.redhat.com/security/cve/CVE-2026-26209"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-27135",
"url": "https://access.redhat.com/security/cve/CVE-2026-27135"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-27622",
"url": "https://access.redhat.com/security/cve/CVE-2026-27622"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-28417",
"url": "https://access.redhat.com/security/cve/CVE-2026-28417"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-28421",
"url": "https://access.redhat.com/security/cve/CVE-2026-28421"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-30922",
"url": "https://access.redhat.com/security/cve/CVE-2026-30922"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33412",
"url": "https://access.redhat.com/security/cve/CVE-2026-33412"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-3497",
"url": "https://access.redhat.com/security/cve/CVE-2026-3497"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-40192",
"url": "https://access.redhat.com/security/cve/CVE-2026-40192"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-4111",
"url": "https://access.redhat.com/security/cve/CVE-2026-4111"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42308",
"url": "https://access.redhat.com/security/cve/CVE-2026-42308"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42309",
"url": "https://access.redhat.com/security/cve/CVE-2026-42309"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42310",
"url": "https://access.redhat.com/security/cve/CVE-2026-42310"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42311",
"url": "https://access.redhat.com/security/cve/CVE-2026-42311"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-4424",
"url": "https://access.redhat.com/security/cve/CVE-2026-4424"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-4519",
"url": "https://access.redhat.com/security/cve/CVE-2026-4519"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-5121",
"url": "https://access.redhat.com/security/cve/CVE-2026-5121"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-5201",
"url": "https://access.redhat.com/security/cve/CVE-2026-5201"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_16009.json"
}
],
"title": "Red Hat Security Advisory: Red Hat AI Inference Server 3.3.3 (ROCm)",
"tracking": {
"current_release_date": "2026-07-20T04:36:53+00:00",
"generator": {
"date": "2026-07-20T04:36:53+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.7"
}
},
"id": "RHSA-2026:16009",
"initial_release_date": "2026-05-11T14:14:38+00:00",
"revision_history": [
{
"date": "2026-05-11T14:14:38+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-07-18T05:32:03+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-07-20T04:36:53+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat AI Inference Server 3.3",
"product": {
"name": "Red Hat AI Inference Server 3.3",
"product_id": "Red Hat AI Inference Server 3.3",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:ai_inference_server:3.3::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat AI Inference Server"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:da9b415acbfa49de5960e3d255a1ba0ffad6d0bf67ec1272b1ff70842e819629_amd64",
"product": {
"name": "registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:da9b415acbfa49de5960e3d255a1ba0ffad6d0bf67ec1272b1ff70842e819629_amd64",
"product_id": "registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:da9b415acbfa49de5960e3d255a1ba0ffad6d0bf67ec1272b1ff70842e819629_amd64",
"product_identification_helper": {
"purl": "pkg:oci/vllm-rocm-rhel9@sha256%3Ada9b415acbfa49de5960e3d255a1ba0ffad6d0bf67ec1272b1ff70842e819629?arch=amd64\u0026repository_url=registry.redhat.io/rhaiis\u0026tag=1778244531"
}
}
}
],
"category": "architecture",
"name": "amd64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:da9b415acbfa49de5960e3d255a1ba0ffad6d0bf67ec1272b1ff70842e819629_amd64 as a component of Red Hat AI Inference Server 3.3",
"product_id": "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:da9b415acbfa49de5960e3d255a1ba0ffad6d0bf67ec1272b1ff70842e819629_amd64"
},
"product_reference": "registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:da9b415acbfa49de5960e3d255a1ba0ffad6d0bf67ec1272b1ff70842e819629_amd64",
"relates_to_product_reference": "Red Hat AI Inference Server 3.3"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2023-40403",
"cwe": {
"id": "CWE-200",
"name": "Exposure of Sensitive Information to an Unauthorized Actor"
},
"discovery_date": "2025-03-04T12:01:50.826520+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2349766"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in libxslt package. Processing web content may disclose sensitive information. This issue was addressed with improved memory handling.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libxslt: Processing web content may disclose sensitive information",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This CVE is a duplicate of CVE-2022-4909.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:da9b415acbfa49de5960e3d255a1ba0ffad6d0bf67ec1272b1ff70842e819629_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2023-40403"
},
{
"category": "external",
"summary": "RHBZ#2349766",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2349766"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2023-40403",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-40403"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2023-40403",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-40403"
},
{
"category": "external",
"summary": "http://seclists.org/fulldisclosure/2023/Oct/10",
"url": "http://seclists.org/fulldisclosure/2023/Oct/10"
},
{
"category": "external",
"summary": "http://seclists.org/fulldisclosure/2023/Oct/3",
"url": "http://seclists.org/fulldisclosure/2023/Oct/3"
},
{
"category": "external",
"summary": "http://seclists.org/fulldisclosure/2023/Oct/4",
"url": "http://seclists.org/fulldisclosure/2023/Oct/4"
},
{
"category": "external",
"summary": "http://seclists.org/fulldisclosure/2023/Oct/5",
"url": "http://seclists.org/fulldisclosure/2023/Oct/5"
},
{
"category": "external",
"summary": "http://seclists.org/fulldisclosure/2023/Oct/6",
"url": "http://seclists.org/fulldisclosure/2023/Oct/6"
},
{
"category": "external",
"summary": "http://seclists.org/fulldisclosure/2023/Oct/8",
"url": "http://seclists.org/fulldisclosure/2023/Oct/8"
},
{
"category": "external",
"summary": "http://seclists.org/fulldisclosure/2023/Oct/9",
"url": "http://seclists.org/fulldisclosure/2023/Oct/9"
},
{
"category": "external",
"summary": "https://bugs.chromium.org/p/chromium/issues/detail?id=1356211",
"url": "https://bugs.chromium.org/p/chromium/issues/detail?id=1356211"
},
{
"category": "external",
"summary": "https://bugzilla.gnome.org/show_bug.cgi?id=751621",
"url": "https://bugzilla.gnome.org/show_bug.cgi?id=751621"
},
{
"category": "external",
"summary": "https://gitlab.gnome.org/GNOME/libxslt/-/issues/94",
"url": "https://gitlab.gnome.org/GNOME/libxslt/-/issues/94"
},
{
"category": "external",
"summary": "https://support.apple.com/en-us/HT213927",
"url": "https://support.apple.com/en-us/HT213927"
}
],
"release_date": "2023-09-26T20:14:54.697000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-11T14:14:38+00:00",
"details": "For more information visit https://access.redhat.com/errata/RHSA-2026:16009",
"product_ids": [
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:da9b415acbfa49de5960e3d255a1ba0ffad6d0bf67ec1272b1ff70842e819629_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:16009"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:da9b415acbfa49de5960e3d255a1ba0ffad6d0bf67ec1272b1ff70842e819629_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "libxslt: Processing web content may disclose sensitive information"
},
{
"cve": "CVE-2025-14831",
"cwe": {
"id": "CWE-407",
"name": "Inefficient Algorithmic Complexity"
},
"discovery_date": "2025-12-17T14:48:30.222000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2423177"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in GnuTLS. This vulnerability allows a denial of service (DoS) by excessive CPU (Central Processing Unit) and memory consumption via specially crafted malicious certificates containing a large number of name constraints and subject alternative names (SANs).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "gnutls: GnuTLS: Denial of Service via excessive resource consumption during certificate verification",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated Moderate for Red Hat. GnuTLS is susceptible to a denial of service attack due to excessive CPU and memory consumption. This occurs when processing specially crafted malicious certificates containing a large number of name constraints and subject alternative names (SANs) during certificate verification.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:da9b415acbfa49de5960e3d255a1ba0ffad6d0bf67ec1272b1ff70842e819629_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-14831"
},
{
"category": "external",
"summary": "RHBZ#2423177",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2423177"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-14831",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-14831"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-14831",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-14831"
},
{
"category": "external",
"summary": "https://gitlab.com/gnutls/gnutls/-/issues/1773",
"url": "https://gitlab.com/gnutls/gnutls/-/issues/1773"
}
],
"release_date": "2026-02-09T14:26:34.939000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-11T14:14:38+00:00",
"details": "For more information visit https://access.redhat.com/errata/RHSA-2026:16009",
"product_ids": [
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:da9b415acbfa49de5960e3d255a1ba0ffad6d0bf67ec1272b1ff70842e819629_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:16009"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:da9b415acbfa49de5960e3d255a1ba0ffad6d0bf67ec1272b1ff70842e819629_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "gnutls: GnuTLS: Denial of Service via excessive resource consumption during certificate verification"
},
{
"cve": "CVE-2026-3497",
"cwe": {
"id": "CWE-824",
"name": "Access of Uninitialized Pointer"
},
"discovery_date": "2026-03-12T19:01:37.007806+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2447085"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the OpenSSH GSSAPI (Generic Security Service Application Program Interface) delta patches, as included in various Linux distributions. A remote attacker could exploit this by sending an unexpected GSSAPI message type during the key exchange process. This occurs because the `sshpkt_disconnect()` function, when called on an error, does not properly terminate the process, leading to the continued execution of the program with uninitialized connection variables. Accessing these uninitialized variables can lead to undefined behavior, potentially resulting in information disclosure or a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssh: OpenSSH GSSAPI: Information disclosure or denial of service due to uninitialized variables",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "IMPORTANT: This vulnerability affects the OpenSSH GSSAPI delta as implemented in Red Hat Enterprise Linux and OpenShift Container Platform. An unauthenticated attacker could send a specially crafted GSSAPI message during key exchange, leading to the use of uninitialized variables and potentially undefined behavior. The severity of the impact is dependent on compiler hardening configurations.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:da9b415acbfa49de5960e3d255a1ba0ffad6d0bf67ec1272b1ff70842e819629_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-3497"
},
{
"category": "external",
"summary": "RHBZ#2447085",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2447085"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-3497",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-3497"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-3497",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-3497"
},
{
"category": "external",
"summary": "https://ubuntu.com/security/CVE-2026-3497",
"url": "https://ubuntu.com/security/CVE-2026-3497"
},
{
"category": "external",
"summary": "https://www.openwall.com/lists/oss-security/2026/03/12/3",
"url": "https://www.openwall.com/lists/oss-security/2026/03/12/3"
}
],
"release_date": "2026-03-12T18:27:44.917000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-11T14:14:38+00:00",
"details": "For more information visit https://access.redhat.com/errata/RHSA-2026:16009",
"product_ids": [
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:da9b415acbfa49de5960e3d255a1ba0ffad6d0bf67ec1272b1ff70842e819629_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:16009"
},
{
"category": "workaround",
"details": "To mitigate this issue, disable GSSAPI key exchange in the OpenSSH server configuration. This prevents the server from processing GSSAPI messages, eliminating the vulnerability\u0027s attack surface.\n\nEdit `/etc/ssh/sshd_config` and add or modify the line:\n```\nGSSAPIKeyExchange no\n```\n\nAfter saving the changes, restart the `sshd` service for the mitigation to take effect. This action will prevent users from authenticating via GSSAPI.\n\n```\n# systemctl restart sshd\n```",
"product_ids": [
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:da9b415acbfa49de5960e3d255a1ba0ffad6d0bf67ec1272b1ff70842e819629_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:da9b415acbfa49de5960e3d255a1ba0ffad6d0bf67ec1272b1ff70842e819629_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "openssh: OpenSSH GSSAPI: Information disclosure or denial of service due to uninitialized variables"
},
{
"acknowledgments": [
{
"names": [
"Elhanan Haenel"
]
}
],
"cve": "CVE-2026-4111",
"cwe": {
"id": "CWE-835",
"name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
},
"discovery_date": "2026-03-11T11:18:51.609000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2446453"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was identified in the RAR5 archive decompression logic of the libarchive library, specifically within the archive_read_data() processing path. When a specially crafted RAR5 archive is processed, the decompression routine may enter a state where internal logic prevents forward progress. This condition results in an infinite loop that continuously consumes CPU resources. Because the archive passes checksum validation and appears structurally valid, affected applications cannot detect the issue before processing. This can allow attackers to cause persistent denial-of-service conditions in services that automatically process archives.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libarchive: Infinite Loop Denial of Service in RAR5 Decompression via archive_read_data() in libarchive",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "The Red Hat Product Security team would likely assess the severity of this vulnerability as High because it allows remote attackers to cause a persistent denial-of-service condition using a small crafted archive file. Successful exploitation requires no authentication, no special configuration, and no user interaction in environments that automatically process uploaded archives. By repeatedly submitting malicious archives, an attacker can exhaust CPU resources or worker threads in services such as file upload systems, CI/CD pipelines, mail scanners, and content indexing services that rely on libarchive for archive extraction.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:da9b415acbfa49de5960e3d255a1ba0ffad6d0bf67ec1272b1ff70842e819629_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-4111"
},
{
"category": "external",
"summary": "RHBZ#2446453",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2446453"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-4111",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4111"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-4111",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4111"
},
{
"category": "external",
"summary": "https://github.com/libarchive/libarchive/pull/2877",
"url": "https://github.com/libarchive/libarchive/pull/2877"
}
],
"release_date": "2026-03-11T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-11T14:14:38+00:00",
"details": "For more information visit https://access.redhat.com/errata/RHSA-2026:16009",
"product_ids": [
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:da9b415acbfa49de5960e3d255a1ba0ffad6d0bf67ec1272b1ff70842e819629_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:16009"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options don\u0027t meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:da9b415acbfa49de5960e3d255a1ba0ffad6d0bf67ec1272b1ff70842e819629_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:da9b415acbfa49de5960e3d255a1ba0ffad6d0bf67ec1272b1ff70842e819629_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "libarchive: Infinite Loop Denial of Service in RAR5 Decompression via archive_read_data() in libarchive"
},
{
"acknowledgments": [
{
"names": [
"Elhanan Haenel"
]
}
],
"cve": "CVE-2026-4424",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"discovery_date": "2026-03-19T12:22:21.740000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2449006"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in libarchive. This heap out-of-bounds read vulnerability exists in the RAR archive processing logic due to improper validation of the LZSS sliding window size after transitions between compression methods. A remote attacker can exploit this by providing a specially crafted RAR archive, leading to the disclosure of sensitive heap memory information without requiring authentication or user interaction.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libarchive: libarchive: Information disclosure via heap out-of-bounds read in RAR archive processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "IMPORTANT: This heap out-of-bounds read vulnerability in libarchive\u0027s RAR archive processing logic can lead to information disclosure. A remote attacker can exploit this flaw by providing a specially crafted RAR archive, potentially revealing sensitive heap memory information without requiring authentication or user interaction on systems that process untrusted archives.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:da9b415acbfa49de5960e3d255a1ba0ffad6d0bf67ec1272b1ff70842e819629_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-4424"
},
{
"category": "external",
"summary": "RHBZ#2449006",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449006"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-4424",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4424"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-4424",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4424"
},
{
"category": "external",
"summary": "https://github.com/libarchive/libarchive/pull/2898",
"url": "https://github.com/libarchive/libarchive/pull/2898"
}
],
"release_date": "2026-03-19T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-11T14:14:38+00:00",
"details": "For more information visit https://access.redhat.com/errata/RHSA-2026:16009",
"product_ids": [
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:da9b415acbfa49de5960e3d255a1ba0ffad6d0bf67ec1272b1ff70842e819629_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:16009"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:da9b415acbfa49de5960e3d255a1ba0ffad6d0bf67ec1272b1ff70842e819629_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:da9b415acbfa49de5960e3d255a1ba0ffad6d0bf67ec1272b1ff70842e819629_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "libarchive: libarchive: Information disclosure via heap out-of-bounds read in RAR archive processing"
},
{
"cve": "CVE-2026-4519",
"cwe": {
"id": "CWE-88",
"name": "Improper Neutralization of Argument Delimiters in a Command (\u0027Argument Injection\u0027)"
},
"discovery_date": "2026-03-20T16:02:13.494105+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2449649"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Python. The `webbrowser.open()` API, used to launch web browsers, does not properly sanitize input. This allows a remote attacker to craft a malicious URL containing leading dashes. When such a URL is opened, certain web browsers may interpret these dashes as command-line options, which could lead to unexpected behavior, information disclosure, or potentially arbitrary code execution, impacting the integrity of the system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "python: Python: Command-line option injection in webbrowser.open() via crafted URLs",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:da9b415acbfa49de5960e3d255a1ba0ffad6d0bf67ec1272b1ff70842e819629_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-4519"
},
{
"category": "external",
"summary": "RHBZ#2449649",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449649"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-4519",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4519"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-4519",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4519"
},
{
"category": "external",
"summary": "https://github.com/python/cpython/issues/143930",
"url": "https://github.com/python/cpython/issues/143930"
},
{
"category": "external",
"summary": "https://github.com/python/cpython/pull/143931",
"url": "https://github.com/python/cpython/pull/143931"
},
{
"category": "external",
"summary": "https://mail.python.org/archives/list/security-announce@python.org/thread/AY5NDSS433JK56Q7Q5IS7B37QFZVVOUS/",
"url": "https://mail.python.org/archives/list/security-announce@python.org/thread/AY5NDSS433JK56Q7Q5IS7B37QFZVVOUS/"
}
],
"release_date": "2026-03-20T15:08:32.576000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-11T14:14:38+00:00",
"details": "For more information visit https://access.redhat.com/errata/RHSA-2026:16009",
"product_ids": [
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:da9b415acbfa49de5960e3d255a1ba0ffad6d0bf67ec1272b1ff70842e819629_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:16009"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:da9b415acbfa49de5960e3d255a1ba0ffad6d0bf67ec1272b1ff70842e819629_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L",
"version": "3.1"
},
"products": [
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:da9b415acbfa49de5960e3d255a1ba0ffad6d0bf67ec1272b1ff70842e819629_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "python: Python: Command-line option injection in webbrowser.open() via crafted URLs"
},
{
"acknowledgments": [
{
"names": [
"Elhanan Haenel"
]
}
],
"cve": "CVE-2026-5121",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"discovery_date": "2026-03-30T07:40:25.358335+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2452945"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in libarchive. On 32-bit systems, an integer overflow vulnerability exists in the zisofs block pointer allocation logic. A remote attacker can exploit this by providing a specially crafted ISO9660 image, which can lead to a heap buffer overflow. This could potentially allow for arbitrary code execution on the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libarchive: libarchive: Arbitrary code execution via integer overflow in ISO9660 image processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: An integer overflow flaw in `libarchive` on 32-bit systems can lead to a heap buffer overflow. This vulnerability occurs when processing a specially crafted ISO9660 image, allowing an attacker to potentially execute arbitrary code. Red Hat Enterprise Linux 64-bit systems are not affected by this flaw.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:da9b415acbfa49de5960e3d255a1ba0ffad6d0bf67ec1272b1ff70842e819629_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-5121"
},
{
"category": "external",
"summary": "RHBZ#2452945",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2452945"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-5121",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-5121"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-5121",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-5121"
},
{
"category": "external",
"summary": "https://github.com/advisories/GHSA-2vwv-vqpv-v8vc",
"url": "https://github.com/advisories/GHSA-2vwv-vqpv-v8vc"
},
{
"category": "external",
"summary": "https://github.com/libarchive/libarchive/pull/2934",
"url": "https://github.com/libarchive/libarchive/pull/2934"
}
],
"release_date": "2026-03-30T07:44:15.222000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-11T14:14:38+00:00",
"details": "For more information visit https://access.redhat.com/errata/RHSA-2026:16009",
"product_ids": [
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:da9b415acbfa49de5960e3d255a1ba0ffad6d0bf67ec1272b1ff70842e819629_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:16009"
},
{
"category": "workaround",
"details": "To mitigate this issue, avoid processing untrusted ISO9660 images with applications that utilize `libarchive`. Users should only extract or read content from ISO images obtained from trusted sources.",
"product_ids": [
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:da9b415acbfa49de5960e3d255a1ba0ffad6d0bf67ec1272b1ff70842e819629_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:da9b415acbfa49de5960e3d255a1ba0ffad6d0bf67ec1272b1ff70842e819629_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "libarchive: libarchive: Arbitrary code execution via integer overflow in ISO9660 image processing"
},
{
"acknowledgments": [
{
"names": [
"Ka\u011fan \u00c7apar"
]
}
],
"cve": "CVE-2026-5201",
"cwe": {
"id": "CWE-122",
"name": "Heap-based Buffer Overflow"
},
"discovery_date": "2026-03-31T07:17:23.696000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2453291"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the gdk-pixbuf library. This heap-based buffer overflow vulnerability occurs in the JPEG image loader due to improper validation of color component counts when processing a specially crafted JPEG image. A remote attacker can exploit this flaw without user interaction, for example, via thumbnail generation. Successful exploitation leads to application crashes and denial of service (DoS) conditions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "gdk-pixbuf: gdk-pixbuf: Denial of Service via heap-based buffer overflow when processing a specially crafted JPEG image",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "An Important heap-based buffer overflow flaw exists in the `gdk-pixbuf` library\u0027s JPEG image loader. This vulnerability can be triggered automatically without user interaction when processing a specially crafted JPEG image, such as during thumbnail generation. Successful exploitation leads to application crashes and denial-of-service conditions in applications utilizing `gdk-pixbuf` for image handling.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:da9b415acbfa49de5960e3d255a1ba0ffad6d0bf67ec1272b1ff70842e819629_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-5201"
},
{
"category": "external",
"summary": "RHBZ#2453291",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2453291"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-5201",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-5201"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-5201",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-5201"
},
{
"category": "external",
"summary": "https://gitlab.gnome.org/GNOME/gdk-pixbuf/-/issues/304",
"url": "https://gitlab.gnome.org/GNOME/gdk-pixbuf/-/issues/304"
}
],
"release_date": "2026-03-31T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-11T14:14:38+00:00",
"details": "For more information visit https://access.redhat.com/errata/RHSA-2026:16009",
"product_ids": [
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:da9b415acbfa49de5960e3d255a1ba0ffad6d0bf67ec1272b1ff70842e819629_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:16009"
},
{
"category": "workaround",
"details": "To reduce the risk of exploitation, avoid opening or processing untrusted JPEG image files. This operational control helps prevent the automatic triggering of the vulnerability, for example, during thumbnail generation, which could otherwise lead to application instability.",
"product_ids": [
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:da9b415acbfa49de5960e3d255a1ba0ffad6d0bf67ec1272b1ff70842e819629_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:da9b415acbfa49de5960e3d255a1ba0ffad6d0bf67ec1272b1ff70842e819629_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "gdk-pixbuf: gdk-pixbuf: Denial of Service via heap-based buffer overflow when processing a specially crafted JPEG image"
},
{
"cve": "CVE-2026-23868",
"cwe": {
"id": "CWE-825",
"name": "Expired Pointer Dereference"
},
"discovery_date": "2026-03-10T20:01:10.215637+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2446207"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in giflib. This double-free vulnerability, caused by a shallow copy in GifMakeSavedImage and incorrect error handling, may allow an attacker to corrupt memory. While difficult to trigger, successful exploitation could potentially lead to arbitrary code execution or a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "giflib: Giflib: Double-free vulnerability leading to memory corruption",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:da9b415acbfa49de5960e3d255a1ba0ffad6d0bf67ec1272b1ff70842e819629_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-23868"
},
{
"category": "external",
"summary": "RHBZ#2446207",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2446207"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-23868",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-23868"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-23868",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23868"
},
{
"category": "external",
"summary": "https://sourceforge.net/p/giflib/code/ci/f5b7267aed3665ef025c13823e454170d031c106/tree/gifalloc.c?diff=5146815377b7395944cb683a08c43eee3f631eb7",
"url": "https://sourceforge.net/p/giflib/code/ci/f5b7267aed3665ef025c13823e454170d031c106/tree/gifalloc.c?diff=5146815377b7395944cb683a08c43eee3f631eb7"
},
{
"category": "external",
"summary": "https://www.facebook.com/security/advisories/cve-2026-23868",
"url": "https://www.facebook.com/security/advisories/cve-2026-23868"
}
],
"release_date": "2026-03-10T18:53:25.606000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-11T14:14:38+00:00",
"details": "For more information visit https://access.redhat.com/errata/RHSA-2026:16009",
"product_ids": [
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:da9b415acbfa49de5960e3d255a1ba0ffad6d0bf67ec1272b1ff70842e819629_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:16009"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:da9b415acbfa49de5960e3d255a1ba0ffad6d0bf67ec1272b1ff70842e819629_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:da9b415acbfa49de5960e3d255a1ba0ffad6d0bf67ec1272b1ff70842e819629_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "giflib: Giflib: Double-free vulnerability leading to memory corruption"
},
{
"cve": "CVE-2026-25749",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"discovery_date": "2026-02-09T11:08:59.061581+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2437843"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Vim, an open source, command line text editor. This heap buffer overflow vulnerability exists in the tag file resolution logic when processing the \u0027helpfile\u0027 option. A local user could exploit this by providing a specially crafted \u0027helpfile\u0027 option value, leading to a heap buffer overflow. This could result in arbitrary code execution or a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "vim: Vim: Arbitrary code execution via \u0027helpfile\u0027 option processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This MODERATE impact vulnerability in Vim\u0027s tag file resolution logic allows a local attacker to achieve a out-of-bounds write. By providing a specially crafted `helpfile` option value a local user can trigger a heap buffer overflow, as consequence lead to memory corruption presenting a data integrity impact or leading the vim process to crash resulting in availability impact. Although being non-trivial and very complex, arbitrary code execution is not discarded as worst case scenario.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:da9b415acbfa49de5960e3d255a1ba0ffad6d0bf67ec1272b1ff70842e819629_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-25749"
},
{
"category": "external",
"summary": "RHBZ#2437843",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2437843"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-25749",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25749"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25749",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25749"
},
{
"category": "external",
"summary": "https://github.com/vim/vim/commit/0714b15940b245108e6e9d7aa2260dd849a26fa9",
"url": "https://github.com/vim/vim/commit/0714b15940b245108e6e9d7aa2260dd849a26fa9"
},
{
"category": "external",
"summary": "https://github.com/vim/vim/releases/tag/v9.1.2132",
"url": "https://github.com/vim/vim/releases/tag/v9.1.2132"
},
{
"category": "external",
"summary": "https://github.com/vim/vim/security/advisories/GHSA-5w93-4g67-mm43",
"url": "https://github.com/vim/vim/security/advisories/GHSA-5w93-4g67-mm43"
}
],
"release_date": "2026-02-06T22:43:38.630000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-11T14:14:38+00:00",
"details": "For more information visit https://access.redhat.com/errata/RHSA-2026:16009",
"product_ids": [
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:da9b415acbfa49de5960e3d255a1ba0ffad6d0bf67ec1272b1ff70842e819629_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:16009"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:da9b415acbfa49de5960e3d255a1ba0ffad6d0bf67ec1272b1ff70842e819629_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:da9b415acbfa49de5960e3d255a1ba0ffad6d0bf67ec1272b1ff70842e819629_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "vim: Vim: Arbitrary code execution via \u0027helpfile\u0027 option processing"
},
{
"cve": "CVE-2026-26209",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-03-23T19:02:13.009646+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2450422"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in cbor2, a library for encoding and decoding Concise Binary Object Representation (CBOR) data. A remote attacker can exploit this vulnerability by sending a specially crafted CBOR payload containing deeply nested structures. This can cause the application to crash due to uncontrolled recursion, leading to a complete Denial of Service (DoS) for the affected application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "cbor2: cbor2: Denial of Service due to uncontrolled recursion via crafted CBOR payloads",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:da9b415acbfa49de5960e3d255a1ba0ffad6d0bf67ec1272b1ff70842e819629_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-26209"
},
{
"category": "external",
"summary": "RHBZ#2450422",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2450422"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-26209",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-26209"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-26209",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-26209"
},
{
"category": "external",
"summary": "https://github.com/agronholm/cbor2/commit/e61a5f365ba610d5907a0ae1bc72769bba34294b",
"url": "https://github.com/agronholm/cbor2/commit/e61a5f365ba610d5907a0ae1bc72769bba34294b"
},
{
"category": "external",
"summary": "https://github.com/agronholm/cbor2/pull/275",
"url": "https://github.com/agronholm/cbor2/pull/275"
},
{
"category": "external",
"summary": "https://github.com/agronholm/cbor2/releases/tag/5.9.0",
"url": "https://github.com/agronholm/cbor2/releases/tag/5.9.0"
},
{
"category": "external",
"summary": "https://github.com/agronholm/cbor2/security/advisories/GHSA-3c37-wwvx-h642",
"url": "https://github.com/agronholm/cbor2/security/advisories/GHSA-3c37-wwvx-h642"
}
],
"release_date": "2026-03-23T18:53:10.268000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-11T14:14:38+00:00",
"details": "For more information visit https://access.redhat.com/errata/RHSA-2026:16009",
"product_ids": [
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:da9b415acbfa49de5960e3d255a1ba0ffad6d0bf67ec1272b1ff70842e819629_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:16009"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:da9b415acbfa49de5960e3d255a1ba0ffad6d0bf67ec1272b1ff70842e819629_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "cbor2: cbor2: Denial of Service due to uncontrolled recursion via crafted CBOR payloads"
},
{
"cve": "CVE-2026-27135",
"cwe": {
"id": "CWE-617",
"name": "Reachable Assertion"
},
"discovery_date": "2026-03-18T19:02:13.823002+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2448754"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in nghttp2. Due to missing internal state validation, the library continues to process incoming data even after a session has been terminated. A remote attacker could exploit this by sending a specially crafted HTTP/2 frame, leading to an assertion failure and a denial of service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "nghttp2: nghttp2: Denial of Service via malformed HTTP/2 frames after session termination",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:da9b415acbfa49de5960e3d255a1ba0ffad6d0bf67ec1272b1ff70842e819629_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27135"
},
{
"category": "external",
"summary": "RHBZ#2448754",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2448754"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27135",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27135"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27135",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27135"
},
{
"category": "external",
"summary": "https://github.com/nghttp2/nghttp2/commit/5c7df8fa815ac1004d9ecb9d1f7595c4d37f46e1",
"url": "https://github.com/nghttp2/nghttp2/commit/5c7df8fa815ac1004d9ecb9d1f7595c4d37f46e1"
},
{
"category": "external",
"summary": "https://github.com/nghttp2/nghttp2/security/advisories/GHSA-6933-cjhr-5qg6",
"url": "https://github.com/nghttp2/nghttp2/security/advisories/GHSA-6933-cjhr-5qg6"
}
],
"release_date": "2026-03-18T17:59:02.045000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-11T14:14:38+00:00",
"details": "For more information visit https://access.redhat.com/errata/RHSA-2026:16009",
"product_ids": [
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:da9b415acbfa49de5960e3d255a1ba0ffad6d0bf67ec1272b1ff70842e819629_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:16009"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:da9b415acbfa49de5960e3d255a1ba0ffad6d0bf67ec1272b1ff70842e819629_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "nghttp2: nghttp2: Denial of Service via malformed HTTP/2 frames after session termination"
},
{
"cve": "CVE-2026-27622",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"discovery_date": "2026-03-03T23:02:15.379586+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2444251"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in OpenEXR, an image storage format library for the motion picture industry. An attacker can craft a malicious EXR file that, when processed, causes an integer overflow in the `CompositeDeepScanLine::readPixels` function. This overflow leads to an undersized buffer allocation, which can then be overrun during write operations. Successful exploitation could result in arbitrary code execution or a denial of service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openexr: OpenEXR: Arbitrary code execution via integer overflow in EXR file processing",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:da9b415acbfa49de5960e3d255a1ba0ffad6d0bf67ec1272b1ff70842e819629_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27622"
},
{
"category": "external",
"summary": "RHBZ#2444251",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2444251"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27622",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27622"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27622",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27622"
},
{
"category": "external",
"summary": "https://github.com/AcademySoftwareFoundation/openexr/security/advisories/GHSA-cr4v-6jm6-4963",
"url": "https://github.com/AcademySoftwareFoundation/openexr/security/advisories/GHSA-cr4v-6jm6-4963"
}
],
"release_date": "2026-03-03T22:42:49.086000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-11T14:14:38+00:00",
"details": "For more information visit https://access.redhat.com/errata/RHSA-2026:16009",
"product_ids": [
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:da9b415acbfa49de5960e3d255a1ba0ffad6d0bf67ec1272b1ff70842e819629_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:16009"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:da9b415acbfa49de5960e3d255a1ba0ffad6d0bf67ec1272b1ff70842e819629_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:da9b415acbfa49de5960e3d255a1ba0ffad6d0bf67ec1272b1ff70842e819629_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "openexr: OpenEXR: Arbitrary code execution via integer overflow in EXR file processing"
},
{
"cve": "CVE-2026-28417",
"cwe": {
"id": "CWE-78",
"name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
},
"discovery_date": "2026-02-27T22:01:53.728412+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2443455"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Vim, an open-source command-line text editor. Specifically, an operating system (OS) command injection vulnerability exists in the `netrw` standard plugin. A remote attacker could exploit this by tricking a user into opening a specially crafted URL, such as one using the `scp://` protocol handler. Successful exploitation allows the attacker to execute arbitrary shell commands with the same privileges as the Vim process, leading to potential system compromise.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "vim: Vim: Arbitrary code execution via OS command injection in the netrw plugin",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "The risk posed by this vulnerability is limited on Red Hat products due to user and system isolation features which are enabled by default. The impacts of this flaw will be limited by the active user\u0027s permissions and access control limits. Host systems are not at risk when following Red Hat guidelines and the root user account is not actively executing Vim.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:da9b415acbfa49de5960e3d255a1ba0ffad6d0bf67ec1272b1ff70842e819629_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-28417"
},
{
"category": "external",
"summary": "RHBZ#2443455",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2443455"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-28417",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-28417"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-28417",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-28417"
},
{
"category": "external",
"summary": "https://github.com/vim/vim/commit/79348dbbc09332130f4c860",
"url": "https://github.com/vim/vim/commit/79348dbbc09332130f4c860"
},
{
"category": "external",
"summary": "https://github.com/vim/vim/releases/tag/v9.2.0073",
"url": "https://github.com/vim/vim/releases/tag/v9.2.0073"
},
{
"category": "external",
"summary": "https://github.com/vim/vim/security/advisories/GHSA-m3xh-9434-g336",
"url": "https://github.com/vim/vim/security/advisories/GHSA-m3xh-9434-g336"
}
],
"release_date": "2026-02-27T21:54:35.196000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-11T14:14:38+00:00",
"details": "For more information visit https://access.redhat.com/errata/RHSA-2026:16009",
"product_ids": [
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:da9b415acbfa49de5960e3d255a1ba0ffad6d0bf67ec1272b1ff70842e819629_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:16009"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:da9b415acbfa49de5960e3d255a1ba0ffad6d0bf67ec1272b1ff70842e819629_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:da9b415acbfa49de5960e3d255a1ba0ffad6d0bf67ec1272b1ff70842e819629_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "vim: Vim: Arbitrary code execution via OS command injection in the netrw plugin"
},
{
"cve": "CVE-2026-28421",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"discovery_date": "2026-02-27T23:01:44.673504+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2443474"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Vim. This vulnerability, a heap-buffer-overflow and a segmentation fault, exists in the swap file recovery logic. A local attacker could exploit this by providing a specially crafted swap file. This could lead to a denial of service (DoS) or potentially information disclosure.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "vim: Vim: Denial of service and information disclosure via crafted swap file",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "The risk posed by this vulnerability is limited on Red Hat products due to user and system isolation features which are enabled by default. The impacts of this flaw will be limited by the active user\u0027s permissions and access control limits. Host systems are not at risk when following Red Hat guidelines and the root user account is not actively executing Vim.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:da9b415acbfa49de5960e3d255a1ba0ffad6d0bf67ec1272b1ff70842e819629_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-28421"
},
{
"category": "external",
"summary": "RHBZ#2443474",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2443474"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-28421",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-28421"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-28421",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-28421"
},
{
"category": "external",
"summary": "https://github.com/vim/vim/commit/65c1a143c331c886dc28",
"url": "https://github.com/vim/vim/commit/65c1a143c331c886dc28"
},
{
"category": "external",
"summary": "https://github.com/vim/vim/releases/tag/v9.2.0077",
"url": "https://github.com/vim/vim/releases/tag/v9.2.0077"
},
{
"category": "external",
"summary": "https://github.com/vim/vim/security/advisories/GHSA-r2gw-2x48-jj5p",
"url": "https://github.com/vim/vim/security/advisories/GHSA-r2gw-2x48-jj5p"
}
],
"release_date": "2026-02-27T22:06:34.312000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-11T14:14:38+00:00",
"details": "For more information visit https://access.redhat.com/errata/RHSA-2026:16009",
"product_ids": [
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:da9b415acbfa49de5960e3d255a1ba0ffad6d0bf67ec1272b1ff70842e819629_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:16009"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:da9b415acbfa49de5960e3d255a1ba0ffad6d0bf67ec1272b1ff70842e819629_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:da9b415acbfa49de5960e3d255a1ba0ffad6d0bf67ec1272b1ff70842e819629_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "vim: Vim: Denial of service and information disclosure via crafted swap file"
},
{
"cve": "CVE-2026-30922",
"cwe": {
"id": "CWE-835",
"name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
},
"discovery_date": "2026-03-18T04:02:45.401296+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2448553"
}
],
"notes": [
{
"category": "description",
"text": "An unbounded recursion flaw has been discovered in the pypi pyasn1 library. This uncontrolled recursion occurs when decoding ASN.1 data with deeply nested structures. An attacker can supply a crafted payload containing nested SEQUENCE (0x30) or SET (0x31) tags with Indefinite Length (0x80) markers. This forces the decoder to recursively call itself until the Python interpreter crashes with a RecursionError or consumes all available memory (OOM), crashing the host application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "pyasn1: pyasn1 Vulnerable to Denial of Service via Unbounded Recursion",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:da9b415acbfa49de5960e3d255a1ba0ffad6d0bf67ec1272b1ff70842e819629_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-30922"
},
{
"category": "external",
"summary": "RHBZ#2448553",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2448553"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-30922",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-30922"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-30922",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-30922"
},
{
"category": "external",
"summary": "https://github.com/pyasn1/pyasn1/commit/25ad481c19fdb006e20485ef3fc2e5b3eff30ef0",
"url": "https://github.com/pyasn1/pyasn1/commit/25ad481c19fdb006e20485ef3fc2e5b3eff30ef0"
},
{
"category": "external",
"summary": "https://github.com/pyasn1/pyasn1/security/advisories/GHSA-jr27-m4p2-rc6r",
"url": "https://github.com/pyasn1/pyasn1/security/advisories/GHSA-jr27-m4p2-rc6r"
}
],
"release_date": "2026-03-18T02:29:45.857000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-11T14:14:38+00:00",
"details": "For more information visit https://access.redhat.com/errata/RHSA-2026:16009",
"product_ids": [
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:da9b415acbfa49de5960e3d255a1ba0ffad6d0bf67ec1272b1ff70842e819629_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:16009"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:da9b415acbfa49de5960e3d255a1ba0ffad6d0bf67ec1272b1ff70842e819629_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:da9b415acbfa49de5960e3d255a1ba0ffad6d0bf67ec1272b1ff70842e819629_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "pyasn1: pyasn1 Vulnerable to Denial of Service via Unbounded Recursion"
},
{
"cve": "CVE-2026-33412",
"cwe": {
"id": "CWE-78",
"name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
},
"discovery_date": "2026-03-24T20:02:21.511965+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2450907"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Vim. By including a newline character in a pattern passed to Vim\u0027s glob() function, an attacker may be able to execute arbitrary shell commands. This command injection vulnerability allows for arbitrary code execution, depending on the user\u0027s shell settings.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "vim: Vim: Arbitrary code execution via command injection in glob() function",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:da9b415acbfa49de5960e3d255a1ba0ffad6d0bf67ec1272b1ff70842e819629_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33412"
},
{
"category": "external",
"summary": "RHBZ#2450907",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2450907"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33412",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33412"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33412",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33412"
},
{
"category": "external",
"summary": "https://github.com/vim/vim/commit/645ed6597d1ea896c712cd7ddbb6edee79577e9a",
"url": "https://github.com/vim/vim/commit/645ed6597d1ea896c712cd7ddbb6edee79577e9a"
},
{
"category": "external",
"summary": "https://github.com/vim/vim/releases/tag/v9.2.0202",
"url": "https://github.com/vim/vim/releases/tag/v9.2.0202"
},
{
"category": "external",
"summary": "https://github.com/vim/vim/security/advisories/GHSA-w5jw-f54h-x46c",
"url": "https://github.com/vim/vim/security/advisories/GHSA-w5jw-f54h-x46c"
}
],
"release_date": "2026-03-24T19:43:07.219000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-11T14:14:38+00:00",
"details": "For more information visit https://access.redhat.com/errata/RHSA-2026:16009",
"product_ids": [
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:da9b415acbfa49de5960e3d255a1ba0ffad6d0bf67ec1272b1ff70842e819629_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:16009"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:da9b415acbfa49de5960e3d255a1ba0ffad6d0bf67ec1272b1ff70842e819629_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "vim: Vim: Arbitrary code execution via command injection in glob() function"
},
{
"cve": "CVE-2026-40192",
"cwe": {
"id": "CWE-409",
"name": "Improper Handling of Highly Compressed Data (Data Amplification)"
},
"discovery_date": "2026-04-16T00:00:49.590876+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2458856"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Pillow, a Python imaging library. This vulnerability allows a remote attacker to trigger a denial of service (DoS) by providing a specially crafted FITS image file. The library\u0027s failure to limit the amount of GZIP-compressed data during decoding can lead to unbounded memory consumption, causing the system to crash or experience severe performance issues.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Pillow: Pillow: Denial of Service via decompression bomb in FITS image processing",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:da9b415acbfa49de5960e3d255a1ba0ffad6d0bf67ec1272b1ff70842e819629_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-40192"
},
{
"category": "external",
"summary": "RHBZ#2458856",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2458856"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-40192",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-40192"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-40192",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-40192"
},
{
"category": "external",
"summary": "https://github.com/python-pillow/Pillow/commit/3cb854e8b2bab43f40e342e665f9340d861aa628",
"url": "https://github.com/python-pillow/Pillow/commit/3cb854e8b2bab43f40e342e665f9340d861aa628"
},
{
"category": "external",
"summary": "https://github.com/python-pillow/Pillow/pull/9521",
"url": "https://github.com/python-pillow/Pillow/pull/9521"
},
{
"category": "external",
"summary": "https://github.com/python-pillow/Pillow/security/advisories/GHSA-whj4-6x5x-4v2j",
"url": "https://github.com/python-pillow/Pillow/security/advisories/GHSA-whj4-6x5x-4v2j"
},
{
"category": "external",
"summary": "https://pillow.readthedocs.io/en/stable/releasenotes/12.2.0.html#prevent-fits-decompression-bomb",
"url": "https://pillow.readthedocs.io/en/stable/releasenotes/12.2.0.html#prevent-fits-decompression-bomb"
}
],
"release_date": "2026-04-15T22:53:56.147000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-11T14:14:38+00:00",
"details": "For more information visit https://access.redhat.com/errata/RHSA-2026:16009",
"product_ids": [
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:da9b415acbfa49de5960e3d255a1ba0ffad6d0bf67ec1272b1ff70842e819629_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:16009"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:da9b415acbfa49de5960e3d255a1ba0ffad6d0bf67ec1272b1ff70842e819629_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:da9b415acbfa49de5960e3d255a1ba0ffad6d0bf67ec1272b1ff70842e819629_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Pillow: Pillow: Denial of Service via decompression bomb in FITS image processing"
},
{
"cve": "CVE-2026-42308",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"discovery_date": "2026-05-09T06:01:07.510498+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2468457"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Pillow, a Python imaging library. If a font advances for each glyph by an exceeding large amount, an integer overflow can occur when Pillow tracks the current position. This could lead to a denial of service (DoS) condition, making the application unavailable.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Pillow: python: Pillow: Denial of Service via integer overflow in font processing",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:da9b415acbfa49de5960e3d255a1ba0ffad6d0bf67ec1272b1ff70842e819629_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42308"
},
{
"category": "external",
"summary": "RHBZ#2468457",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2468457"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42308",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42308"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42308",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42308"
},
{
"category": "external",
"summary": "https://github.com/python-pillow/Pillow/releases/tag/12.2.0",
"url": "https://github.com/python-pillow/Pillow/releases/tag/12.2.0"
},
{
"category": "external",
"summary": "https://github.com/python-pillow/Pillow/security/advisories/GHSA-wjx4-4jcj-g98j",
"url": "https://github.com/python-pillow/Pillow/security/advisories/GHSA-wjx4-4jcj-g98j"
}
],
"release_date": "2026-05-09T04:09:01.631000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-11T14:14:38+00:00",
"details": "For more information visit https://access.redhat.com/errata/RHSA-2026:16009",
"product_ids": [
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:da9b415acbfa49de5960e3d255a1ba0ffad6d0bf67ec1272b1ff70842e819629_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:16009"
},
{
"category": "workaround",
"details": "To mitigate this issue, ensure that applications utilizing the Pillow library do not process untrusted or maliciously crafted font files. Additionally, consider running applications that process image data in a sandboxed environment to limit potential impact. Reloading or restarting affected services may be required for changes to take effect.",
"product_ids": [
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:da9b415acbfa49de5960e3d255a1ba0ffad6d0bf67ec1272b1ff70842e819629_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 6.2,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:da9b415acbfa49de5960e3d255a1ba0ffad6d0bf67ec1272b1ff70842e819629_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "Pillow: python: Pillow: Denial of Service via integer overflow in font processing"
},
{
"cve": "CVE-2026-42309",
"cwe": {
"id": "CWE-131",
"name": "Incorrect Calculation of Buffer Size"
},
"discovery_date": "2026-05-09T06:01:11.401932+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2468458"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Pillow, a Python imaging library. A malicious actor could exploit this vulnerability by providing specially crafted nested lists as coordinates to image processing APIs within Pillow. This could lead to a heap buffer overflow, potentially causing a denial of service in applications using the library.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Pillow: Pillow: Denial of Service via specially crafted coordinate input",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Moderate impact vulnerability in the Pillow Python imaging library could lead to a denial of service. Applications processing untrusted image data that utilize specific Pillow APIs, such as `ImagePath.Path`, `ImageDraw.ImageDraw.polygon`, or `ImageDraw.ImageDraw.line`, with specially crafted nested list coordinates are susceptible to a heap buffer overflow.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:da9b415acbfa49de5960e3d255a1ba0ffad6d0bf67ec1272b1ff70842e819629_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42309"
},
{
"category": "external",
"summary": "RHBZ#2468458",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2468458"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42309",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42309"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42309",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42309"
},
{
"category": "external",
"summary": "https://github.com/python-pillow/Pillow/releases/tag/12.2.0",
"url": "https://github.com/python-pillow/Pillow/releases/tag/12.2.0"
},
{
"category": "external",
"summary": "https://github.com/python-pillow/Pillow/security/advisories/GHSA-5xmw-vc9v-4wf2",
"url": "https://github.com/python-pillow/Pillow/security/advisories/GHSA-5xmw-vc9v-4wf2"
}
],
"release_date": "2026-05-09T04:08:10.517000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-11T14:14:38+00:00",
"details": "For more information visit https://access.redhat.com/errata/RHSA-2026:16009",
"product_ids": [
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:da9b415acbfa49de5960e3d255a1ba0ffad6d0bf67ec1272b1ff70842e819629_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:16009"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 5.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:da9b415acbfa49de5960e3d255a1ba0ffad6d0bf67ec1272b1ff70842e819629_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "Pillow: Pillow: Denial of Service via specially crafted coordinate input"
},
{
"cve": "CVE-2026-42310",
"cwe": {
"id": "CWE-835",
"name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
},
"discovery_date": "2026-05-09T06:01:21.465052+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2468461"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Pillow, a Python imaging library. A remote attacker could supply a specially crafted malicious PDF file, causing the application to hang indefinitely and consume 100% CPU. This vulnerability leads to a Denial of Service (DoS), making the application unresponsive.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Pillow: Pillow: Denial of Service via malicious PDF processing",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:da9b415acbfa49de5960e3d255a1ba0ffad6d0bf67ec1272b1ff70842e819629_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42310"
},
{
"category": "external",
"summary": "RHBZ#2468461",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2468461"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42310",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42310"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42310",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42310"
},
{
"category": "external",
"summary": "https://github.com/python-pillow/Pillow/commit/3bf614e4b8615d0ce1d5039efaf6db447fe7c468",
"url": "https://github.com/python-pillow/Pillow/commit/3bf614e4b8615d0ce1d5039efaf6db447fe7c468"
},
{
"category": "external",
"summary": "https://github.com/python-pillow/Pillow/pull/9519",
"url": "https://github.com/python-pillow/Pillow/pull/9519"
},
{
"category": "external",
"summary": "https://github.com/python-pillow/Pillow/releases/tag/12.2.0",
"url": "https://github.com/python-pillow/Pillow/releases/tag/12.2.0"
},
{
"category": "external",
"summary": "https://github.com/python-pillow/Pillow/security/advisories/GHSA-r73j-pqj5-w3x7",
"url": "https://github.com/python-pillow/Pillow/security/advisories/GHSA-r73j-pqj5-w3x7"
}
],
"release_date": "2026-05-09T04:10:48.395000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-11T14:14:38+00:00",
"details": "For more information visit https://access.redhat.com/errata/RHSA-2026:16009",
"product_ids": [
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:da9b415acbfa49de5960e3d255a1ba0ffad6d0bf67ec1272b1ff70842e819629_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:16009"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "LOW",
"baseScore": 4.0,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:da9b415acbfa49de5960e3d255a1ba0ffad6d0bf67ec1272b1ff70842e819629_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "Pillow: Pillow: Denial of Service via malicious PDF processing"
},
{
"cve": "CVE-2026-42311",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"discovery_date": "2026-05-09T06:01:14.891885+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2468459"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Pillow, a Python imaging library. An attacker could exploit this vulnerability by tricking a user into processing a specially crafted malicious PSD file. This could lead to memory corruption, potentially causing the application to crash or allowing for arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Pillow: python-pillow: Pillow: Arbitrary code execution via malicious PSD file processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important severity flaw in Pillow, a Python imaging library, that could lead to arbitrary code execution. The vulnerability requires a user to process a specially crafted malicious PSD file, which could result in memory corruption and allow an attacker to execute arbitrary code. Red Hat products that process untrusted image files using Pillow are at risk if they do not adequately sanitize input or operate in a sandboxed environment.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:da9b415acbfa49de5960e3d255a1ba0ffad6d0bf67ec1272b1ff70842e819629_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42311"
},
{
"category": "external",
"summary": "RHBZ#2468459",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2468459"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42311",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42311"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42311",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42311"
},
{
"category": "external",
"summary": "https://github.com/python-pillow/Pillow/commit/58f9a1d166dcb0c274807d4423522d205b0c35ea",
"url": "https://github.com/python-pillow/Pillow/commit/58f9a1d166dcb0c274807d4423522d205b0c35ea"
},
{
"category": "external",
"summary": "https://github.com/python-pillow/Pillow/pull/9520",
"url": "https://github.com/python-pillow/Pillow/pull/9520"
},
{
"category": "external",
"summary": "https://github.com/python-pillow/Pillow/releases/tag/12.2.0",
"url": "https://github.com/python-pillow/Pillow/releases/tag/12.2.0"
},
{
"category": "external",
"summary": "https://github.com/python-pillow/Pillow/security/advisories/GHSA-pwv6-vv43-88gr",
"url": "https://github.com/python-pillow/Pillow/security/advisories/GHSA-pwv6-vv43-88gr"
}
],
"release_date": "2026-05-09T04:11:58.092000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-11T14:14:38+00:00",
"details": "For more information visit https://access.redhat.com/errata/RHSA-2026:16009",
"product_ids": [
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:da9b415acbfa49de5960e3d255a1ba0ffad6d0bf67ec1272b1ff70842e819629_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:16009"
},
{
"category": "workaround",
"details": "To mitigate this vulnerability, users should avoid processing untrusted or suspicious PSD image files with applications that utilize the Pillow library. Implementing strict input validation and sanitization for image uploads and processing workflows can reduce the risk. Additionally, running applications that process untrusted content within a sandboxed environment can limit the potential impact of successful exploitation.",
"product_ids": [
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:da9b415acbfa49de5960e3d255a1ba0ffad6d0bf67ec1272b1ff70842e819629_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:da9b415acbfa49de5960e3d255a1ba0ffad6d0bf67ec1272b1ff70842e819629_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Pillow: python-pillow: Pillow: Arbitrary code execution via malicious PSD file processing"
}
]
}
RHSA-2026:17083
Vulnerability from csaf_redhat - Published: 2026-05-13 15:29 - Updated: 2026-07-20 04:36Summary
Red Hat Security Advisory: fence-agents security update
Severity
Important
Notes
Topic: An update for fence-agents is now available for Red Hat Enterprise Linux 10.0 Extended Update Support.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster.
Security Fix(es):
* pyjwt: PyJWT accepts unknown `crit` header extensions (RFC 7515 ?4.1.11 MUST violation) (CVE-2026-32597)
* pyasn1: pyasn1 Vulnerable to Denial of Service via Unbounded Recursion (CVE-2026-30922)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
An unbounded recursion flaw has been discovered in the pypi pyasn1 library. This uncontrolled recursion occurs when decoding ASN.1 data with deeply nested structures. An attacker can supply a crafted payload containing nested SEQUENCE (0x30) or SET (0x31) tags with Indefinite Length (0x80) markers. This forces the decoder to recursively call itself until the Python interpreter crashes with a RecursionError or consumes all available memory (OOM), crashing the host application.
7.5 (High)
Affected products
Fixed
96 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-0:4.16.0-5.el10_0.9.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-aliyun-0:4.16.0-5.el10_0.9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-all-0:4.16.0-5.el10_0.9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-all-0:4.16.0-5.el10_0.9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-all-0:4.16.0-5.el10_0.9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-all-0:4.16.0-5.el10_0.9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-amt-ws-0:4.16.0-5.el10_0.9.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-apc-0:4.16.0-5.el10_0.9.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-apc-snmp-0:4.16.0-5.el10_0.9.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-aws-0:4.16.0-5.el10_0.9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-azure-arm-0:4.16.0-5.el10_0.9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-bladecenter-0:4.16.0-5.el10_0.9.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-brocade-0:4.16.0-5.el10_0.9.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-cisco-mds-0:4.16.0-5.el10_0.9.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-cisco-ucs-0:4.16.0-5.el10_0.9.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-common-0:4.16.0-5.el10_0.9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-common-0:4.16.0-5.el10_0.9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-common-0:4.16.0-5.el10_0.9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-common-0:4.16.0-5.el10_0.9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-common-debuginfo-0:4.16.0-5.el10_0.9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-common-debuginfo-0:4.16.0-5.el10_0.9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-common-debuginfo-0:4.16.0-5.el10_0.9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-common-debuginfo-0:4.16.0-5.el10_0.9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-debuginfo-0:4.16.0-5.el10_0.9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-debuginfo-0:4.16.0-5.el10_0.9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-debuginfo-0:4.16.0-5.el10_0.9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-debuginfo-0:4.16.0-5.el10_0.9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-debugsource-0:4.16.0-5.el10_0.9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-debugsource-0:4.16.0-5.el10_0.9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-debugsource-0:4.16.0-5.el10_0.9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-debugsource-0:4.16.0-5.el10_0.9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-drac5-0:4.16.0-5.el10_0.9.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-eaton-snmp-0:4.16.0-5.el10_0.9.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-emerson-0:4.16.0-5.el10_0.9.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-eps-0:4.16.0-5.el10_0.9.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-gce-0:4.16.0-5.el10_0.9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-heuristics-ping-0:4.16.0-5.el10_0.9.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-hpblade-0:4.16.0-5.el10_0.9.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-ibm-powervs-0:4.16.0-5.el10_0.9.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-ibm-vpc-0:4.16.0-5.el10_0.9.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-ibmblade-0:4.16.0-5.el10_0.9.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-ifmib-0:4.16.0-5.el10_0.9.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-ilo-moonshot-0:4.16.0-5.el10_0.9.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-ilo-mp-0:4.16.0-5.el10_0.9.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-ilo-ssh-0:4.16.0-5.el10_0.9.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-ilo2-0:4.16.0-5.el10_0.9.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-intelmodular-0:4.16.0-5.el10_0.9.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-ipdu-0:4.16.0-5.el10_0.9.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-ipmilan-0:4.16.0-5.el10_0.9.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-kdump-0:4.16.0-5.el10_0.9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-kdump-0:4.16.0-5.el10_0.9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-kdump-0:4.16.0-5.el10_0.9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-kdump-0:4.16.0-5.el10_0.9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-kdump-debuginfo-0:4.16.0-5.el10_0.9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-kdump-debuginfo-0:4.16.0-5.el10_0.9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-kdump-debuginfo-0:4.16.0-5.el10_0.9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-kdump-debuginfo-0:4.16.0-5.el10_0.9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-kubevirt-0:4.16.0-5.el10_0.9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-kubevirt-0:4.16.0-5.el10_0.9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-kubevirt-0:4.16.0-5.el10_0.9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-kubevirt-0:4.16.0-5.el10_0.9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-lpar-0:4.16.0-5.el10_0.9.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-mpath-0:4.16.0-5.el10_0.9.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-nutanix-ahv-0:4.16.0-5.el10_0.9.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-openstack-0:4.16.0-5.el10_0.9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-openstack-0:4.16.0-5.el10_0.9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-redfish-0:4.16.0-5.el10_0.9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-redfish-0:4.16.0-5.el10_0.9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-redfish-0:4.16.0-5.el10_0.9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-redfish-0:4.16.0-5.el10_0.9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-rhevm-0:4.16.0-5.el10_0.9.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-rsa-0:4.16.0-5.el10_0.9.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-rsb-0:4.16.0-5.el10_0.9.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-sbd-0:4.16.0-5.el10_0.9.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-scsi-0:4.16.0-5.el10_0.9.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-virsh-0:4.16.0-5.el10_0.9.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-vmware-rest-0:4.16.0-5.el10_0.9.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-vmware-soap-0:4.16.0-5.el10_0.9.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-wti-0:4.16.0-5.el10_0.9.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-zvm-0:4.16.0-5.el10_0.9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-virt-0:4.16.0-5.el10_0.9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-virt-debuginfo-0:4.16.0-5.el10_0.9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-virtd-0:4.16.0-5.el10_0.9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-virtd-cpg-0:4.16.0-5.el10_0.9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-virtd-cpg-debuginfo-0:4.16.0-5.el10_0.9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-virtd-debuginfo-0:4.16.0-5.el10_0.9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-virtd-libvirt-0:4.16.0-5.el10_0.9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-virtd-libvirt-debuginfo-0:4.16.0-5.el10_0.9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-virtd-multicast-0:4.16.0-5.el10_0.9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-virtd-multicast-debuginfo-0:4.16.0-5.el10_0.9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-virtd-serial-0:4.16.0-5.el10_0.9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-virtd-serial-debuginfo-0:4.16.0-5.el10_0.9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-virtd-tcp-0:4.16.0-5.el10_0.9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-virtd-tcp-debuginfo-0:4.16.0-5.el10_0.9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:ha-cloud-support-0:4.16.0-5.el10_0.9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:ha-cloud-support-debuginfo-0:4.16.0-5.el10_0.9.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A missing verification step has been discovered in PyJWT. PyJWT does not validate the crit (Critical) Header Parameter defined in RFC 7515 §4.1.11. When a JWS token contains a crit array listing extensions that PyJWT does not understand, the library accepts the token instead of rejecting it. This violates the MUST requirement in the RFC.
7.5 (High)
Affected products
Fixed
96 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-0:4.16.0-5.el10_0.9.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-aliyun-0:4.16.0-5.el10_0.9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-all-0:4.16.0-5.el10_0.9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-all-0:4.16.0-5.el10_0.9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-all-0:4.16.0-5.el10_0.9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-all-0:4.16.0-5.el10_0.9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-amt-ws-0:4.16.0-5.el10_0.9.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-apc-0:4.16.0-5.el10_0.9.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-apc-snmp-0:4.16.0-5.el10_0.9.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-aws-0:4.16.0-5.el10_0.9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-azure-arm-0:4.16.0-5.el10_0.9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-bladecenter-0:4.16.0-5.el10_0.9.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-brocade-0:4.16.0-5.el10_0.9.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-cisco-mds-0:4.16.0-5.el10_0.9.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-cisco-ucs-0:4.16.0-5.el10_0.9.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-common-0:4.16.0-5.el10_0.9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-common-0:4.16.0-5.el10_0.9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-common-0:4.16.0-5.el10_0.9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-common-0:4.16.0-5.el10_0.9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-common-debuginfo-0:4.16.0-5.el10_0.9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-common-debuginfo-0:4.16.0-5.el10_0.9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-common-debuginfo-0:4.16.0-5.el10_0.9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-common-debuginfo-0:4.16.0-5.el10_0.9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-debuginfo-0:4.16.0-5.el10_0.9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-debuginfo-0:4.16.0-5.el10_0.9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-debuginfo-0:4.16.0-5.el10_0.9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-debuginfo-0:4.16.0-5.el10_0.9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-debugsource-0:4.16.0-5.el10_0.9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-debugsource-0:4.16.0-5.el10_0.9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-debugsource-0:4.16.0-5.el10_0.9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-debugsource-0:4.16.0-5.el10_0.9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-drac5-0:4.16.0-5.el10_0.9.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-eaton-snmp-0:4.16.0-5.el10_0.9.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-emerson-0:4.16.0-5.el10_0.9.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-eps-0:4.16.0-5.el10_0.9.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-gce-0:4.16.0-5.el10_0.9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-heuristics-ping-0:4.16.0-5.el10_0.9.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-hpblade-0:4.16.0-5.el10_0.9.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-ibm-powervs-0:4.16.0-5.el10_0.9.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-ibm-vpc-0:4.16.0-5.el10_0.9.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-ibmblade-0:4.16.0-5.el10_0.9.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-ifmib-0:4.16.0-5.el10_0.9.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-ilo-moonshot-0:4.16.0-5.el10_0.9.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-ilo-mp-0:4.16.0-5.el10_0.9.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-ilo-ssh-0:4.16.0-5.el10_0.9.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-ilo2-0:4.16.0-5.el10_0.9.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-intelmodular-0:4.16.0-5.el10_0.9.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-ipdu-0:4.16.0-5.el10_0.9.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-ipmilan-0:4.16.0-5.el10_0.9.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-kdump-0:4.16.0-5.el10_0.9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-kdump-0:4.16.0-5.el10_0.9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-kdump-0:4.16.0-5.el10_0.9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-kdump-0:4.16.0-5.el10_0.9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-kdump-debuginfo-0:4.16.0-5.el10_0.9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-kdump-debuginfo-0:4.16.0-5.el10_0.9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-kdump-debuginfo-0:4.16.0-5.el10_0.9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-kdump-debuginfo-0:4.16.0-5.el10_0.9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-kubevirt-0:4.16.0-5.el10_0.9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-kubevirt-0:4.16.0-5.el10_0.9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-kubevirt-0:4.16.0-5.el10_0.9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-kubevirt-0:4.16.0-5.el10_0.9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-lpar-0:4.16.0-5.el10_0.9.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-mpath-0:4.16.0-5.el10_0.9.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-nutanix-ahv-0:4.16.0-5.el10_0.9.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-openstack-0:4.16.0-5.el10_0.9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-openstack-0:4.16.0-5.el10_0.9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-redfish-0:4.16.0-5.el10_0.9.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-redfish-0:4.16.0-5.el10_0.9.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-redfish-0:4.16.0-5.el10_0.9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-redfish-0:4.16.0-5.el10_0.9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-rhevm-0:4.16.0-5.el10_0.9.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-rsa-0:4.16.0-5.el10_0.9.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-rsb-0:4.16.0-5.el10_0.9.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-sbd-0:4.16.0-5.el10_0.9.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-scsi-0:4.16.0-5.el10_0.9.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-virsh-0:4.16.0-5.el10_0.9.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-vmware-rest-0:4.16.0-5.el10_0.9.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-vmware-soap-0:4.16.0-5.el10_0.9.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-wti-0:4.16.0-5.el10_0.9.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-agents-zvm-0:4.16.0-5.el10_0.9.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-virt-0:4.16.0-5.el10_0.9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-virt-debuginfo-0:4.16.0-5.el10_0.9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-virtd-0:4.16.0-5.el10_0.9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-virtd-cpg-0:4.16.0-5.el10_0.9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-virtd-cpg-debuginfo-0:4.16.0-5.el10_0.9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-virtd-debuginfo-0:4.16.0-5.el10_0.9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-virtd-libvirt-0:4.16.0-5.el10_0.9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-virtd-libvirt-debuginfo-0:4.16.0-5.el10_0.9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-virtd-multicast-0:4.16.0-5.el10_0.9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-virtd-multicast-debuginfo-0:4.16.0-5.el10_0.9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-virtd-serial-0:4.16.0-5.el10_0.9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-virtd-serial-debuginfo-0:4.16.0-5.el10_0.9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-virtd-tcp-0:4.16.0-5.el10_0.9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:fence-virtd-tcp-debuginfo-0:4.16.0-5.el10_0.9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:ha-cloud-support-0:4.16.0-5.el10_0.9.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.0.Z.E2S:ha-cloud-support-debuginfo-0:4.16.0-5.el10_0.9.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
References
16 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for fence-agents is now available for Red Hat Enterprise Linux 10.0 Extended Update Support.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster. \n\nSecurity Fix(es):\n\n* pyjwt: PyJWT accepts unknown `crit` header extensions (RFC 7515 ?4.1.11 MUST violation) (CVE-2026-32597)\n\n* pyasn1: pyasn1 Vulnerable to Denial of Service via Unbounded Recursion (CVE-2026-30922)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:17083",
"url": "https://access.redhat.com/errata/RHSA-2026:17083"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2447194",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2447194"
},
{
"category": "external",
"summary": "2448553",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2448553"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_17083.json"
}
],
"title": "Red Hat Security Advisory: fence-agents security update",
"tracking": {
"current_release_date": "2026-07-20T04:36:53+00:00",
"generator": {
"date": "2026-07-20T04:36:53+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.7"
}
},
"id": "RHSA-2026:17083",
"initial_release_date": "2026-05-13T15:29:42+00:00",
"revision_history": [
{
"date": "2026-05-13T15:29:42+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-05-13T15:29:42+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-07-20T04:36:53+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product": {
"name": "Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux_eus:10.0"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "fence-agents-0:4.16.0-5.el10_0.9.src",
"product": {
"name": "fence-agents-0:4.16.0-5.el10_0.9.src",
"product_id": "fence-agents-0:4.16.0-5.el10_0.9.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents@4.16.0-5.el10_0.9?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "fence-agents-aliyun-0:4.16.0-5.el10_0.9.x86_64",
"product": {
"name": "fence-agents-aliyun-0:4.16.0-5.el10_0.9.x86_64",
"product_id": "fence-agents-aliyun-0:4.16.0-5.el10_0.9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-aliyun@4.16.0-5.el10_0.9?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "fence-agents-all-0:4.16.0-5.el10_0.9.x86_64",
"product": {
"name": "fence-agents-all-0:4.16.0-5.el10_0.9.x86_64",
"product_id": "fence-agents-all-0:4.16.0-5.el10_0.9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-all@4.16.0-5.el10_0.9?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "fence-agents-aws-0:4.16.0-5.el10_0.9.x86_64",
"product": {
"name": "fence-agents-aws-0:4.16.0-5.el10_0.9.x86_64",
"product_id": "fence-agents-aws-0:4.16.0-5.el10_0.9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-aws@4.16.0-5.el10_0.9?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "fence-agents-azure-arm-0:4.16.0-5.el10_0.9.x86_64",
"product": {
"name": "fence-agents-azure-arm-0:4.16.0-5.el10_0.9.x86_64",
"product_id": "fence-agents-azure-arm-0:4.16.0-5.el10_0.9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-azure-arm@4.16.0-5.el10_0.9?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "fence-agents-common-0:4.16.0-5.el10_0.9.x86_64",
"product": {
"name": "fence-agents-common-0:4.16.0-5.el10_0.9.x86_64",
"product_id": "fence-agents-common-0:4.16.0-5.el10_0.9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-common@4.16.0-5.el10_0.9?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "fence-agents-gce-0:4.16.0-5.el10_0.9.x86_64",
"product": {
"name": "fence-agents-gce-0:4.16.0-5.el10_0.9.x86_64",
"product_id": "fence-agents-gce-0:4.16.0-5.el10_0.9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-gce@4.16.0-5.el10_0.9?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "fence-agents-kdump-0:4.16.0-5.el10_0.9.x86_64",
"product": {
"name": "fence-agents-kdump-0:4.16.0-5.el10_0.9.x86_64",
"product_id": "fence-agents-kdump-0:4.16.0-5.el10_0.9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-kdump@4.16.0-5.el10_0.9?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "fence-agents-kubevirt-0:4.16.0-5.el10_0.9.x86_64",
"product": {
"name": "fence-agents-kubevirt-0:4.16.0-5.el10_0.9.x86_64",
"product_id": "fence-agents-kubevirt-0:4.16.0-5.el10_0.9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-kubevirt@4.16.0-5.el10_0.9?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "fence-agents-openstack-0:4.16.0-5.el10_0.9.x86_64",
"product": {
"name": "fence-agents-openstack-0:4.16.0-5.el10_0.9.x86_64",
"product_id": "fence-agents-openstack-0:4.16.0-5.el10_0.9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-openstack@4.16.0-5.el10_0.9?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "fence-agents-redfish-0:4.16.0-5.el10_0.9.x86_64",
"product": {
"name": "fence-agents-redfish-0:4.16.0-5.el10_0.9.x86_64",
"product_id": "fence-agents-redfish-0:4.16.0-5.el10_0.9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-redfish@4.16.0-5.el10_0.9?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "fence-virt-0:4.16.0-5.el10_0.9.x86_64",
"product": {
"name": "fence-virt-0:4.16.0-5.el10_0.9.x86_64",
"product_id": "fence-virt-0:4.16.0-5.el10_0.9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-virt@4.16.0-5.el10_0.9?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "fence-virtd-0:4.16.0-5.el10_0.9.x86_64",
"product": {
"name": "fence-virtd-0:4.16.0-5.el10_0.9.x86_64",
"product_id": "fence-virtd-0:4.16.0-5.el10_0.9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-virtd@4.16.0-5.el10_0.9?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "fence-virtd-cpg-0:4.16.0-5.el10_0.9.x86_64",
"product": {
"name": "fence-virtd-cpg-0:4.16.0-5.el10_0.9.x86_64",
"product_id": "fence-virtd-cpg-0:4.16.0-5.el10_0.9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-virtd-cpg@4.16.0-5.el10_0.9?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "fence-virtd-libvirt-0:4.16.0-5.el10_0.9.x86_64",
"product": {
"name": "fence-virtd-libvirt-0:4.16.0-5.el10_0.9.x86_64",
"product_id": "fence-virtd-libvirt-0:4.16.0-5.el10_0.9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-virtd-libvirt@4.16.0-5.el10_0.9?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "fence-virtd-multicast-0:4.16.0-5.el10_0.9.x86_64",
"product": {
"name": "fence-virtd-multicast-0:4.16.0-5.el10_0.9.x86_64",
"product_id": "fence-virtd-multicast-0:4.16.0-5.el10_0.9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-virtd-multicast@4.16.0-5.el10_0.9?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "fence-virtd-serial-0:4.16.0-5.el10_0.9.x86_64",
"product": {
"name": "fence-virtd-serial-0:4.16.0-5.el10_0.9.x86_64",
"product_id": "fence-virtd-serial-0:4.16.0-5.el10_0.9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-virtd-serial@4.16.0-5.el10_0.9?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "fence-virtd-tcp-0:4.16.0-5.el10_0.9.x86_64",
"product": {
"name": "fence-virtd-tcp-0:4.16.0-5.el10_0.9.x86_64",
"product_id": "fence-virtd-tcp-0:4.16.0-5.el10_0.9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-virtd-tcp@4.16.0-5.el10_0.9?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "ha-cloud-support-0:4.16.0-5.el10_0.9.x86_64",
"product": {
"name": "ha-cloud-support-0:4.16.0-5.el10_0.9.x86_64",
"product_id": "ha-cloud-support-0:4.16.0-5.el10_0.9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ha-cloud-support@4.16.0-5.el10_0.9?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "fence-agents-debugsource-0:4.16.0-5.el10_0.9.x86_64",
"product": {
"name": "fence-agents-debugsource-0:4.16.0-5.el10_0.9.x86_64",
"product_id": "fence-agents-debugsource-0:4.16.0-5.el10_0.9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-debugsource@4.16.0-5.el10_0.9?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "fence-agents-common-debuginfo-0:4.16.0-5.el10_0.9.x86_64",
"product": {
"name": "fence-agents-common-debuginfo-0:4.16.0-5.el10_0.9.x86_64",
"product_id": "fence-agents-common-debuginfo-0:4.16.0-5.el10_0.9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-common-debuginfo@4.16.0-5.el10_0.9?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "fence-agents-debuginfo-0:4.16.0-5.el10_0.9.x86_64",
"product": {
"name": "fence-agents-debuginfo-0:4.16.0-5.el10_0.9.x86_64",
"product_id": "fence-agents-debuginfo-0:4.16.0-5.el10_0.9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-debuginfo@4.16.0-5.el10_0.9?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "fence-agents-kdump-debuginfo-0:4.16.0-5.el10_0.9.x86_64",
"product": {
"name": "fence-agents-kdump-debuginfo-0:4.16.0-5.el10_0.9.x86_64",
"product_id": "fence-agents-kdump-debuginfo-0:4.16.0-5.el10_0.9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-kdump-debuginfo@4.16.0-5.el10_0.9?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "fence-virt-debuginfo-0:4.16.0-5.el10_0.9.x86_64",
"product": {
"name": "fence-virt-debuginfo-0:4.16.0-5.el10_0.9.x86_64",
"product_id": "fence-virt-debuginfo-0:4.16.0-5.el10_0.9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-virt-debuginfo@4.16.0-5.el10_0.9?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "fence-virtd-cpg-debuginfo-0:4.16.0-5.el10_0.9.x86_64",
"product": {
"name": "fence-virtd-cpg-debuginfo-0:4.16.0-5.el10_0.9.x86_64",
"product_id": "fence-virtd-cpg-debuginfo-0:4.16.0-5.el10_0.9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-virtd-cpg-debuginfo@4.16.0-5.el10_0.9?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "fence-virtd-debuginfo-0:4.16.0-5.el10_0.9.x86_64",
"product": {
"name": "fence-virtd-debuginfo-0:4.16.0-5.el10_0.9.x86_64",
"product_id": "fence-virtd-debuginfo-0:4.16.0-5.el10_0.9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-virtd-debuginfo@4.16.0-5.el10_0.9?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "fence-virtd-libvirt-debuginfo-0:4.16.0-5.el10_0.9.x86_64",
"product": {
"name": "fence-virtd-libvirt-debuginfo-0:4.16.0-5.el10_0.9.x86_64",
"product_id": "fence-virtd-libvirt-debuginfo-0:4.16.0-5.el10_0.9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-virtd-libvirt-debuginfo@4.16.0-5.el10_0.9?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "fence-virtd-multicast-debuginfo-0:4.16.0-5.el10_0.9.x86_64",
"product": {
"name": "fence-virtd-multicast-debuginfo-0:4.16.0-5.el10_0.9.x86_64",
"product_id": "fence-virtd-multicast-debuginfo-0:4.16.0-5.el10_0.9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-virtd-multicast-debuginfo@4.16.0-5.el10_0.9?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "fence-virtd-serial-debuginfo-0:4.16.0-5.el10_0.9.x86_64",
"product": {
"name": "fence-virtd-serial-debuginfo-0:4.16.0-5.el10_0.9.x86_64",
"product_id": "fence-virtd-serial-debuginfo-0:4.16.0-5.el10_0.9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-virtd-serial-debuginfo@4.16.0-5.el10_0.9?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "fence-virtd-tcp-debuginfo-0:4.16.0-5.el10_0.9.x86_64",
"product": {
"name": "fence-virtd-tcp-debuginfo-0:4.16.0-5.el10_0.9.x86_64",
"product_id": "fence-virtd-tcp-debuginfo-0:4.16.0-5.el10_0.9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-virtd-tcp-debuginfo@4.16.0-5.el10_0.9?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "ha-cloud-support-debuginfo-0:4.16.0-5.el10_0.9.x86_64",
"product": {
"name": "ha-cloud-support-debuginfo-0:4.16.0-5.el10_0.9.x86_64",
"product_id": "ha-cloud-support-debuginfo-0:4.16.0-5.el10_0.9.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ha-cloud-support-debuginfo@4.16.0-5.el10_0.9?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "fence-agents-all-0:4.16.0-5.el10_0.9.aarch64",
"product": {
"name": "fence-agents-all-0:4.16.0-5.el10_0.9.aarch64",
"product_id": "fence-agents-all-0:4.16.0-5.el10_0.9.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-all@4.16.0-5.el10_0.9?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "fence-agents-common-0:4.16.0-5.el10_0.9.aarch64",
"product": {
"name": "fence-agents-common-0:4.16.0-5.el10_0.9.aarch64",
"product_id": "fence-agents-common-0:4.16.0-5.el10_0.9.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-common@4.16.0-5.el10_0.9?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "fence-agents-kdump-0:4.16.0-5.el10_0.9.aarch64",
"product": {
"name": "fence-agents-kdump-0:4.16.0-5.el10_0.9.aarch64",
"product_id": "fence-agents-kdump-0:4.16.0-5.el10_0.9.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-kdump@4.16.0-5.el10_0.9?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "fence-agents-kubevirt-0:4.16.0-5.el10_0.9.aarch64",
"product": {
"name": "fence-agents-kubevirt-0:4.16.0-5.el10_0.9.aarch64",
"product_id": "fence-agents-kubevirt-0:4.16.0-5.el10_0.9.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-kubevirt@4.16.0-5.el10_0.9?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "fence-agents-redfish-0:4.16.0-5.el10_0.9.aarch64",
"product": {
"name": "fence-agents-redfish-0:4.16.0-5.el10_0.9.aarch64",
"product_id": "fence-agents-redfish-0:4.16.0-5.el10_0.9.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-redfish@4.16.0-5.el10_0.9?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "fence-agents-debugsource-0:4.16.0-5.el10_0.9.aarch64",
"product": {
"name": "fence-agents-debugsource-0:4.16.0-5.el10_0.9.aarch64",
"product_id": "fence-agents-debugsource-0:4.16.0-5.el10_0.9.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-debugsource@4.16.0-5.el10_0.9?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "fence-agents-common-debuginfo-0:4.16.0-5.el10_0.9.aarch64",
"product": {
"name": "fence-agents-common-debuginfo-0:4.16.0-5.el10_0.9.aarch64",
"product_id": "fence-agents-common-debuginfo-0:4.16.0-5.el10_0.9.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-common-debuginfo@4.16.0-5.el10_0.9?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "fence-agents-debuginfo-0:4.16.0-5.el10_0.9.aarch64",
"product": {
"name": "fence-agents-debuginfo-0:4.16.0-5.el10_0.9.aarch64",
"product_id": "fence-agents-debuginfo-0:4.16.0-5.el10_0.9.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-debuginfo@4.16.0-5.el10_0.9?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "fence-agents-kdump-debuginfo-0:4.16.0-5.el10_0.9.aarch64",
"product": {
"name": "fence-agents-kdump-debuginfo-0:4.16.0-5.el10_0.9.aarch64",
"product_id": "fence-agents-kdump-debuginfo-0:4.16.0-5.el10_0.9.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-kdump-debuginfo@4.16.0-5.el10_0.9?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "fence-agents-all-0:4.16.0-5.el10_0.9.ppc64le",
"product": {
"name": "fence-agents-all-0:4.16.0-5.el10_0.9.ppc64le",
"product_id": "fence-agents-all-0:4.16.0-5.el10_0.9.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-all@4.16.0-5.el10_0.9?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "fence-agents-common-0:4.16.0-5.el10_0.9.ppc64le",
"product": {
"name": "fence-agents-common-0:4.16.0-5.el10_0.9.ppc64le",
"product_id": "fence-agents-common-0:4.16.0-5.el10_0.9.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-common@4.16.0-5.el10_0.9?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "fence-agents-kdump-0:4.16.0-5.el10_0.9.ppc64le",
"product": {
"name": "fence-agents-kdump-0:4.16.0-5.el10_0.9.ppc64le",
"product_id": "fence-agents-kdump-0:4.16.0-5.el10_0.9.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-kdump@4.16.0-5.el10_0.9?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "fence-agents-kubevirt-0:4.16.0-5.el10_0.9.ppc64le",
"product": {
"name": "fence-agents-kubevirt-0:4.16.0-5.el10_0.9.ppc64le",
"product_id": "fence-agents-kubevirt-0:4.16.0-5.el10_0.9.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-kubevirt@4.16.0-5.el10_0.9?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "fence-agents-openstack-0:4.16.0-5.el10_0.9.ppc64le",
"product": {
"name": "fence-agents-openstack-0:4.16.0-5.el10_0.9.ppc64le",
"product_id": "fence-agents-openstack-0:4.16.0-5.el10_0.9.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-openstack@4.16.0-5.el10_0.9?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "fence-agents-redfish-0:4.16.0-5.el10_0.9.ppc64le",
"product": {
"name": "fence-agents-redfish-0:4.16.0-5.el10_0.9.ppc64le",
"product_id": "fence-agents-redfish-0:4.16.0-5.el10_0.9.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-redfish@4.16.0-5.el10_0.9?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "fence-agents-debugsource-0:4.16.0-5.el10_0.9.ppc64le",
"product": {
"name": "fence-agents-debugsource-0:4.16.0-5.el10_0.9.ppc64le",
"product_id": "fence-agents-debugsource-0:4.16.0-5.el10_0.9.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-debugsource@4.16.0-5.el10_0.9?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "fence-agents-common-debuginfo-0:4.16.0-5.el10_0.9.ppc64le",
"product": {
"name": "fence-agents-common-debuginfo-0:4.16.0-5.el10_0.9.ppc64le",
"product_id": "fence-agents-common-debuginfo-0:4.16.0-5.el10_0.9.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-common-debuginfo@4.16.0-5.el10_0.9?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "fence-agents-debuginfo-0:4.16.0-5.el10_0.9.ppc64le",
"product": {
"name": "fence-agents-debuginfo-0:4.16.0-5.el10_0.9.ppc64le",
"product_id": "fence-agents-debuginfo-0:4.16.0-5.el10_0.9.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-debuginfo@4.16.0-5.el10_0.9?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "fence-agents-kdump-debuginfo-0:4.16.0-5.el10_0.9.ppc64le",
"product": {
"name": "fence-agents-kdump-debuginfo-0:4.16.0-5.el10_0.9.ppc64le",
"product_id": "fence-agents-kdump-debuginfo-0:4.16.0-5.el10_0.9.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-kdump-debuginfo@4.16.0-5.el10_0.9?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "fence-agents-all-0:4.16.0-5.el10_0.9.s390x",
"product": {
"name": "fence-agents-all-0:4.16.0-5.el10_0.9.s390x",
"product_id": "fence-agents-all-0:4.16.0-5.el10_0.9.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-all@4.16.0-5.el10_0.9?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "fence-agents-common-0:4.16.0-5.el10_0.9.s390x",
"product": {
"name": "fence-agents-common-0:4.16.0-5.el10_0.9.s390x",
"product_id": "fence-agents-common-0:4.16.0-5.el10_0.9.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-common@4.16.0-5.el10_0.9?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "fence-agents-kdump-0:4.16.0-5.el10_0.9.s390x",
"product": {
"name": "fence-agents-kdump-0:4.16.0-5.el10_0.9.s390x",
"product_id": "fence-agents-kdump-0:4.16.0-5.el10_0.9.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-kdump@4.16.0-5.el10_0.9?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "fence-agents-kubevirt-0:4.16.0-5.el10_0.9.s390x",
"product": {
"name": "fence-agents-kubevirt-0:4.16.0-5.el10_0.9.s390x",
"product_id": "fence-agents-kubevirt-0:4.16.0-5.el10_0.9.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-kubevirt@4.16.0-5.el10_0.9?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "fence-agents-redfish-0:4.16.0-5.el10_0.9.s390x",
"product": {
"name": "fence-agents-redfish-0:4.16.0-5.el10_0.9.s390x",
"product_id": "fence-agents-redfish-0:4.16.0-5.el10_0.9.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-redfish@4.16.0-5.el10_0.9?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "fence-agents-zvm-0:4.16.0-5.el10_0.9.s390x",
"product": {
"name": "fence-agents-zvm-0:4.16.0-5.el10_0.9.s390x",
"product_id": "fence-agents-zvm-0:4.16.0-5.el10_0.9.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-zvm@4.16.0-5.el10_0.9?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "fence-agents-debugsource-0:4.16.0-5.el10_0.9.s390x",
"product": {
"name": "fence-agents-debugsource-0:4.16.0-5.el10_0.9.s390x",
"product_id": "fence-agents-debugsource-0:4.16.0-5.el10_0.9.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-debugsource@4.16.0-5.el10_0.9?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "fence-agents-common-debuginfo-0:4.16.0-5.el10_0.9.s390x",
"product": {
"name": "fence-agents-common-debuginfo-0:4.16.0-5.el10_0.9.s390x",
"product_id": "fence-agents-common-debuginfo-0:4.16.0-5.el10_0.9.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-common-debuginfo@4.16.0-5.el10_0.9?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "fence-agents-debuginfo-0:4.16.0-5.el10_0.9.s390x",
"product": {
"name": "fence-agents-debuginfo-0:4.16.0-5.el10_0.9.s390x",
"product_id": "fence-agents-debuginfo-0:4.16.0-5.el10_0.9.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-debuginfo@4.16.0-5.el10_0.9?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "fence-agents-kdump-debuginfo-0:4.16.0-5.el10_0.9.s390x",
"product": {
"name": "fence-agents-kdump-debuginfo-0:4.16.0-5.el10_0.9.s390x",
"product_id": "fence-agents-kdump-debuginfo-0:4.16.0-5.el10_0.9.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-kdump-debuginfo@4.16.0-5.el10_0.9?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "fence-agents-amt-ws-0:4.16.0-5.el10_0.9.noarch",
"product": {
"name": "fence-agents-amt-ws-0:4.16.0-5.el10_0.9.noarch",
"product_id": "fence-agents-amt-ws-0:4.16.0-5.el10_0.9.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-amt-ws@4.16.0-5.el10_0.9?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-apc-0:4.16.0-5.el10_0.9.noarch",
"product": {
"name": "fence-agents-apc-0:4.16.0-5.el10_0.9.noarch",
"product_id": "fence-agents-apc-0:4.16.0-5.el10_0.9.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-apc@4.16.0-5.el10_0.9?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-apc-snmp-0:4.16.0-5.el10_0.9.noarch",
"product": {
"name": "fence-agents-apc-snmp-0:4.16.0-5.el10_0.9.noarch",
"product_id": "fence-agents-apc-snmp-0:4.16.0-5.el10_0.9.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-apc-snmp@4.16.0-5.el10_0.9?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-bladecenter-0:4.16.0-5.el10_0.9.noarch",
"product": {
"name": "fence-agents-bladecenter-0:4.16.0-5.el10_0.9.noarch",
"product_id": "fence-agents-bladecenter-0:4.16.0-5.el10_0.9.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-bladecenter@4.16.0-5.el10_0.9?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-brocade-0:4.16.0-5.el10_0.9.noarch",
"product": {
"name": "fence-agents-brocade-0:4.16.0-5.el10_0.9.noarch",
"product_id": "fence-agents-brocade-0:4.16.0-5.el10_0.9.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-brocade@4.16.0-5.el10_0.9?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-cisco-mds-0:4.16.0-5.el10_0.9.noarch",
"product": {
"name": "fence-agents-cisco-mds-0:4.16.0-5.el10_0.9.noarch",
"product_id": "fence-agents-cisco-mds-0:4.16.0-5.el10_0.9.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-cisco-mds@4.16.0-5.el10_0.9?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-cisco-ucs-0:4.16.0-5.el10_0.9.noarch",
"product": {
"name": "fence-agents-cisco-ucs-0:4.16.0-5.el10_0.9.noarch",
"product_id": "fence-agents-cisco-ucs-0:4.16.0-5.el10_0.9.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-cisco-ucs@4.16.0-5.el10_0.9?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-drac5-0:4.16.0-5.el10_0.9.noarch",
"product": {
"name": "fence-agents-drac5-0:4.16.0-5.el10_0.9.noarch",
"product_id": "fence-agents-drac5-0:4.16.0-5.el10_0.9.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-drac5@4.16.0-5.el10_0.9?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-eaton-snmp-0:4.16.0-5.el10_0.9.noarch",
"product": {
"name": "fence-agents-eaton-snmp-0:4.16.0-5.el10_0.9.noarch",
"product_id": "fence-agents-eaton-snmp-0:4.16.0-5.el10_0.9.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-eaton-snmp@4.16.0-5.el10_0.9?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-emerson-0:4.16.0-5.el10_0.9.noarch",
"product": {
"name": "fence-agents-emerson-0:4.16.0-5.el10_0.9.noarch",
"product_id": "fence-agents-emerson-0:4.16.0-5.el10_0.9.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-emerson@4.16.0-5.el10_0.9?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-eps-0:4.16.0-5.el10_0.9.noarch",
"product": {
"name": "fence-agents-eps-0:4.16.0-5.el10_0.9.noarch",
"product_id": "fence-agents-eps-0:4.16.0-5.el10_0.9.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-eps@4.16.0-5.el10_0.9?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-heuristics-ping-0:4.16.0-5.el10_0.9.noarch",
"product": {
"name": "fence-agents-heuristics-ping-0:4.16.0-5.el10_0.9.noarch",
"product_id": "fence-agents-heuristics-ping-0:4.16.0-5.el10_0.9.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-heuristics-ping@4.16.0-5.el10_0.9?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-hpblade-0:4.16.0-5.el10_0.9.noarch",
"product": {
"name": "fence-agents-hpblade-0:4.16.0-5.el10_0.9.noarch",
"product_id": "fence-agents-hpblade-0:4.16.0-5.el10_0.9.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-hpblade@4.16.0-5.el10_0.9?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-ibm-powervs-0:4.16.0-5.el10_0.9.noarch",
"product": {
"name": "fence-agents-ibm-powervs-0:4.16.0-5.el10_0.9.noarch",
"product_id": "fence-agents-ibm-powervs-0:4.16.0-5.el10_0.9.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-ibm-powervs@4.16.0-5.el10_0.9?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-ibm-vpc-0:4.16.0-5.el10_0.9.noarch",
"product": {
"name": "fence-agents-ibm-vpc-0:4.16.0-5.el10_0.9.noarch",
"product_id": "fence-agents-ibm-vpc-0:4.16.0-5.el10_0.9.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-ibm-vpc@4.16.0-5.el10_0.9?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-ibmblade-0:4.16.0-5.el10_0.9.noarch",
"product": {
"name": "fence-agents-ibmblade-0:4.16.0-5.el10_0.9.noarch",
"product_id": "fence-agents-ibmblade-0:4.16.0-5.el10_0.9.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-ibmblade@4.16.0-5.el10_0.9?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-ifmib-0:4.16.0-5.el10_0.9.noarch",
"product": {
"name": "fence-agents-ifmib-0:4.16.0-5.el10_0.9.noarch",
"product_id": "fence-agents-ifmib-0:4.16.0-5.el10_0.9.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-ifmib@4.16.0-5.el10_0.9?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-ilo-moonshot-0:4.16.0-5.el10_0.9.noarch",
"product": {
"name": "fence-agents-ilo-moonshot-0:4.16.0-5.el10_0.9.noarch",
"product_id": "fence-agents-ilo-moonshot-0:4.16.0-5.el10_0.9.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-ilo-moonshot@4.16.0-5.el10_0.9?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-ilo-mp-0:4.16.0-5.el10_0.9.noarch",
"product": {
"name": "fence-agents-ilo-mp-0:4.16.0-5.el10_0.9.noarch",
"product_id": "fence-agents-ilo-mp-0:4.16.0-5.el10_0.9.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-ilo-mp@4.16.0-5.el10_0.9?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-ilo-ssh-0:4.16.0-5.el10_0.9.noarch",
"product": {
"name": "fence-agents-ilo-ssh-0:4.16.0-5.el10_0.9.noarch",
"product_id": "fence-agents-ilo-ssh-0:4.16.0-5.el10_0.9.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-ilo-ssh@4.16.0-5.el10_0.9?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-ilo2-0:4.16.0-5.el10_0.9.noarch",
"product": {
"name": "fence-agents-ilo2-0:4.16.0-5.el10_0.9.noarch",
"product_id": "fence-agents-ilo2-0:4.16.0-5.el10_0.9.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-ilo2@4.16.0-5.el10_0.9?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-intelmodular-0:4.16.0-5.el10_0.9.noarch",
"product": {
"name": "fence-agents-intelmodular-0:4.16.0-5.el10_0.9.noarch",
"product_id": "fence-agents-intelmodular-0:4.16.0-5.el10_0.9.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-intelmodular@4.16.0-5.el10_0.9?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-ipdu-0:4.16.0-5.el10_0.9.noarch",
"product": {
"name": "fence-agents-ipdu-0:4.16.0-5.el10_0.9.noarch",
"product_id": "fence-agents-ipdu-0:4.16.0-5.el10_0.9.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-ipdu@4.16.0-5.el10_0.9?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-ipmilan-0:4.16.0-5.el10_0.9.noarch",
"product": {
"name": "fence-agents-ipmilan-0:4.16.0-5.el10_0.9.noarch",
"product_id": "fence-agents-ipmilan-0:4.16.0-5.el10_0.9.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-ipmilan@4.16.0-5.el10_0.9?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-lpar-0:4.16.0-5.el10_0.9.noarch",
"product": {
"name": "fence-agents-lpar-0:4.16.0-5.el10_0.9.noarch",
"product_id": "fence-agents-lpar-0:4.16.0-5.el10_0.9.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-lpar@4.16.0-5.el10_0.9?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-mpath-0:4.16.0-5.el10_0.9.noarch",
"product": {
"name": "fence-agents-mpath-0:4.16.0-5.el10_0.9.noarch",
"product_id": "fence-agents-mpath-0:4.16.0-5.el10_0.9.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-mpath@4.16.0-5.el10_0.9?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-nutanix-ahv-0:4.16.0-5.el10_0.9.noarch",
"product": {
"name": "fence-agents-nutanix-ahv-0:4.16.0-5.el10_0.9.noarch",
"product_id": "fence-agents-nutanix-ahv-0:4.16.0-5.el10_0.9.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-nutanix-ahv@4.16.0-5.el10_0.9?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-rhevm-0:4.16.0-5.el10_0.9.noarch",
"product": {
"name": "fence-agents-rhevm-0:4.16.0-5.el10_0.9.noarch",
"product_id": "fence-agents-rhevm-0:4.16.0-5.el10_0.9.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-rhevm@4.16.0-5.el10_0.9?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-rsa-0:4.16.0-5.el10_0.9.noarch",
"product": {
"name": "fence-agents-rsa-0:4.16.0-5.el10_0.9.noarch",
"product_id": "fence-agents-rsa-0:4.16.0-5.el10_0.9.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-rsa@4.16.0-5.el10_0.9?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-rsb-0:4.16.0-5.el10_0.9.noarch",
"product": {
"name": "fence-agents-rsb-0:4.16.0-5.el10_0.9.noarch",
"product_id": "fence-agents-rsb-0:4.16.0-5.el10_0.9.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-rsb@4.16.0-5.el10_0.9?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-sbd-0:4.16.0-5.el10_0.9.noarch",
"product": {
"name": "fence-agents-sbd-0:4.16.0-5.el10_0.9.noarch",
"product_id": "fence-agents-sbd-0:4.16.0-5.el10_0.9.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-sbd@4.16.0-5.el10_0.9?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-scsi-0:4.16.0-5.el10_0.9.noarch",
"product": {
"name": "fence-agents-scsi-0:4.16.0-5.el10_0.9.noarch",
"product_id": "fence-agents-scsi-0:4.16.0-5.el10_0.9.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-scsi@4.16.0-5.el10_0.9?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-virsh-0:4.16.0-5.el10_0.9.noarch",
"product": {
"name": "fence-agents-virsh-0:4.16.0-5.el10_0.9.noarch",
"product_id": "fence-agents-virsh-0:4.16.0-5.el10_0.9.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-virsh@4.16.0-5.el10_0.9?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-vmware-rest-0:4.16.0-5.el10_0.9.noarch",
"product": {
"name": "fence-agents-vmware-rest-0:4.16.0-5.el10_0.9.noarch",
"product_id": "fence-agents-vmware-rest-0:4.16.0-5.el10_0.9.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-vmware-rest@4.16.0-5.el10_0.9?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-vmware-soap-0:4.16.0-5.el10_0.9.noarch",
"product": {
"name": "fence-agents-vmware-soap-0:4.16.0-5.el10_0.9.noarch",
"product_id": "fence-agents-vmware-soap-0:4.16.0-5.el10_0.9.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-vmware-soap@4.16.0-5.el10_0.9?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-wti-0:4.16.0-5.el10_0.9.noarch",
"product": {
"name": "fence-agents-wti-0:4.16.0-5.el10_0.9.noarch",
"product_id": "fence-agents-wti-0:4.16.0-5.el10_0.9.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-wti@4.16.0-5.el10_0.9?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-0:4.16.0-5.el10_0.9.src as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:fence-agents-0:4.16.0-5.el10_0.9.src"
},
"product_reference": "fence-agents-0:4.16.0-5.el10_0.9.src",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-aliyun-0:4.16.0-5.el10_0.9.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:fence-agents-aliyun-0:4.16.0-5.el10_0.9.x86_64"
},
"product_reference": "fence-agents-aliyun-0:4.16.0-5.el10_0.9.x86_64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-all-0:4.16.0-5.el10_0.9.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:fence-agents-all-0:4.16.0-5.el10_0.9.aarch64"
},
"product_reference": "fence-agents-all-0:4.16.0-5.el10_0.9.aarch64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-all-0:4.16.0-5.el10_0.9.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:fence-agents-all-0:4.16.0-5.el10_0.9.ppc64le"
},
"product_reference": "fence-agents-all-0:4.16.0-5.el10_0.9.ppc64le",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-all-0:4.16.0-5.el10_0.9.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:fence-agents-all-0:4.16.0-5.el10_0.9.s390x"
},
"product_reference": "fence-agents-all-0:4.16.0-5.el10_0.9.s390x",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-all-0:4.16.0-5.el10_0.9.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:fence-agents-all-0:4.16.0-5.el10_0.9.x86_64"
},
"product_reference": "fence-agents-all-0:4.16.0-5.el10_0.9.x86_64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-amt-ws-0:4.16.0-5.el10_0.9.noarch as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:fence-agents-amt-ws-0:4.16.0-5.el10_0.9.noarch"
},
"product_reference": "fence-agents-amt-ws-0:4.16.0-5.el10_0.9.noarch",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-apc-0:4.16.0-5.el10_0.9.noarch as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:fence-agents-apc-0:4.16.0-5.el10_0.9.noarch"
},
"product_reference": "fence-agents-apc-0:4.16.0-5.el10_0.9.noarch",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-apc-snmp-0:4.16.0-5.el10_0.9.noarch as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:fence-agents-apc-snmp-0:4.16.0-5.el10_0.9.noarch"
},
"product_reference": "fence-agents-apc-snmp-0:4.16.0-5.el10_0.9.noarch",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-aws-0:4.16.0-5.el10_0.9.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:fence-agents-aws-0:4.16.0-5.el10_0.9.x86_64"
},
"product_reference": "fence-agents-aws-0:4.16.0-5.el10_0.9.x86_64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-azure-arm-0:4.16.0-5.el10_0.9.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:fence-agents-azure-arm-0:4.16.0-5.el10_0.9.x86_64"
},
"product_reference": "fence-agents-azure-arm-0:4.16.0-5.el10_0.9.x86_64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-bladecenter-0:4.16.0-5.el10_0.9.noarch as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:fence-agents-bladecenter-0:4.16.0-5.el10_0.9.noarch"
},
"product_reference": "fence-agents-bladecenter-0:4.16.0-5.el10_0.9.noarch",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-brocade-0:4.16.0-5.el10_0.9.noarch as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:fence-agents-brocade-0:4.16.0-5.el10_0.9.noarch"
},
"product_reference": "fence-agents-brocade-0:4.16.0-5.el10_0.9.noarch",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-cisco-mds-0:4.16.0-5.el10_0.9.noarch as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:fence-agents-cisco-mds-0:4.16.0-5.el10_0.9.noarch"
},
"product_reference": "fence-agents-cisco-mds-0:4.16.0-5.el10_0.9.noarch",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-cisco-ucs-0:4.16.0-5.el10_0.9.noarch as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:fence-agents-cisco-ucs-0:4.16.0-5.el10_0.9.noarch"
},
"product_reference": "fence-agents-cisco-ucs-0:4.16.0-5.el10_0.9.noarch",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-common-0:4.16.0-5.el10_0.9.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:fence-agents-common-0:4.16.0-5.el10_0.9.aarch64"
},
"product_reference": "fence-agents-common-0:4.16.0-5.el10_0.9.aarch64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-common-0:4.16.0-5.el10_0.9.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:fence-agents-common-0:4.16.0-5.el10_0.9.ppc64le"
},
"product_reference": "fence-agents-common-0:4.16.0-5.el10_0.9.ppc64le",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-common-0:4.16.0-5.el10_0.9.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:fence-agents-common-0:4.16.0-5.el10_0.9.s390x"
},
"product_reference": "fence-agents-common-0:4.16.0-5.el10_0.9.s390x",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-common-0:4.16.0-5.el10_0.9.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:fence-agents-common-0:4.16.0-5.el10_0.9.x86_64"
},
"product_reference": "fence-agents-common-0:4.16.0-5.el10_0.9.x86_64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-common-debuginfo-0:4.16.0-5.el10_0.9.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:fence-agents-common-debuginfo-0:4.16.0-5.el10_0.9.aarch64"
},
"product_reference": "fence-agents-common-debuginfo-0:4.16.0-5.el10_0.9.aarch64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-common-debuginfo-0:4.16.0-5.el10_0.9.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:fence-agents-common-debuginfo-0:4.16.0-5.el10_0.9.ppc64le"
},
"product_reference": "fence-agents-common-debuginfo-0:4.16.0-5.el10_0.9.ppc64le",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-common-debuginfo-0:4.16.0-5.el10_0.9.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:fence-agents-common-debuginfo-0:4.16.0-5.el10_0.9.s390x"
},
"product_reference": "fence-agents-common-debuginfo-0:4.16.0-5.el10_0.9.s390x",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-common-debuginfo-0:4.16.0-5.el10_0.9.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:fence-agents-common-debuginfo-0:4.16.0-5.el10_0.9.x86_64"
},
"product_reference": "fence-agents-common-debuginfo-0:4.16.0-5.el10_0.9.x86_64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-debuginfo-0:4.16.0-5.el10_0.9.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:fence-agents-debuginfo-0:4.16.0-5.el10_0.9.aarch64"
},
"product_reference": "fence-agents-debuginfo-0:4.16.0-5.el10_0.9.aarch64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-debuginfo-0:4.16.0-5.el10_0.9.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:fence-agents-debuginfo-0:4.16.0-5.el10_0.9.ppc64le"
},
"product_reference": "fence-agents-debuginfo-0:4.16.0-5.el10_0.9.ppc64le",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-debuginfo-0:4.16.0-5.el10_0.9.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:fence-agents-debuginfo-0:4.16.0-5.el10_0.9.s390x"
},
"product_reference": "fence-agents-debuginfo-0:4.16.0-5.el10_0.9.s390x",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-debuginfo-0:4.16.0-5.el10_0.9.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:fence-agents-debuginfo-0:4.16.0-5.el10_0.9.x86_64"
},
"product_reference": "fence-agents-debuginfo-0:4.16.0-5.el10_0.9.x86_64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-debugsource-0:4.16.0-5.el10_0.9.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:fence-agents-debugsource-0:4.16.0-5.el10_0.9.aarch64"
},
"product_reference": "fence-agents-debugsource-0:4.16.0-5.el10_0.9.aarch64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-debugsource-0:4.16.0-5.el10_0.9.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:fence-agents-debugsource-0:4.16.0-5.el10_0.9.ppc64le"
},
"product_reference": "fence-agents-debugsource-0:4.16.0-5.el10_0.9.ppc64le",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-debugsource-0:4.16.0-5.el10_0.9.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:fence-agents-debugsource-0:4.16.0-5.el10_0.9.s390x"
},
"product_reference": "fence-agents-debugsource-0:4.16.0-5.el10_0.9.s390x",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-debugsource-0:4.16.0-5.el10_0.9.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:fence-agents-debugsource-0:4.16.0-5.el10_0.9.x86_64"
},
"product_reference": "fence-agents-debugsource-0:4.16.0-5.el10_0.9.x86_64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-drac5-0:4.16.0-5.el10_0.9.noarch as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:fence-agents-drac5-0:4.16.0-5.el10_0.9.noarch"
},
"product_reference": "fence-agents-drac5-0:4.16.0-5.el10_0.9.noarch",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-eaton-snmp-0:4.16.0-5.el10_0.9.noarch as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:fence-agents-eaton-snmp-0:4.16.0-5.el10_0.9.noarch"
},
"product_reference": "fence-agents-eaton-snmp-0:4.16.0-5.el10_0.9.noarch",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-emerson-0:4.16.0-5.el10_0.9.noarch as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:fence-agents-emerson-0:4.16.0-5.el10_0.9.noarch"
},
"product_reference": "fence-agents-emerson-0:4.16.0-5.el10_0.9.noarch",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-eps-0:4.16.0-5.el10_0.9.noarch as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:fence-agents-eps-0:4.16.0-5.el10_0.9.noarch"
},
"product_reference": "fence-agents-eps-0:4.16.0-5.el10_0.9.noarch",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-gce-0:4.16.0-5.el10_0.9.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:fence-agents-gce-0:4.16.0-5.el10_0.9.x86_64"
},
"product_reference": "fence-agents-gce-0:4.16.0-5.el10_0.9.x86_64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-heuristics-ping-0:4.16.0-5.el10_0.9.noarch as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:fence-agents-heuristics-ping-0:4.16.0-5.el10_0.9.noarch"
},
"product_reference": "fence-agents-heuristics-ping-0:4.16.0-5.el10_0.9.noarch",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-hpblade-0:4.16.0-5.el10_0.9.noarch as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:fence-agents-hpblade-0:4.16.0-5.el10_0.9.noarch"
},
"product_reference": "fence-agents-hpblade-0:4.16.0-5.el10_0.9.noarch",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-ibm-powervs-0:4.16.0-5.el10_0.9.noarch as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:fence-agents-ibm-powervs-0:4.16.0-5.el10_0.9.noarch"
},
"product_reference": "fence-agents-ibm-powervs-0:4.16.0-5.el10_0.9.noarch",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-ibm-vpc-0:4.16.0-5.el10_0.9.noarch as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:fence-agents-ibm-vpc-0:4.16.0-5.el10_0.9.noarch"
},
"product_reference": "fence-agents-ibm-vpc-0:4.16.0-5.el10_0.9.noarch",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-ibmblade-0:4.16.0-5.el10_0.9.noarch as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:fence-agents-ibmblade-0:4.16.0-5.el10_0.9.noarch"
},
"product_reference": "fence-agents-ibmblade-0:4.16.0-5.el10_0.9.noarch",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-ifmib-0:4.16.0-5.el10_0.9.noarch as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:fence-agents-ifmib-0:4.16.0-5.el10_0.9.noarch"
},
"product_reference": "fence-agents-ifmib-0:4.16.0-5.el10_0.9.noarch",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-ilo-moonshot-0:4.16.0-5.el10_0.9.noarch as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:fence-agents-ilo-moonshot-0:4.16.0-5.el10_0.9.noarch"
},
"product_reference": "fence-agents-ilo-moonshot-0:4.16.0-5.el10_0.9.noarch",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-ilo-mp-0:4.16.0-5.el10_0.9.noarch as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:fence-agents-ilo-mp-0:4.16.0-5.el10_0.9.noarch"
},
"product_reference": "fence-agents-ilo-mp-0:4.16.0-5.el10_0.9.noarch",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-ilo-ssh-0:4.16.0-5.el10_0.9.noarch as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:fence-agents-ilo-ssh-0:4.16.0-5.el10_0.9.noarch"
},
"product_reference": "fence-agents-ilo-ssh-0:4.16.0-5.el10_0.9.noarch",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-ilo2-0:4.16.0-5.el10_0.9.noarch as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:fence-agents-ilo2-0:4.16.0-5.el10_0.9.noarch"
},
"product_reference": "fence-agents-ilo2-0:4.16.0-5.el10_0.9.noarch",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-intelmodular-0:4.16.0-5.el10_0.9.noarch as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:fence-agents-intelmodular-0:4.16.0-5.el10_0.9.noarch"
},
"product_reference": "fence-agents-intelmodular-0:4.16.0-5.el10_0.9.noarch",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-ipdu-0:4.16.0-5.el10_0.9.noarch as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:fence-agents-ipdu-0:4.16.0-5.el10_0.9.noarch"
},
"product_reference": "fence-agents-ipdu-0:4.16.0-5.el10_0.9.noarch",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-ipmilan-0:4.16.0-5.el10_0.9.noarch as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:fence-agents-ipmilan-0:4.16.0-5.el10_0.9.noarch"
},
"product_reference": "fence-agents-ipmilan-0:4.16.0-5.el10_0.9.noarch",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-kdump-0:4.16.0-5.el10_0.9.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:fence-agents-kdump-0:4.16.0-5.el10_0.9.aarch64"
},
"product_reference": "fence-agents-kdump-0:4.16.0-5.el10_0.9.aarch64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-kdump-0:4.16.0-5.el10_0.9.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:fence-agents-kdump-0:4.16.0-5.el10_0.9.ppc64le"
},
"product_reference": "fence-agents-kdump-0:4.16.0-5.el10_0.9.ppc64le",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-kdump-0:4.16.0-5.el10_0.9.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:fence-agents-kdump-0:4.16.0-5.el10_0.9.s390x"
},
"product_reference": "fence-agents-kdump-0:4.16.0-5.el10_0.9.s390x",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-kdump-0:4.16.0-5.el10_0.9.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:fence-agents-kdump-0:4.16.0-5.el10_0.9.x86_64"
},
"product_reference": "fence-agents-kdump-0:4.16.0-5.el10_0.9.x86_64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-kdump-debuginfo-0:4.16.0-5.el10_0.9.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:fence-agents-kdump-debuginfo-0:4.16.0-5.el10_0.9.aarch64"
},
"product_reference": "fence-agents-kdump-debuginfo-0:4.16.0-5.el10_0.9.aarch64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-kdump-debuginfo-0:4.16.0-5.el10_0.9.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:fence-agents-kdump-debuginfo-0:4.16.0-5.el10_0.9.ppc64le"
},
"product_reference": "fence-agents-kdump-debuginfo-0:4.16.0-5.el10_0.9.ppc64le",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-kdump-debuginfo-0:4.16.0-5.el10_0.9.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:fence-agents-kdump-debuginfo-0:4.16.0-5.el10_0.9.s390x"
},
"product_reference": "fence-agents-kdump-debuginfo-0:4.16.0-5.el10_0.9.s390x",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-kdump-debuginfo-0:4.16.0-5.el10_0.9.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:fence-agents-kdump-debuginfo-0:4.16.0-5.el10_0.9.x86_64"
},
"product_reference": "fence-agents-kdump-debuginfo-0:4.16.0-5.el10_0.9.x86_64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-kubevirt-0:4.16.0-5.el10_0.9.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:fence-agents-kubevirt-0:4.16.0-5.el10_0.9.aarch64"
},
"product_reference": "fence-agents-kubevirt-0:4.16.0-5.el10_0.9.aarch64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-kubevirt-0:4.16.0-5.el10_0.9.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:fence-agents-kubevirt-0:4.16.0-5.el10_0.9.ppc64le"
},
"product_reference": "fence-agents-kubevirt-0:4.16.0-5.el10_0.9.ppc64le",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-kubevirt-0:4.16.0-5.el10_0.9.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:fence-agents-kubevirt-0:4.16.0-5.el10_0.9.s390x"
},
"product_reference": "fence-agents-kubevirt-0:4.16.0-5.el10_0.9.s390x",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-kubevirt-0:4.16.0-5.el10_0.9.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:fence-agents-kubevirt-0:4.16.0-5.el10_0.9.x86_64"
},
"product_reference": "fence-agents-kubevirt-0:4.16.0-5.el10_0.9.x86_64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-lpar-0:4.16.0-5.el10_0.9.noarch as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:fence-agents-lpar-0:4.16.0-5.el10_0.9.noarch"
},
"product_reference": "fence-agents-lpar-0:4.16.0-5.el10_0.9.noarch",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-mpath-0:4.16.0-5.el10_0.9.noarch as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:fence-agents-mpath-0:4.16.0-5.el10_0.9.noarch"
},
"product_reference": "fence-agents-mpath-0:4.16.0-5.el10_0.9.noarch",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-nutanix-ahv-0:4.16.0-5.el10_0.9.noarch as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:fence-agents-nutanix-ahv-0:4.16.0-5.el10_0.9.noarch"
},
"product_reference": "fence-agents-nutanix-ahv-0:4.16.0-5.el10_0.9.noarch",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-openstack-0:4.16.0-5.el10_0.9.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:fence-agents-openstack-0:4.16.0-5.el10_0.9.ppc64le"
},
"product_reference": "fence-agents-openstack-0:4.16.0-5.el10_0.9.ppc64le",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-openstack-0:4.16.0-5.el10_0.9.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:fence-agents-openstack-0:4.16.0-5.el10_0.9.x86_64"
},
"product_reference": "fence-agents-openstack-0:4.16.0-5.el10_0.9.x86_64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-redfish-0:4.16.0-5.el10_0.9.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:fence-agents-redfish-0:4.16.0-5.el10_0.9.aarch64"
},
"product_reference": "fence-agents-redfish-0:4.16.0-5.el10_0.9.aarch64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-redfish-0:4.16.0-5.el10_0.9.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:fence-agents-redfish-0:4.16.0-5.el10_0.9.ppc64le"
},
"product_reference": "fence-agents-redfish-0:4.16.0-5.el10_0.9.ppc64le",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-redfish-0:4.16.0-5.el10_0.9.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:fence-agents-redfish-0:4.16.0-5.el10_0.9.s390x"
},
"product_reference": "fence-agents-redfish-0:4.16.0-5.el10_0.9.s390x",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-redfish-0:4.16.0-5.el10_0.9.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:fence-agents-redfish-0:4.16.0-5.el10_0.9.x86_64"
},
"product_reference": "fence-agents-redfish-0:4.16.0-5.el10_0.9.x86_64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-rhevm-0:4.16.0-5.el10_0.9.noarch as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:fence-agents-rhevm-0:4.16.0-5.el10_0.9.noarch"
},
"product_reference": "fence-agents-rhevm-0:4.16.0-5.el10_0.9.noarch",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-rsa-0:4.16.0-5.el10_0.9.noarch as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:fence-agents-rsa-0:4.16.0-5.el10_0.9.noarch"
},
"product_reference": "fence-agents-rsa-0:4.16.0-5.el10_0.9.noarch",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-rsb-0:4.16.0-5.el10_0.9.noarch as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:fence-agents-rsb-0:4.16.0-5.el10_0.9.noarch"
},
"product_reference": "fence-agents-rsb-0:4.16.0-5.el10_0.9.noarch",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-sbd-0:4.16.0-5.el10_0.9.noarch as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:fence-agents-sbd-0:4.16.0-5.el10_0.9.noarch"
},
"product_reference": "fence-agents-sbd-0:4.16.0-5.el10_0.9.noarch",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-scsi-0:4.16.0-5.el10_0.9.noarch as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:fence-agents-scsi-0:4.16.0-5.el10_0.9.noarch"
},
"product_reference": "fence-agents-scsi-0:4.16.0-5.el10_0.9.noarch",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-virsh-0:4.16.0-5.el10_0.9.noarch as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:fence-agents-virsh-0:4.16.0-5.el10_0.9.noarch"
},
"product_reference": "fence-agents-virsh-0:4.16.0-5.el10_0.9.noarch",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-vmware-rest-0:4.16.0-5.el10_0.9.noarch as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:fence-agents-vmware-rest-0:4.16.0-5.el10_0.9.noarch"
},
"product_reference": "fence-agents-vmware-rest-0:4.16.0-5.el10_0.9.noarch",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-vmware-soap-0:4.16.0-5.el10_0.9.noarch as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:fence-agents-vmware-soap-0:4.16.0-5.el10_0.9.noarch"
},
"product_reference": "fence-agents-vmware-soap-0:4.16.0-5.el10_0.9.noarch",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-wti-0:4.16.0-5.el10_0.9.noarch as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:fence-agents-wti-0:4.16.0-5.el10_0.9.noarch"
},
"product_reference": "fence-agents-wti-0:4.16.0-5.el10_0.9.noarch",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-zvm-0:4.16.0-5.el10_0.9.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:fence-agents-zvm-0:4.16.0-5.el10_0.9.s390x"
},
"product_reference": "fence-agents-zvm-0:4.16.0-5.el10_0.9.s390x",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-virt-0:4.16.0-5.el10_0.9.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:fence-virt-0:4.16.0-5.el10_0.9.x86_64"
},
"product_reference": "fence-virt-0:4.16.0-5.el10_0.9.x86_64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-virt-debuginfo-0:4.16.0-5.el10_0.9.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:fence-virt-debuginfo-0:4.16.0-5.el10_0.9.x86_64"
},
"product_reference": "fence-virt-debuginfo-0:4.16.0-5.el10_0.9.x86_64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-virtd-0:4.16.0-5.el10_0.9.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:fence-virtd-0:4.16.0-5.el10_0.9.x86_64"
},
"product_reference": "fence-virtd-0:4.16.0-5.el10_0.9.x86_64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-virtd-cpg-0:4.16.0-5.el10_0.9.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:fence-virtd-cpg-0:4.16.0-5.el10_0.9.x86_64"
},
"product_reference": "fence-virtd-cpg-0:4.16.0-5.el10_0.9.x86_64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-virtd-cpg-debuginfo-0:4.16.0-5.el10_0.9.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:fence-virtd-cpg-debuginfo-0:4.16.0-5.el10_0.9.x86_64"
},
"product_reference": "fence-virtd-cpg-debuginfo-0:4.16.0-5.el10_0.9.x86_64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-virtd-debuginfo-0:4.16.0-5.el10_0.9.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:fence-virtd-debuginfo-0:4.16.0-5.el10_0.9.x86_64"
},
"product_reference": "fence-virtd-debuginfo-0:4.16.0-5.el10_0.9.x86_64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-virtd-libvirt-0:4.16.0-5.el10_0.9.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:fence-virtd-libvirt-0:4.16.0-5.el10_0.9.x86_64"
},
"product_reference": "fence-virtd-libvirt-0:4.16.0-5.el10_0.9.x86_64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-virtd-libvirt-debuginfo-0:4.16.0-5.el10_0.9.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:fence-virtd-libvirt-debuginfo-0:4.16.0-5.el10_0.9.x86_64"
},
"product_reference": "fence-virtd-libvirt-debuginfo-0:4.16.0-5.el10_0.9.x86_64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-virtd-multicast-0:4.16.0-5.el10_0.9.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:fence-virtd-multicast-0:4.16.0-5.el10_0.9.x86_64"
},
"product_reference": "fence-virtd-multicast-0:4.16.0-5.el10_0.9.x86_64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-virtd-multicast-debuginfo-0:4.16.0-5.el10_0.9.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:fence-virtd-multicast-debuginfo-0:4.16.0-5.el10_0.9.x86_64"
},
"product_reference": "fence-virtd-multicast-debuginfo-0:4.16.0-5.el10_0.9.x86_64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-virtd-serial-0:4.16.0-5.el10_0.9.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:fence-virtd-serial-0:4.16.0-5.el10_0.9.x86_64"
},
"product_reference": "fence-virtd-serial-0:4.16.0-5.el10_0.9.x86_64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-virtd-serial-debuginfo-0:4.16.0-5.el10_0.9.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:fence-virtd-serial-debuginfo-0:4.16.0-5.el10_0.9.x86_64"
},
"product_reference": "fence-virtd-serial-debuginfo-0:4.16.0-5.el10_0.9.x86_64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-virtd-tcp-0:4.16.0-5.el10_0.9.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:fence-virtd-tcp-0:4.16.0-5.el10_0.9.x86_64"
},
"product_reference": "fence-virtd-tcp-0:4.16.0-5.el10_0.9.x86_64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-virtd-tcp-debuginfo-0:4.16.0-5.el10_0.9.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:fence-virtd-tcp-debuginfo-0:4.16.0-5.el10_0.9.x86_64"
},
"product_reference": "fence-virtd-tcp-debuginfo-0:4.16.0-5.el10_0.9.x86_64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ha-cloud-support-0:4.16.0-5.el10_0.9.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:ha-cloud-support-0:4.16.0-5.el10_0.9.x86_64"
},
"product_reference": "ha-cloud-support-0:4.16.0-5.el10_0.9.x86_64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ha-cloud-support-debuginfo-0:4.16.0-5.el10_0.9.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"product_id": "AppStream-10.0.Z.E2S:ha-cloud-support-debuginfo-0:4.16.0-5.el10_0.9.x86_64"
},
"product_reference": "ha-cloud-support-debuginfo-0:4.16.0-5.el10_0.9.x86_64",
"relates_to_product_reference": "AppStream-10.0.Z.E2S"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-30922",
"cwe": {
"id": "CWE-835",
"name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
},
"discovery_date": "2026-03-18T04:02:45.401296+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2448553"
}
],
"notes": [
{
"category": "description",
"text": "An unbounded recursion flaw has been discovered in the pypi pyasn1 library. This uncontrolled recursion occurs when decoding ASN.1 data with deeply nested structures. An attacker can supply a crafted payload containing nested SEQUENCE (0x30) or SET (0x31) tags with Indefinite Length (0x80) markers. This forces the decoder to recursively call itself until the Python interpreter crashes with a RecursionError or consumes all available memory (OOM), crashing the host application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "pyasn1: pyasn1 Vulnerable to Denial of Service via Unbounded Recursion",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.0.Z.E2S:fence-agents-0:4.16.0-5.el10_0.9.src",
"AppStream-10.0.Z.E2S:fence-agents-aliyun-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-agents-all-0:4.16.0-5.el10_0.9.aarch64",
"AppStream-10.0.Z.E2S:fence-agents-all-0:4.16.0-5.el10_0.9.ppc64le",
"AppStream-10.0.Z.E2S:fence-agents-all-0:4.16.0-5.el10_0.9.s390x",
"AppStream-10.0.Z.E2S:fence-agents-all-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-agents-amt-ws-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-apc-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-apc-snmp-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-aws-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-agents-azure-arm-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-agents-bladecenter-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-brocade-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-cisco-mds-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-cisco-ucs-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-common-0:4.16.0-5.el10_0.9.aarch64",
"AppStream-10.0.Z.E2S:fence-agents-common-0:4.16.0-5.el10_0.9.ppc64le",
"AppStream-10.0.Z.E2S:fence-agents-common-0:4.16.0-5.el10_0.9.s390x",
"AppStream-10.0.Z.E2S:fence-agents-common-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-agents-common-debuginfo-0:4.16.0-5.el10_0.9.aarch64",
"AppStream-10.0.Z.E2S:fence-agents-common-debuginfo-0:4.16.0-5.el10_0.9.ppc64le",
"AppStream-10.0.Z.E2S:fence-agents-common-debuginfo-0:4.16.0-5.el10_0.9.s390x",
"AppStream-10.0.Z.E2S:fence-agents-common-debuginfo-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-agents-debuginfo-0:4.16.0-5.el10_0.9.aarch64",
"AppStream-10.0.Z.E2S:fence-agents-debuginfo-0:4.16.0-5.el10_0.9.ppc64le",
"AppStream-10.0.Z.E2S:fence-agents-debuginfo-0:4.16.0-5.el10_0.9.s390x",
"AppStream-10.0.Z.E2S:fence-agents-debuginfo-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-agents-debugsource-0:4.16.0-5.el10_0.9.aarch64",
"AppStream-10.0.Z.E2S:fence-agents-debugsource-0:4.16.0-5.el10_0.9.ppc64le",
"AppStream-10.0.Z.E2S:fence-agents-debugsource-0:4.16.0-5.el10_0.9.s390x",
"AppStream-10.0.Z.E2S:fence-agents-debugsource-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-agents-drac5-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-eaton-snmp-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-emerson-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-eps-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-gce-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-agents-heuristics-ping-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-hpblade-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-ibm-powervs-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-ibm-vpc-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-ibmblade-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-ifmib-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-ilo-moonshot-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-ilo-mp-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-ilo-ssh-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-ilo2-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-intelmodular-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-ipdu-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-ipmilan-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-kdump-0:4.16.0-5.el10_0.9.aarch64",
"AppStream-10.0.Z.E2S:fence-agents-kdump-0:4.16.0-5.el10_0.9.ppc64le",
"AppStream-10.0.Z.E2S:fence-agents-kdump-0:4.16.0-5.el10_0.9.s390x",
"AppStream-10.0.Z.E2S:fence-agents-kdump-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-agents-kdump-debuginfo-0:4.16.0-5.el10_0.9.aarch64",
"AppStream-10.0.Z.E2S:fence-agents-kdump-debuginfo-0:4.16.0-5.el10_0.9.ppc64le",
"AppStream-10.0.Z.E2S:fence-agents-kdump-debuginfo-0:4.16.0-5.el10_0.9.s390x",
"AppStream-10.0.Z.E2S:fence-agents-kdump-debuginfo-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-agents-kubevirt-0:4.16.0-5.el10_0.9.aarch64",
"AppStream-10.0.Z.E2S:fence-agents-kubevirt-0:4.16.0-5.el10_0.9.ppc64le",
"AppStream-10.0.Z.E2S:fence-agents-kubevirt-0:4.16.0-5.el10_0.9.s390x",
"AppStream-10.0.Z.E2S:fence-agents-kubevirt-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-agents-lpar-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-mpath-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-nutanix-ahv-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-openstack-0:4.16.0-5.el10_0.9.ppc64le",
"AppStream-10.0.Z.E2S:fence-agents-openstack-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-agents-redfish-0:4.16.0-5.el10_0.9.aarch64",
"AppStream-10.0.Z.E2S:fence-agents-redfish-0:4.16.0-5.el10_0.9.ppc64le",
"AppStream-10.0.Z.E2S:fence-agents-redfish-0:4.16.0-5.el10_0.9.s390x",
"AppStream-10.0.Z.E2S:fence-agents-redfish-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-agents-rhevm-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-rsa-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-rsb-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-sbd-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-scsi-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-virsh-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-vmware-rest-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-vmware-soap-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-wti-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-zvm-0:4.16.0-5.el10_0.9.s390x",
"AppStream-10.0.Z.E2S:fence-virt-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-virt-debuginfo-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-virtd-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-virtd-cpg-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-virtd-cpg-debuginfo-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-virtd-debuginfo-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-virtd-libvirt-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-virtd-libvirt-debuginfo-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-virtd-multicast-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-virtd-multicast-debuginfo-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-virtd-serial-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-virtd-serial-debuginfo-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-virtd-tcp-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-virtd-tcp-debuginfo-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:ha-cloud-support-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:ha-cloud-support-debuginfo-0:4.16.0-5.el10_0.9.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-30922"
},
{
"category": "external",
"summary": "RHBZ#2448553",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2448553"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-30922",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-30922"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-30922",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-30922"
},
{
"category": "external",
"summary": "https://github.com/pyasn1/pyasn1/commit/25ad481c19fdb006e20485ef3fc2e5b3eff30ef0",
"url": "https://github.com/pyasn1/pyasn1/commit/25ad481c19fdb006e20485ef3fc2e5b3eff30ef0"
},
{
"category": "external",
"summary": "https://github.com/pyasn1/pyasn1/security/advisories/GHSA-jr27-m4p2-rc6r",
"url": "https://github.com/pyasn1/pyasn1/security/advisories/GHSA-jr27-m4p2-rc6r"
}
],
"release_date": "2026-03-18T02:29:45.857000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-13T15:29:42+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.0.Z.E2S:fence-agents-0:4.16.0-5.el10_0.9.src",
"AppStream-10.0.Z.E2S:fence-agents-aliyun-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-agents-all-0:4.16.0-5.el10_0.9.aarch64",
"AppStream-10.0.Z.E2S:fence-agents-all-0:4.16.0-5.el10_0.9.ppc64le",
"AppStream-10.0.Z.E2S:fence-agents-all-0:4.16.0-5.el10_0.9.s390x",
"AppStream-10.0.Z.E2S:fence-agents-all-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-agents-amt-ws-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-apc-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-apc-snmp-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-aws-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-agents-azure-arm-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-agents-bladecenter-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-brocade-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-cisco-mds-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-cisco-ucs-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-common-0:4.16.0-5.el10_0.9.aarch64",
"AppStream-10.0.Z.E2S:fence-agents-common-0:4.16.0-5.el10_0.9.ppc64le",
"AppStream-10.0.Z.E2S:fence-agents-common-0:4.16.0-5.el10_0.9.s390x",
"AppStream-10.0.Z.E2S:fence-agents-common-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-agents-common-debuginfo-0:4.16.0-5.el10_0.9.aarch64",
"AppStream-10.0.Z.E2S:fence-agents-common-debuginfo-0:4.16.0-5.el10_0.9.ppc64le",
"AppStream-10.0.Z.E2S:fence-agents-common-debuginfo-0:4.16.0-5.el10_0.9.s390x",
"AppStream-10.0.Z.E2S:fence-agents-common-debuginfo-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-agents-debuginfo-0:4.16.0-5.el10_0.9.aarch64",
"AppStream-10.0.Z.E2S:fence-agents-debuginfo-0:4.16.0-5.el10_0.9.ppc64le",
"AppStream-10.0.Z.E2S:fence-agents-debuginfo-0:4.16.0-5.el10_0.9.s390x",
"AppStream-10.0.Z.E2S:fence-agents-debuginfo-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-agents-debugsource-0:4.16.0-5.el10_0.9.aarch64",
"AppStream-10.0.Z.E2S:fence-agents-debugsource-0:4.16.0-5.el10_0.9.ppc64le",
"AppStream-10.0.Z.E2S:fence-agents-debugsource-0:4.16.0-5.el10_0.9.s390x",
"AppStream-10.0.Z.E2S:fence-agents-debugsource-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-agents-drac5-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-eaton-snmp-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-emerson-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-eps-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-gce-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-agents-heuristics-ping-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-hpblade-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-ibm-powervs-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-ibm-vpc-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-ibmblade-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-ifmib-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-ilo-moonshot-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-ilo-mp-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-ilo-ssh-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-ilo2-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-intelmodular-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-ipdu-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-ipmilan-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-kdump-0:4.16.0-5.el10_0.9.aarch64",
"AppStream-10.0.Z.E2S:fence-agents-kdump-0:4.16.0-5.el10_0.9.ppc64le",
"AppStream-10.0.Z.E2S:fence-agents-kdump-0:4.16.0-5.el10_0.9.s390x",
"AppStream-10.0.Z.E2S:fence-agents-kdump-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-agents-kdump-debuginfo-0:4.16.0-5.el10_0.9.aarch64",
"AppStream-10.0.Z.E2S:fence-agents-kdump-debuginfo-0:4.16.0-5.el10_0.9.ppc64le",
"AppStream-10.0.Z.E2S:fence-agents-kdump-debuginfo-0:4.16.0-5.el10_0.9.s390x",
"AppStream-10.0.Z.E2S:fence-agents-kdump-debuginfo-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-agents-kubevirt-0:4.16.0-5.el10_0.9.aarch64",
"AppStream-10.0.Z.E2S:fence-agents-kubevirt-0:4.16.0-5.el10_0.9.ppc64le",
"AppStream-10.0.Z.E2S:fence-agents-kubevirt-0:4.16.0-5.el10_0.9.s390x",
"AppStream-10.0.Z.E2S:fence-agents-kubevirt-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-agents-lpar-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-mpath-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-nutanix-ahv-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-openstack-0:4.16.0-5.el10_0.9.ppc64le",
"AppStream-10.0.Z.E2S:fence-agents-openstack-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-agents-redfish-0:4.16.0-5.el10_0.9.aarch64",
"AppStream-10.0.Z.E2S:fence-agents-redfish-0:4.16.0-5.el10_0.9.ppc64le",
"AppStream-10.0.Z.E2S:fence-agents-redfish-0:4.16.0-5.el10_0.9.s390x",
"AppStream-10.0.Z.E2S:fence-agents-redfish-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-agents-rhevm-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-rsa-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-rsb-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-sbd-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-scsi-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-virsh-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-vmware-rest-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-vmware-soap-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-wti-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-zvm-0:4.16.0-5.el10_0.9.s390x",
"AppStream-10.0.Z.E2S:fence-virt-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-virt-debuginfo-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-virtd-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-virtd-cpg-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-virtd-cpg-debuginfo-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-virtd-debuginfo-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-virtd-libvirt-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-virtd-libvirt-debuginfo-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-virtd-multicast-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-virtd-multicast-debuginfo-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-virtd-serial-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-virtd-serial-debuginfo-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-virtd-tcp-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-virtd-tcp-debuginfo-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:ha-cloud-support-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:ha-cloud-support-debuginfo-0:4.16.0-5.el10_0.9.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:17083"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"AppStream-10.0.Z.E2S:fence-agents-0:4.16.0-5.el10_0.9.src",
"AppStream-10.0.Z.E2S:fence-agents-aliyun-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-agents-all-0:4.16.0-5.el10_0.9.aarch64",
"AppStream-10.0.Z.E2S:fence-agents-all-0:4.16.0-5.el10_0.9.ppc64le",
"AppStream-10.0.Z.E2S:fence-agents-all-0:4.16.0-5.el10_0.9.s390x",
"AppStream-10.0.Z.E2S:fence-agents-all-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-agents-amt-ws-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-apc-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-apc-snmp-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-aws-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-agents-azure-arm-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-agents-bladecenter-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-brocade-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-cisco-mds-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-cisco-ucs-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-common-0:4.16.0-5.el10_0.9.aarch64",
"AppStream-10.0.Z.E2S:fence-agents-common-0:4.16.0-5.el10_0.9.ppc64le",
"AppStream-10.0.Z.E2S:fence-agents-common-0:4.16.0-5.el10_0.9.s390x",
"AppStream-10.0.Z.E2S:fence-agents-common-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-agents-common-debuginfo-0:4.16.0-5.el10_0.9.aarch64",
"AppStream-10.0.Z.E2S:fence-agents-common-debuginfo-0:4.16.0-5.el10_0.9.ppc64le",
"AppStream-10.0.Z.E2S:fence-agents-common-debuginfo-0:4.16.0-5.el10_0.9.s390x",
"AppStream-10.0.Z.E2S:fence-agents-common-debuginfo-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-agents-debuginfo-0:4.16.0-5.el10_0.9.aarch64",
"AppStream-10.0.Z.E2S:fence-agents-debuginfo-0:4.16.0-5.el10_0.9.ppc64le",
"AppStream-10.0.Z.E2S:fence-agents-debuginfo-0:4.16.0-5.el10_0.9.s390x",
"AppStream-10.0.Z.E2S:fence-agents-debuginfo-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-agents-debugsource-0:4.16.0-5.el10_0.9.aarch64",
"AppStream-10.0.Z.E2S:fence-agents-debugsource-0:4.16.0-5.el10_0.9.ppc64le",
"AppStream-10.0.Z.E2S:fence-agents-debugsource-0:4.16.0-5.el10_0.9.s390x",
"AppStream-10.0.Z.E2S:fence-agents-debugsource-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-agents-drac5-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-eaton-snmp-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-emerson-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-eps-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-gce-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-agents-heuristics-ping-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-hpblade-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-ibm-powervs-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-ibm-vpc-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-ibmblade-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-ifmib-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-ilo-moonshot-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-ilo-mp-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-ilo-ssh-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-ilo2-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-intelmodular-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-ipdu-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-ipmilan-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-kdump-0:4.16.0-5.el10_0.9.aarch64",
"AppStream-10.0.Z.E2S:fence-agents-kdump-0:4.16.0-5.el10_0.9.ppc64le",
"AppStream-10.0.Z.E2S:fence-agents-kdump-0:4.16.0-5.el10_0.9.s390x",
"AppStream-10.0.Z.E2S:fence-agents-kdump-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-agents-kdump-debuginfo-0:4.16.0-5.el10_0.9.aarch64",
"AppStream-10.0.Z.E2S:fence-agents-kdump-debuginfo-0:4.16.0-5.el10_0.9.ppc64le",
"AppStream-10.0.Z.E2S:fence-agents-kdump-debuginfo-0:4.16.0-5.el10_0.9.s390x",
"AppStream-10.0.Z.E2S:fence-agents-kdump-debuginfo-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-agents-kubevirt-0:4.16.0-5.el10_0.9.aarch64",
"AppStream-10.0.Z.E2S:fence-agents-kubevirt-0:4.16.0-5.el10_0.9.ppc64le",
"AppStream-10.0.Z.E2S:fence-agents-kubevirt-0:4.16.0-5.el10_0.9.s390x",
"AppStream-10.0.Z.E2S:fence-agents-kubevirt-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-agents-lpar-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-mpath-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-nutanix-ahv-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-openstack-0:4.16.0-5.el10_0.9.ppc64le",
"AppStream-10.0.Z.E2S:fence-agents-openstack-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-agents-redfish-0:4.16.0-5.el10_0.9.aarch64",
"AppStream-10.0.Z.E2S:fence-agents-redfish-0:4.16.0-5.el10_0.9.ppc64le",
"AppStream-10.0.Z.E2S:fence-agents-redfish-0:4.16.0-5.el10_0.9.s390x",
"AppStream-10.0.Z.E2S:fence-agents-redfish-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-agents-rhevm-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-rsa-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-rsb-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-sbd-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-scsi-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-virsh-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-vmware-rest-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-vmware-soap-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-wti-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-zvm-0:4.16.0-5.el10_0.9.s390x",
"AppStream-10.0.Z.E2S:fence-virt-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-virt-debuginfo-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-virtd-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-virtd-cpg-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-virtd-cpg-debuginfo-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-virtd-debuginfo-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-virtd-libvirt-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-virtd-libvirt-debuginfo-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-virtd-multicast-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-virtd-multicast-debuginfo-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-virtd-serial-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-virtd-serial-debuginfo-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-virtd-tcp-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-virtd-tcp-debuginfo-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:ha-cloud-support-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:ha-cloud-support-debuginfo-0:4.16.0-5.el10_0.9.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"AppStream-10.0.Z.E2S:fence-agents-0:4.16.0-5.el10_0.9.src",
"AppStream-10.0.Z.E2S:fence-agents-aliyun-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-agents-all-0:4.16.0-5.el10_0.9.aarch64",
"AppStream-10.0.Z.E2S:fence-agents-all-0:4.16.0-5.el10_0.9.ppc64le",
"AppStream-10.0.Z.E2S:fence-agents-all-0:4.16.0-5.el10_0.9.s390x",
"AppStream-10.0.Z.E2S:fence-agents-all-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-agents-amt-ws-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-apc-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-apc-snmp-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-aws-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-agents-azure-arm-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-agents-bladecenter-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-brocade-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-cisco-mds-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-cisco-ucs-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-common-0:4.16.0-5.el10_0.9.aarch64",
"AppStream-10.0.Z.E2S:fence-agents-common-0:4.16.0-5.el10_0.9.ppc64le",
"AppStream-10.0.Z.E2S:fence-agents-common-0:4.16.0-5.el10_0.9.s390x",
"AppStream-10.0.Z.E2S:fence-agents-common-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-agents-common-debuginfo-0:4.16.0-5.el10_0.9.aarch64",
"AppStream-10.0.Z.E2S:fence-agents-common-debuginfo-0:4.16.0-5.el10_0.9.ppc64le",
"AppStream-10.0.Z.E2S:fence-agents-common-debuginfo-0:4.16.0-5.el10_0.9.s390x",
"AppStream-10.0.Z.E2S:fence-agents-common-debuginfo-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-agents-debuginfo-0:4.16.0-5.el10_0.9.aarch64",
"AppStream-10.0.Z.E2S:fence-agents-debuginfo-0:4.16.0-5.el10_0.9.ppc64le",
"AppStream-10.0.Z.E2S:fence-agents-debuginfo-0:4.16.0-5.el10_0.9.s390x",
"AppStream-10.0.Z.E2S:fence-agents-debuginfo-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-agents-debugsource-0:4.16.0-5.el10_0.9.aarch64",
"AppStream-10.0.Z.E2S:fence-agents-debugsource-0:4.16.0-5.el10_0.9.ppc64le",
"AppStream-10.0.Z.E2S:fence-agents-debugsource-0:4.16.0-5.el10_0.9.s390x",
"AppStream-10.0.Z.E2S:fence-agents-debugsource-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-agents-drac5-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-eaton-snmp-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-emerson-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-eps-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-gce-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-agents-heuristics-ping-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-hpblade-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-ibm-powervs-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-ibm-vpc-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-ibmblade-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-ifmib-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-ilo-moonshot-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-ilo-mp-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-ilo-ssh-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-ilo2-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-intelmodular-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-ipdu-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-ipmilan-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-kdump-0:4.16.0-5.el10_0.9.aarch64",
"AppStream-10.0.Z.E2S:fence-agents-kdump-0:4.16.0-5.el10_0.9.ppc64le",
"AppStream-10.0.Z.E2S:fence-agents-kdump-0:4.16.0-5.el10_0.9.s390x",
"AppStream-10.0.Z.E2S:fence-agents-kdump-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-agents-kdump-debuginfo-0:4.16.0-5.el10_0.9.aarch64",
"AppStream-10.0.Z.E2S:fence-agents-kdump-debuginfo-0:4.16.0-5.el10_0.9.ppc64le",
"AppStream-10.0.Z.E2S:fence-agents-kdump-debuginfo-0:4.16.0-5.el10_0.9.s390x",
"AppStream-10.0.Z.E2S:fence-agents-kdump-debuginfo-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-agents-kubevirt-0:4.16.0-5.el10_0.9.aarch64",
"AppStream-10.0.Z.E2S:fence-agents-kubevirt-0:4.16.0-5.el10_0.9.ppc64le",
"AppStream-10.0.Z.E2S:fence-agents-kubevirt-0:4.16.0-5.el10_0.9.s390x",
"AppStream-10.0.Z.E2S:fence-agents-kubevirt-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-agents-lpar-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-mpath-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-nutanix-ahv-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-openstack-0:4.16.0-5.el10_0.9.ppc64le",
"AppStream-10.0.Z.E2S:fence-agents-openstack-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-agents-redfish-0:4.16.0-5.el10_0.9.aarch64",
"AppStream-10.0.Z.E2S:fence-agents-redfish-0:4.16.0-5.el10_0.9.ppc64le",
"AppStream-10.0.Z.E2S:fence-agents-redfish-0:4.16.0-5.el10_0.9.s390x",
"AppStream-10.0.Z.E2S:fence-agents-redfish-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-agents-rhevm-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-rsa-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-rsb-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-sbd-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-scsi-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-virsh-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-vmware-rest-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-vmware-soap-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-wti-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-zvm-0:4.16.0-5.el10_0.9.s390x",
"AppStream-10.0.Z.E2S:fence-virt-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-virt-debuginfo-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-virtd-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-virtd-cpg-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-virtd-cpg-debuginfo-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-virtd-debuginfo-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-virtd-libvirt-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-virtd-libvirt-debuginfo-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-virtd-multicast-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-virtd-multicast-debuginfo-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-virtd-serial-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-virtd-serial-debuginfo-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-virtd-tcp-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-virtd-tcp-debuginfo-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:ha-cloud-support-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:ha-cloud-support-debuginfo-0:4.16.0-5.el10_0.9.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "pyasn1: pyasn1 Vulnerable to Denial of Service via Unbounded Recursion"
},
{
"cve": "CVE-2026-32597",
"cwe": {
"id": "CWE-347",
"name": "Improper Verification of Cryptographic Signature"
},
"discovery_date": "2026-03-12T22:01:29.967713+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2447194"
}
],
"notes": [
{
"category": "description",
"text": "A missing verification step has been discovered in PyJWT. PyJWT does not validate the crit (Critical) Header Parameter defined in RFC 7515 \u00a74.1.11. When a JWS token contains a crit array listing extensions that PyJWT does not understand, the library accepts the token instead of rejecting it. This violates the MUST requirement in the RFC.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "pyjwt: PyJWT accepts unknown `crit` header extensions (RFC 7515 \u00a74.1.11 MUST violation)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.0.Z.E2S:fence-agents-0:4.16.0-5.el10_0.9.src",
"AppStream-10.0.Z.E2S:fence-agents-aliyun-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-agents-all-0:4.16.0-5.el10_0.9.aarch64",
"AppStream-10.0.Z.E2S:fence-agents-all-0:4.16.0-5.el10_0.9.ppc64le",
"AppStream-10.0.Z.E2S:fence-agents-all-0:4.16.0-5.el10_0.9.s390x",
"AppStream-10.0.Z.E2S:fence-agents-all-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-agents-amt-ws-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-apc-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-apc-snmp-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-aws-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-agents-azure-arm-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-agents-bladecenter-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-brocade-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-cisco-mds-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-cisco-ucs-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-common-0:4.16.0-5.el10_0.9.aarch64",
"AppStream-10.0.Z.E2S:fence-agents-common-0:4.16.0-5.el10_0.9.ppc64le",
"AppStream-10.0.Z.E2S:fence-agents-common-0:4.16.0-5.el10_0.9.s390x",
"AppStream-10.0.Z.E2S:fence-agents-common-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-agents-common-debuginfo-0:4.16.0-5.el10_0.9.aarch64",
"AppStream-10.0.Z.E2S:fence-agents-common-debuginfo-0:4.16.0-5.el10_0.9.ppc64le",
"AppStream-10.0.Z.E2S:fence-agents-common-debuginfo-0:4.16.0-5.el10_0.9.s390x",
"AppStream-10.0.Z.E2S:fence-agents-common-debuginfo-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-agents-debuginfo-0:4.16.0-5.el10_0.9.aarch64",
"AppStream-10.0.Z.E2S:fence-agents-debuginfo-0:4.16.0-5.el10_0.9.ppc64le",
"AppStream-10.0.Z.E2S:fence-agents-debuginfo-0:4.16.0-5.el10_0.9.s390x",
"AppStream-10.0.Z.E2S:fence-agents-debuginfo-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-agents-debugsource-0:4.16.0-5.el10_0.9.aarch64",
"AppStream-10.0.Z.E2S:fence-agents-debugsource-0:4.16.0-5.el10_0.9.ppc64le",
"AppStream-10.0.Z.E2S:fence-agents-debugsource-0:4.16.0-5.el10_0.9.s390x",
"AppStream-10.0.Z.E2S:fence-agents-debugsource-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-agents-drac5-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-eaton-snmp-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-emerson-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-eps-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-gce-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-agents-heuristics-ping-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-hpblade-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-ibm-powervs-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-ibm-vpc-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-ibmblade-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-ifmib-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-ilo-moonshot-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-ilo-mp-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-ilo-ssh-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-ilo2-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-intelmodular-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-ipdu-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-ipmilan-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-kdump-0:4.16.0-5.el10_0.9.aarch64",
"AppStream-10.0.Z.E2S:fence-agents-kdump-0:4.16.0-5.el10_0.9.ppc64le",
"AppStream-10.0.Z.E2S:fence-agents-kdump-0:4.16.0-5.el10_0.9.s390x",
"AppStream-10.0.Z.E2S:fence-agents-kdump-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-agents-kdump-debuginfo-0:4.16.0-5.el10_0.9.aarch64",
"AppStream-10.0.Z.E2S:fence-agents-kdump-debuginfo-0:4.16.0-5.el10_0.9.ppc64le",
"AppStream-10.0.Z.E2S:fence-agents-kdump-debuginfo-0:4.16.0-5.el10_0.9.s390x",
"AppStream-10.0.Z.E2S:fence-agents-kdump-debuginfo-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-agents-kubevirt-0:4.16.0-5.el10_0.9.aarch64",
"AppStream-10.0.Z.E2S:fence-agents-kubevirt-0:4.16.0-5.el10_0.9.ppc64le",
"AppStream-10.0.Z.E2S:fence-agents-kubevirt-0:4.16.0-5.el10_0.9.s390x",
"AppStream-10.0.Z.E2S:fence-agents-kubevirt-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-agents-lpar-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-mpath-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-nutanix-ahv-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-openstack-0:4.16.0-5.el10_0.9.ppc64le",
"AppStream-10.0.Z.E2S:fence-agents-openstack-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-agents-redfish-0:4.16.0-5.el10_0.9.aarch64",
"AppStream-10.0.Z.E2S:fence-agents-redfish-0:4.16.0-5.el10_0.9.ppc64le",
"AppStream-10.0.Z.E2S:fence-agents-redfish-0:4.16.0-5.el10_0.9.s390x",
"AppStream-10.0.Z.E2S:fence-agents-redfish-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-agents-rhevm-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-rsa-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-rsb-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-sbd-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-scsi-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-virsh-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-vmware-rest-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-vmware-soap-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-wti-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-zvm-0:4.16.0-5.el10_0.9.s390x",
"AppStream-10.0.Z.E2S:fence-virt-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-virt-debuginfo-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-virtd-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-virtd-cpg-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-virtd-cpg-debuginfo-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-virtd-debuginfo-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-virtd-libvirt-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-virtd-libvirt-debuginfo-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-virtd-multicast-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-virtd-multicast-debuginfo-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-virtd-serial-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-virtd-serial-debuginfo-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-virtd-tcp-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-virtd-tcp-debuginfo-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:ha-cloud-support-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:ha-cloud-support-debuginfo-0:4.16.0-5.el10_0.9.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32597"
},
{
"category": "external",
"summary": "RHBZ#2447194",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2447194"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32597",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32597"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32597",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32597"
},
{
"category": "external",
"summary": "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-752w-5fwx-jx9f",
"url": "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-752w-5fwx-jx9f"
}
],
"release_date": "2026-03-12T21:41:50.427000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-13T15:29:42+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.0.Z.E2S:fence-agents-0:4.16.0-5.el10_0.9.src",
"AppStream-10.0.Z.E2S:fence-agents-aliyun-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-agents-all-0:4.16.0-5.el10_0.9.aarch64",
"AppStream-10.0.Z.E2S:fence-agents-all-0:4.16.0-5.el10_0.9.ppc64le",
"AppStream-10.0.Z.E2S:fence-agents-all-0:4.16.0-5.el10_0.9.s390x",
"AppStream-10.0.Z.E2S:fence-agents-all-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-agents-amt-ws-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-apc-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-apc-snmp-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-aws-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-agents-azure-arm-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-agents-bladecenter-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-brocade-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-cisco-mds-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-cisco-ucs-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-common-0:4.16.0-5.el10_0.9.aarch64",
"AppStream-10.0.Z.E2S:fence-agents-common-0:4.16.0-5.el10_0.9.ppc64le",
"AppStream-10.0.Z.E2S:fence-agents-common-0:4.16.0-5.el10_0.9.s390x",
"AppStream-10.0.Z.E2S:fence-agents-common-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-agents-common-debuginfo-0:4.16.0-5.el10_0.9.aarch64",
"AppStream-10.0.Z.E2S:fence-agents-common-debuginfo-0:4.16.0-5.el10_0.9.ppc64le",
"AppStream-10.0.Z.E2S:fence-agents-common-debuginfo-0:4.16.0-5.el10_0.9.s390x",
"AppStream-10.0.Z.E2S:fence-agents-common-debuginfo-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-agents-debuginfo-0:4.16.0-5.el10_0.9.aarch64",
"AppStream-10.0.Z.E2S:fence-agents-debuginfo-0:4.16.0-5.el10_0.9.ppc64le",
"AppStream-10.0.Z.E2S:fence-agents-debuginfo-0:4.16.0-5.el10_0.9.s390x",
"AppStream-10.0.Z.E2S:fence-agents-debuginfo-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-agents-debugsource-0:4.16.0-5.el10_0.9.aarch64",
"AppStream-10.0.Z.E2S:fence-agents-debugsource-0:4.16.0-5.el10_0.9.ppc64le",
"AppStream-10.0.Z.E2S:fence-agents-debugsource-0:4.16.0-5.el10_0.9.s390x",
"AppStream-10.0.Z.E2S:fence-agents-debugsource-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-agents-drac5-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-eaton-snmp-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-emerson-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-eps-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-gce-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-agents-heuristics-ping-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-hpblade-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-ibm-powervs-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-ibm-vpc-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-ibmblade-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-ifmib-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-ilo-moonshot-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-ilo-mp-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-ilo-ssh-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-ilo2-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-intelmodular-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-ipdu-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-ipmilan-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-kdump-0:4.16.0-5.el10_0.9.aarch64",
"AppStream-10.0.Z.E2S:fence-agents-kdump-0:4.16.0-5.el10_0.9.ppc64le",
"AppStream-10.0.Z.E2S:fence-agents-kdump-0:4.16.0-5.el10_0.9.s390x",
"AppStream-10.0.Z.E2S:fence-agents-kdump-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-agents-kdump-debuginfo-0:4.16.0-5.el10_0.9.aarch64",
"AppStream-10.0.Z.E2S:fence-agents-kdump-debuginfo-0:4.16.0-5.el10_0.9.ppc64le",
"AppStream-10.0.Z.E2S:fence-agents-kdump-debuginfo-0:4.16.0-5.el10_0.9.s390x",
"AppStream-10.0.Z.E2S:fence-agents-kdump-debuginfo-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-agents-kubevirt-0:4.16.0-5.el10_0.9.aarch64",
"AppStream-10.0.Z.E2S:fence-agents-kubevirt-0:4.16.0-5.el10_0.9.ppc64le",
"AppStream-10.0.Z.E2S:fence-agents-kubevirt-0:4.16.0-5.el10_0.9.s390x",
"AppStream-10.0.Z.E2S:fence-agents-kubevirt-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-agents-lpar-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-mpath-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-nutanix-ahv-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-openstack-0:4.16.0-5.el10_0.9.ppc64le",
"AppStream-10.0.Z.E2S:fence-agents-openstack-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-agents-redfish-0:4.16.0-5.el10_0.9.aarch64",
"AppStream-10.0.Z.E2S:fence-agents-redfish-0:4.16.0-5.el10_0.9.ppc64le",
"AppStream-10.0.Z.E2S:fence-agents-redfish-0:4.16.0-5.el10_0.9.s390x",
"AppStream-10.0.Z.E2S:fence-agents-redfish-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-agents-rhevm-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-rsa-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-rsb-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-sbd-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-scsi-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-virsh-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-vmware-rest-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-vmware-soap-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-wti-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-zvm-0:4.16.0-5.el10_0.9.s390x",
"AppStream-10.0.Z.E2S:fence-virt-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-virt-debuginfo-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-virtd-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-virtd-cpg-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-virtd-cpg-debuginfo-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-virtd-debuginfo-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-virtd-libvirt-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-virtd-libvirt-debuginfo-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-virtd-multicast-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-virtd-multicast-debuginfo-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-virtd-serial-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-virtd-serial-debuginfo-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-virtd-tcp-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-virtd-tcp-debuginfo-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:ha-cloud-support-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:ha-cloud-support-debuginfo-0:4.16.0-5.el10_0.9.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:17083"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"AppStream-10.0.Z.E2S:fence-agents-0:4.16.0-5.el10_0.9.src",
"AppStream-10.0.Z.E2S:fence-agents-aliyun-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-agents-all-0:4.16.0-5.el10_0.9.aarch64",
"AppStream-10.0.Z.E2S:fence-agents-all-0:4.16.0-5.el10_0.9.ppc64le",
"AppStream-10.0.Z.E2S:fence-agents-all-0:4.16.0-5.el10_0.9.s390x",
"AppStream-10.0.Z.E2S:fence-agents-all-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-agents-amt-ws-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-apc-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-apc-snmp-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-aws-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-agents-azure-arm-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-agents-bladecenter-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-brocade-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-cisco-mds-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-cisco-ucs-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-common-0:4.16.0-5.el10_0.9.aarch64",
"AppStream-10.0.Z.E2S:fence-agents-common-0:4.16.0-5.el10_0.9.ppc64le",
"AppStream-10.0.Z.E2S:fence-agents-common-0:4.16.0-5.el10_0.9.s390x",
"AppStream-10.0.Z.E2S:fence-agents-common-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-agents-common-debuginfo-0:4.16.0-5.el10_0.9.aarch64",
"AppStream-10.0.Z.E2S:fence-agents-common-debuginfo-0:4.16.0-5.el10_0.9.ppc64le",
"AppStream-10.0.Z.E2S:fence-agents-common-debuginfo-0:4.16.0-5.el10_0.9.s390x",
"AppStream-10.0.Z.E2S:fence-agents-common-debuginfo-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-agents-debuginfo-0:4.16.0-5.el10_0.9.aarch64",
"AppStream-10.0.Z.E2S:fence-agents-debuginfo-0:4.16.0-5.el10_0.9.ppc64le",
"AppStream-10.0.Z.E2S:fence-agents-debuginfo-0:4.16.0-5.el10_0.9.s390x",
"AppStream-10.0.Z.E2S:fence-agents-debuginfo-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-agents-debugsource-0:4.16.0-5.el10_0.9.aarch64",
"AppStream-10.0.Z.E2S:fence-agents-debugsource-0:4.16.0-5.el10_0.9.ppc64le",
"AppStream-10.0.Z.E2S:fence-agents-debugsource-0:4.16.0-5.el10_0.9.s390x",
"AppStream-10.0.Z.E2S:fence-agents-debugsource-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-agents-drac5-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-eaton-snmp-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-emerson-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-eps-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-gce-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-agents-heuristics-ping-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-hpblade-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-ibm-powervs-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-ibm-vpc-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-ibmblade-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-ifmib-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-ilo-moonshot-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-ilo-mp-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-ilo-ssh-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-ilo2-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-intelmodular-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-ipdu-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-ipmilan-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-kdump-0:4.16.0-5.el10_0.9.aarch64",
"AppStream-10.0.Z.E2S:fence-agents-kdump-0:4.16.0-5.el10_0.9.ppc64le",
"AppStream-10.0.Z.E2S:fence-agents-kdump-0:4.16.0-5.el10_0.9.s390x",
"AppStream-10.0.Z.E2S:fence-agents-kdump-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-agents-kdump-debuginfo-0:4.16.0-5.el10_0.9.aarch64",
"AppStream-10.0.Z.E2S:fence-agents-kdump-debuginfo-0:4.16.0-5.el10_0.9.ppc64le",
"AppStream-10.0.Z.E2S:fence-agents-kdump-debuginfo-0:4.16.0-5.el10_0.9.s390x",
"AppStream-10.0.Z.E2S:fence-agents-kdump-debuginfo-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-agents-kubevirt-0:4.16.0-5.el10_0.9.aarch64",
"AppStream-10.0.Z.E2S:fence-agents-kubevirt-0:4.16.0-5.el10_0.9.ppc64le",
"AppStream-10.0.Z.E2S:fence-agents-kubevirt-0:4.16.0-5.el10_0.9.s390x",
"AppStream-10.0.Z.E2S:fence-agents-kubevirt-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-agents-lpar-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-mpath-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-nutanix-ahv-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-openstack-0:4.16.0-5.el10_0.9.ppc64le",
"AppStream-10.0.Z.E2S:fence-agents-openstack-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-agents-redfish-0:4.16.0-5.el10_0.9.aarch64",
"AppStream-10.0.Z.E2S:fence-agents-redfish-0:4.16.0-5.el10_0.9.ppc64le",
"AppStream-10.0.Z.E2S:fence-agents-redfish-0:4.16.0-5.el10_0.9.s390x",
"AppStream-10.0.Z.E2S:fence-agents-redfish-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-agents-rhevm-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-rsa-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-rsb-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-sbd-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-scsi-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-virsh-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-vmware-rest-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-vmware-soap-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-wti-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-zvm-0:4.16.0-5.el10_0.9.s390x",
"AppStream-10.0.Z.E2S:fence-virt-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-virt-debuginfo-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-virtd-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-virtd-cpg-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-virtd-cpg-debuginfo-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-virtd-debuginfo-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-virtd-libvirt-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-virtd-libvirt-debuginfo-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-virtd-multicast-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-virtd-multicast-debuginfo-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-virtd-serial-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-virtd-serial-debuginfo-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-virtd-tcp-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-virtd-tcp-debuginfo-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:ha-cloud-support-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:ha-cloud-support-debuginfo-0:4.16.0-5.el10_0.9.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"AppStream-10.0.Z.E2S:fence-agents-0:4.16.0-5.el10_0.9.src",
"AppStream-10.0.Z.E2S:fence-agents-aliyun-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-agents-all-0:4.16.0-5.el10_0.9.aarch64",
"AppStream-10.0.Z.E2S:fence-agents-all-0:4.16.0-5.el10_0.9.ppc64le",
"AppStream-10.0.Z.E2S:fence-agents-all-0:4.16.0-5.el10_0.9.s390x",
"AppStream-10.0.Z.E2S:fence-agents-all-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-agents-amt-ws-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-apc-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-apc-snmp-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-aws-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-agents-azure-arm-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-agents-bladecenter-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-brocade-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-cisco-mds-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-cisco-ucs-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-common-0:4.16.0-5.el10_0.9.aarch64",
"AppStream-10.0.Z.E2S:fence-agents-common-0:4.16.0-5.el10_0.9.ppc64le",
"AppStream-10.0.Z.E2S:fence-agents-common-0:4.16.0-5.el10_0.9.s390x",
"AppStream-10.0.Z.E2S:fence-agents-common-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-agents-common-debuginfo-0:4.16.0-5.el10_0.9.aarch64",
"AppStream-10.0.Z.E2S:fence-agents-common-debuginfo-0:4.16.0-5.el10_0.9.ppc64le",
"AppStream-10.0.Z.E2S:fence-agents-common-debuginfo-0:4.16.0-5.el10_0.9.s390x",
"AppStream-10.0.Z.E2S:fence-agents-common-debuginfo-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-agents-debuginfo-0:4.16.0-5.el10_0.9.aarch64",
"AppStream-10.0.Z.E2S:fence-agents-debuginfo-0:4.16.0-5.el10_0.9.ppc64le",
"AppStream-10.0.Z.E2S:fence-agents-debuginfo-0:4.16.0-5.el10_0.9.s390x",
"AppStream-10.0.Z.E2S:fence-agents-debuginfo-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-agents-debugsource-0:4.16.0-5.el10_0.9.aarch64",
"AppStream-10.0.Z.E2S:fence-agents-debugsource-0:4.16.0-5.el10_0.9.ppc64le",
"AppStream-10.0.Z.E2S:fence-agents-debugsource-0:4.16.0-5.el10_0.9.s390x",
"AppStream-10.0.Z.E2S:fence-agents-debugsource-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-agents-drac5-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-eaton-snmp-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-emerson-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-eps-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-gce-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-agents-heuristics-ping-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-hpblade-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-ibm-powervs-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-ibm-vpc-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-ibmblade-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-ifmib-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-ilo-moonshot-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-ilo-mp-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-ilo-ssh-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-ilo2-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-intelmodular-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-ipdu-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-ipmilan-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-kdump-0:4.16.0-5.el10_0.9.aarch64",
"AppStream-10.0.Z.E2S:fence-agents-kdump-0:4.16.0-5.el10_0.9.ppc64le",
"AppStream-10.0.Z.E2S:fence-agents-kdump-0:4.16.0-5.el10_0.9.s390x",
"AppStream-10.0.Z.E2S:fence-agents-kdump-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-agents-kdump-debuginfo-0:4.16.0-5.el10_0.9.aarch64",
"AppStream-10.0.Z.E2S:fence-agents-kdump-debuginfo-0:4.16.0-5.el10_0.9.ppc64le",
"AppStream-10.0.Z.E2S:fence-agents-kdump-debuginfo-0:4.16.0-5.el10_0.9.s390x",
"AppStream-10.0.Z.E2S:fence-agents-kdump-debuginfo-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-agents-kubevirt-0:4.16.0-5.el10_0.9.aarch64",
"AppStream-10.0.Z.E2S:fence-agents-kubevirt-0:4.16.0-5.el10_0.9.ppc64le",
"AppStream-10.0.Z.E2S:fence-agents-kubevirt-0:4.16.0-5.el10_0.9.s390x",
"AppStream-10.0.Z.E2S:fence-agents-kubevirt-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-agents-lpar-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-mpath-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-nutanix-ahv-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-openstack-0:4.16.0-5.el10_0.9.ppc64le",
"AppStream-10.0.Z.E2S:fence-agents-openstack-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-agents-redfish-0:4.16.0-5.el10_0.9.aarch64",
"AppStream-10.0.Z.E2S:fence-agents-redfish-0:4.16.0-5.el10_0.9.ppc64le",
"AppStream-10.0.Z.E2S:fence-agents-redfish-0:4.16.0-5.el10_0.9.s390x",
"AppStream-10.0.Z.E2S:fence-agents-redfish-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-agents-rhevm-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-rsa-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-rsb-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-sbd-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-scsi-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-virsh-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-vmware-rest-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-vmware-soap-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-wti-0:4.16.0-5.el10_0.9.noarch",
"AppStream-10.0.Z.E2S:fence-agents-zvm-0:4.16.0-5.el10_0.9.s390x",
"AppStream-10.0.Z.E2S:fence-virt-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-virt-debuginfo-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-virtd-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-virtd-cpg-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-virtd-cpg-debuginfo-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-virtd-debuginfo-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-virtd-libvirt-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-virtd-libvirt-debuginfo-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-virtd-multicast-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-virtd-multicast-debuginfo-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-virtd-serial-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-virtd-serial-debuginfo-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-virtd-tcp-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:fence-virtd-tcp-debuginfo-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:ha-cloud-support-0:4.16.0-5.el10_0.9.x86_64",
"AppStream-10.0.Z.E2S:ha-cloud-support-debuginfo-0:4.16.0-5.el10_0.9.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "pyjwt: PyJWT accepts unknown `crit` header extensions (RFC 7515 \u00a74.1.11 MUST violation)"
}
]
}
RHSA-2026:17611
Vulnerability from csaf_redhat - Published: 2026-05-14 13:49 - Updated: 2026-07-20 04:36Summary
Red Hat Security Advisory: Red Hat Enterprise Linux AI 3.3.3
Severity
Important
Notes
Topic: Red Hat Enterprise Linux AI 3.3.3 is now available.
Details: Red Hat® Enterprise Linux® AI is a foundation model platform to seamlessly develop, test,
and run Granite family large language models (LLMs) for enterprise applications.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in pyasn1, a generic ASN.1 library for Python. A remote attacker could exploit this vulnerability by sending a specially crafted RELATIVE-OID with excessive continuation octets. This input validation vulnerability leads to memory exhaustion, resulting in a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9@sha256:a5256e0394dbb29e2757969d0a4cacbd1205f3e09bb668d40800133599d75121_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-rocm-rhel9@sha256:d32e15099dad41250e88b8b5030ce34015e084edbf32b06bc00cf97cf30663cb_amd64 | — |
Vendor Fix
fix
|
Known not affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9@sha256:fe3f9992abba61ac90a59107f6f37877876f7cc53378a9712eafb6ebb8a23ded_amd64 | — | ||
| Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9@sha256:20f1fe37363bad77ad79184fcd87a1e0b1789d97098726f9b1f9012a90e06929_amd64 | — | ||
| Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:0e0e0f327f586006f1333353184ebddccb91f1e4dc6ab0d3b96ce2e0e065808e_arm64 | — | ||
| Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:f6f6aa6af83e4005c230be33d0ee66d1826c48bd8e1445049a1550b01a00e703_amd64 | — | ||
| Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-gcp-cuda-rhel9@sha256:3c547595d6b8170a6858ac6b922dc594613c350c9cfa37e83425c247fb795989_amd64 | — |
Threats
Impact
Important
An unbounded recursion flaw has been discovered in the pypi pyasn1 library. This uncontrolled recursion occurs when decoding ASN.1 data with deeply nested structures. An attacker can supply a crafted payload containing nested SEQUENCE (0x30) or SET (0x31) tags with Indefinite Length (0x80) markers. This forces the decoder to recursively call itself until the Python interpreter crashes with a RecursionError or consumes all available memory (OOM), crashing the host application.
7.5 (High)
Affected products
Fixed
2 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9@sha256:a5256e0394dbb29e2757969d0a4cacbd1205f3e09bb668d40800133599d75121_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-rocm-rhel9@sha256:d32e15099dad41250e88b8b5030ce34015e084edbf32b06bc00cf97cf30663cb_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9@sha256:fe3f9992abba61ac90a59107f6f37877876f7cc53378a9712eafb6ebb8a23ded_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9@sha256:20f1fe37363bad77ad79184fcd87a1e0b1789d97098726f9b1f9012a90e06929_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:0e0e0f327f586006f1333353184ebddccb91f1e4dc6ab0d3b96ce2e0e065808e_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:f6f6aa6af83e4005c230be33d0ee66d1826c48bd8e1445049a1550b01a00e703_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-gcp-cuda-rhel9@sha256:3c547595d6b8170a6858ac6b922dc594613c350c9cfa37e83425c247fb795989_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Pillow, a Python imaging library. This vulnerability allows a remote attacker to trigger a denial of service (DoS) by providing a specially crafted FITS image file. The library's failure to limit the amount of GZIP-compressed data during decoding can lead to unbounded memory consumption, causing the system to crash or experience severe performance issues.
7.5 (High)
Affected products
Fixed
7 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9@sha256:fe3f9992abba61ac90a59107f6f37877876f7cc53378a9712eafb6ebb8a23ded_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9@sha256:20f1fe37363bad77ad79184fcd87a1e0b1789d97098726f9b1f9012a90e06929_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9@sha256:a5256e0394dbb29e2757969d0a4cacbd1205f3e09bb668d40800133599d75121_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:0e0e0f327f586006f1333353184ebddccb91f1e4dc6ab0d3b96ce2e0e065808e_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:f6f6aa6af83e4005c230be33d0ee66d1826c48bd8e1445049a1550b01a00e703_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-gcp-cuda-rhel9@sha256:3c547595d6b8170a6858ac6b922dc594613c350c9cfa37e83425c247fb795989_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-rocm-rhel9@sha256:d32e15099dad41250e88b8b5030ce34015e084edbf32b06bc00cf97cf30663cb_amd64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
References
28 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat Enterprise Linux AI 3.3.3 is now available.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat\u00ae Enterprise Linux\u00ae AI is a foundation model platform to seamlessly develop, test,\nand run Granite family large language models (LLMs) for enterprise applications.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:17611",
"url": "https://access.redhat.com/errata/RHSA-2026:17611"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-23490",
"url": "https://access.redhat.com/security/cve/CVE-2026-23490"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-30922",
"url": "https://access.redhat.com/security/cve/CVE-2026-30922"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-40192",
"url": "https://access.redhat.com/security/cve/CVE-2026-40192"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "external",
"summary": "https://www.redhat.com/en/technologies/linux-platforms/enterprise-linux/ai",
"url": "https://www.redhat.com/en/technologies/linux-platforms/enterprise-linux/ai"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_17611.json"
}
],
"title": "Red Hat Security Advisory: Red Hat Enterprise Linux AI 3.3.3",
"tracking": {
"current_release_date": "2026-07-20T04:36:53+00:00",
"generator": {
"date": "2026-07-20T04:36:53+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.7"
}
},
"id": "RHSA-2026:17611",
"initial_release_date": "2026-05-14T13:49:52+00:00",
"revision_history": [
{
"date": "2026-05-14T13:49:52+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-07-18T05:32:03+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-07-20T04:36:53+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AI 3.3",
"product": {
"name": "Red Hat Enterprise Linux AI 3.3",
"product_id": "Red Hat Enterprise Linux AI 3.3",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:enterprise_linux_ai:3.3::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux AI"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:f6f6aa6af83e4005c230be33d0ee66d1826c48bd8e1445049a1550b01a00e703_amd64",
"product": {
"name": "registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:f6f6aa6af83e4005c230be33d0ee66d1826c48bd8e1445049a1550b01a00e703_amd64",
"product_id": "registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:f6f6aa6af83e4005c230be33d0ee66d1826c48bd8e1445049a1550b01a00e703_amd64",
"product_identification_helper": {
"purl": "pkg:oci/bootc-cuda-rhel9@sha256%3Af6f6aa6af83e4005c230be33d0ee66d1826c48bd8e1445049a1550b01a00e703?arch=amd64\u0026repository_url=registry.redhat.io/rhelai3\u0026tag=1778666122"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9@sha256:fe3f9992abba61ac90a59107f6f37877876f7cc53378a9712eafb6ebb8a23ded_amd64",
"product": {
"name": "registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9@sha256:fe3f9992abba61ac90a59107f6f37877876f7cc53378a9712eafb6ebb8a23ded_amd64",
"product_id": "registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9@sha256:fe3f9992abba61ac90a59107f6f37877876f7cc53378a9712eafb6ebb8a23ded_amd64",
"product_identification_helper": {
"purl": "pkg:oci/bootc-aws-cuda-rhel9@sha256%3Afe3f9992abba61ac90a59107f6f37877876f7cc53378a9712eafb6ebb8a23ded?arch=amd64\u0026repository_url=registry.redhat.io/rhelai3\u0026tag=1778677633"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9@sha256:20f1fe37363bad77ad79184fcd87a1e0b1789d97098726f9b1f9012a90e06929_amd64",
"product": {
"name": "registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9@sha256:20f1fe37363bad77ad79184fcd87a1e0b1789d97098726f9b1f9012a90e06929_amd64",
"product_id": "registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9@sha256:20f1fe37363bad77ad79184fcd87a1e0b1789d97098726f9b1f9012a90e06929_amd64",
"product_identification_helper": {
"purl": "pkg:oci/bootc-azure-cuda-rhel9@sha256%3A20f1fe37363bad77ad79184fcd87a1e0b1789d97098726f9b1f9012a90e06929?arch=amd64\u0026repository_url=registry.redhat.io/rhelai3\u0026tag=1778677632"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhelai3/bootc-gcp-cuda-rhel9@sha256:3c547595d6b8170a6858ac6b922dc594613c350c9cfa37e83425c247fb795989_amd64",
"product": {
"name": "registry.redhat.io/rhelai3/bootc-gcp-cuda-rhel9@sha256:3c547595d6b8170a6858ac6b922dc594613c350c9cfa37e83425c247fb795989_amd64",
"product_id": "registry.redhat.io/rhelai3/bootc-gcp-cuda-rhel9@sha256:3c547595d6b8170a6858ac6b922dc594613c350c9cfa37e83425c247fb795989_amd64",
"product_identification_helper": {
"purl": "pkg:oci/bootc-gcp-cuda-rhel9@sha256%3A3c547595d6b8170a6858ac6b922dc594613c350c9cfa37e83425c247fb795989?arch=amd64\u0026repository_url=registry.redhat.io/rhelai3\u0026tag=1778677632"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhelai3/bootc-rocm-rhel9@sha256:d32e15099dad41250e88b8b5030ce34015e084edbf32b06bc00cf97cf30663cb_amd64",
"product": {
"name": "registry.redhat.io/rhelai3/bootc-rocm-rhel9@sha256:d32e15099dad41250e88b8b5030ce34015e084edbf32b06bc00cf97cf30663cb_amd64",
"product_id": "registry.redhat.io/rhelai3/bootc-rocm-rhel9@sha256:d32e15099dad41250e88b8b5030ce34015e084edbf32b06bc00cf97cf30663cb_amd64",
"product_identification_helper": {
"purl": "pkg:oci/bootc-rocm-rhel9@sha256%3Ad32e15099dad41250e88b8b5030ce34015e084edbf32b06bc00cf97cf30663cb?arch=amd64\u0026repository_url=registry.redhat.io/rhelai3\u0026tag=1778666124"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9@sha256:a5256e0394dbb29e2757969d0a4cacbd1205f3e09bb668d40800133599d75121_amd64",
"product": {
"name": "registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9@sha256:a5256e0394dbb29e2757969d0a4cacbd1205f3e09bb668d40800133599d75121_amd64",
"product_id": "registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9@sha256:a5256e0394dbb29e2757969d0a4cacbd1205f3e09bb668d40800133599d75121_amd64",
"product_identification_helper": {
"purl": "pkg:oci/bootc-azure-rocm-rhel9@sha256%3Aa5256e0394dbb29e2757969d0a4cacbd1205f3e09bb668d40800133599d75121?arch=amd64\u0026repository_url=registry.redhat.io/rhelai3\u0026tag=1778677745"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:0e0e0f327f586006f1333353184ebddccb91f1e4dc6ab0d3b96ce2e0e065808e_arm64",
"product": {
"name": "registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:0e0e0f327f586006f1333353184ebddccb91f1e4dc6ab0d3b96ce2e0e065808e_arm64",
"product_id": "registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:0e0e0f327f586006f1333353184ebddccb91f1e4dc6ab0d3b96ce2e0e065808e_arm64",
"product_identification_helper": {
"purl": "pkg:oci/bootc-cuda-rhel9@sha256%3A0e0e0f327f586006f1333353184ebddccb91f1e4dc6ab0d3b96ce2e0e065808e?arch=arm64\u0026repository_url=registry.redhat.io/rhelai3\u0026tag=1778666122"
}
}
}
],
"category": "architecture",
"name": "arm64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9@sha256:fe3f9992abba61ac90a59107f6f37877876f7cc53378a9712eafb6ebb8a23ded_amd64 as a component of Red Hat Enterprise Linux AI 3.3",
"product_id": "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9@sha256:fe3f9992abba61ac90a59107f6f37877876f7cc53378a9712eafb6ebb8a23ded_amd64"
},
"product_reference": "registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9@sha256:fe3f9992abba61ac90a59107f6f37877876f7cc53378a9712eafb6ebb8a23ded_amd64",
"relates_to_product_reference": "Red Hat Enterprise Linux AI 3.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9@sha256:20f1fe37363bad77ad79184fcd87a1e0b1789d97098726f9b1f9012a90e06929_amd64 as a component of Red Hat Enterprise Linux AI 3.3",
"product_id": "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9@sha256:20f1fe37363bad77ad79184fcd87a1e0b1789d97098726f9b1f9012a90e06929_amd64"
},
"product_reference": "registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9@sha256:20f1fe37363bad77ad79184fcd87a1e0b1789d97098726f9b1f9012a90e06929_amd64",
"relates_to_product_reference": "Red Hat Enterprise Linux AI 3.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9@sha256:a5256e0394dbb29e2757969d0a4cacbd1205f3e09bb668d40800133599d75121_amd64 as a component of Red Hat Enterprise Linux AI 3.3",
"product_id": "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9@sha256:a5256e0394dbb29e2757969d0a4cacbd1205f3e09bb668d40800133599d75121_amd64"
},
"product_reference": "registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9@sha256:a5256e0394dbb29e2757969d0a4cacbd1205f3e09bb668d40800133599d75121_amd64",
"relates_to_product_reference": "Red Hat Enterprise Linux AI 3.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:0e0e0f327f586006f1333353184ebddccb91f1e4dc6ab0d3b96ce2e0e065808e_arm64 as a component of Red Hat Enterprise Linux AI 3.3",
"product_id": "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:0e0e0f327f586006f1333353184ebddccb91f1e4dc6ab0d3b96ce2e0e065808e_arm64"
},
"product_reference": "registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:0e0e0f327f586006f1333353184ebddccb91f1e4dc6ab0d3b96ce2e0e065808e_arm64",
"relates_to_product_reference": "Red Hat Enterprise Linux AI 3.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:f6f6aa6af83e4005c230be33d0ee66d1826c48bd8e1445049a1550b01a00e703_amd64 as a component of Red Hat Enterprise Linux AI 3.3",
"product_id": "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:f6f6aa6af83e4005c230be33d0ee66d1826c48bd8e1445049a1550b01a00e703_amd64"
},
"product_reference": "registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:f6f6aa6af83e4005c230be33d0ee66d1826c48bd8e1445049a1550b01a00e703_amd64",
"relates_to_product_reference": "Red Hat Enterprise Linux AI 3.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhelai3/bootc-gcp-cuda-rhel9@sha256:3c547595d6b8170a6858ac6b922dc594613c350c9cfa37e83425c247fb795989_amd64 as a component of Red Hat Enterprise Linux AI 3.3",
"product_id": "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-gcp-cuda-rhel9@sha256:3c547595d6b8170a6858ac6b922dc594613c350c9cfa37e83425c247fb795989_amd64"
},
"product_reference": "registry.redhat.io/rhelai3/bootc-gcp-cuda-rhel9@sha256:3c547595d6b8170a6858ac6b922dc594613c350c9cfa37e83425c247fb795989_amd64",
"relates_to_product_reference": "Red Hat Enterprise Linux AI 3.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhelai3/bootc-rocm-rhel9@sha256:d32e15099dad41250e88b8b5030ce34015e084edbf32b06bc00cf97cf30663cb_amd64 as a component of Red Hat Enterprise Linux AI 3.3",
"product_id": "Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-rocm-rhel9@sha256:d32e15099dad41250e88b8b5030ce34015e084edbf32b06bc00cf97cf30663cb_amd64"
},
"product_reference": "registry.redhat.io/rhelai3/bootc-rocm-rhel9@sha256:d32e15099dad41250e88b8b5030ce34015e084edbf32b06bc00cf97cf30663cb_amd64",
"relates_to_product_reference": "Red Hat Enterprise Linux AI 3.3"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-23490",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-01-16T20:03:33.790513+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9@sha256:fe3f9992abba61ac90a59107f6f37877876f7cc53378a9712eafb6ebb8a23ded_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9@sha256:20f1fe37363bad77ad79184fcd87a1e0b1789d97098726f9b1f9012a90e06929_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:0e0e0f327f586006f1333353184ebddccb91f1e4dc6ab0d3b96ce2e0e065808e_arm64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:f6f6aa6af83e4005c230be33d0ee66d1826c48bd8e1445049a1550b01a00e703_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-gcp-cuda-rhel9@sha256:3c547595d6b8170a6858ac6b922dc594613c350c9cfa37e83425c247fb795989_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2430472"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in pyasn1, a generic ASN.1 library for Python. A remote attacker could exploit this vulnerability by sending a specially crafted RELATIVE-OID with excessive continuation octets. This input validation vulnerability leads to memory exhaustion, resulting in a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "pyasn1: pyasn1: Denial of Service due to memory exhaustion from malformed RELATIVE-OID",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9@sha256:a5256e0394dbb29e2757969d0a4cacbd1205f3e09bb668d40800133599d75121_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-rocm-rhel9@sha256:d32e15099dad41250e88b8b5030ce34015e084edbf32b06bc00cf97cf30663cb_amd64"
],
"known_not_affected": [
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9@sha256:fe3f9992abba61ac90a59107f6f37877876f7cc53378a9712eafb6ebb8a23ded_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9@sha256:20f1fe37363bad77ad79184fcd87a1e0b1789d97098726f9b1f9012a90e06929_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:0e0e0f327f586006f1333353184ebddccb91f1e4dc6ab0d3b96ce2e0e065808e_arm64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:f6f6aa6af83e4005c230be33d0ee66d1826c48bd8e1445049a1550b01a00e703_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-gcp-cuda-rhel9@sha256:3c547595d6b8170a6858ac6b922dc594613c350c9cfa37e83425c247fb795989_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-23490"
},
{
"category": "external",
"summary": "RHBZ#2430472",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2430472"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-23490",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-23490"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-23490",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23490"
},
{
"category": "external",
"summary": "https://github.com/pyasn1/pyasn1/commit/3908f144229eed4df24bd569d16e5991ace44970",
"url": "https://github.com/pyasn1/pyasn1/commit/3908f144229eed4df24bd569d16e5991ace44970"
},
{
"category": "external",
"summary": "https://github.com/pyasn1/pyasn1/releases/tag/v0.6.2",
"url": "https://github.com/pyasn1/pyasn1/releases/tag/v0.6.2"
},
{
"category": "external",
"summary": "https://github.com/pyasn1/pyasn1/security/advisories/GHSA-63vm-454h-vhhq",
"url": "https://github.com/pyasn1/pyasn1/security/advisories/GHSA-63vm-454h-vhhq"
}
],
"release_date": "2026-01-16T19:03:36.442000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-14T13:49:52+00:00",
"details": "Before applying this update, ensure all previously released errata relevant to your system have been applied.",
"product_ids": [
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9@sha256:a5256e0394dbb29e2757969d0a4cacbd1205f3e09bb668d40800133599d75121_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-rocm-rhel9@sha256:d32e15099dad41250e88b8b5030ce34015e084edbf32b06bc00cf97cf30663cb_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:17611"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9@sha256:fe3f9992abba61ac90a59107f6f37877876f7cc53378a9712eafb6ebb8a23ded_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9@sha256:20f1fe37363bad77ad79184fcd87a1e0b1789d97098726f9b1f9012a90e06929_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9@sha256:a5256e0394dbb29e2757969d0a4cacbd1205f3e09bb668d40800133599d75121_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:0e0e0f327f586006f1333353184ebddccb91f1e4dc6ab0d3b96ce2e0e065808e_arm64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:f6f6aa6af83e4005c230be33d0ee66d1826c48bd8e1445049a1550b01a00e703_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-gcp-cuda-rhel9@sha256:3c547595d6b8170a6858ac6b922dc594613c350c9cfa37e83425c247fb795989_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-rocm-rhel9@sha256:d32e15099dad41250e88b8b5030ce34015e084edbf32b06bc00cf97cf30663cb_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "pyasn1: pyasn1: Denial of Service due to memory exhaustion from malformed RELATIVE-OID"
},
{
"cve": "CVE-2026-30922",
"cwe": {
"id": "CWE-835",
"name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
},
"discovery_date": "2026-03-18T04:02:45.401296+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9@sha256:fe3f9992abba61ac90a59107f6f37877876f7cc53378a9712eafb6ebb8a23ded_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9@sha256:20f1fe37363bad77ad79184fcd87a1e0b1789d97098726f9b1f9012a90e06929_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:0e0e0f327f586006f1333353184ebddccb91f1e4dc6ab0d3b96ce2e0e065808e_arm64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:f6f6aa6af83e4005c230be33d0ee66d1826c48bd8e1445049a1550b01a00e703_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-gcp-cuda-rhel9@sha256:3c547595d6b8170a6858ac6b922dc594613c350c9cfa37e83425c247fb795989_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2448553"
}
],
"notes": [
{
"category": "description",
"text": "An unbounded recursion flaw has been discovered in the pypi pyasn1 library. This uncontrolled recursion occurs when decoding ASN.1 data with deeply nested structures. An attacker can supply a crafted payload containing nested SEQUENCE (0x30) or SET (0x31) tags with Indefinite Length (0x80) markers. This forces the decoder to recursively call itself until the Python interpreter crashes with a RecursionError or consumes all available memory (OOM), crashing the host application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "pyasn1: pyasn1 Vulnerable to Denial of Service via Unbounded Recursion",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9@sha256:a5256e0394dbb29e2757969d0a4cacbd1205f3e09bb668d40800133599d75121_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-rocm-rhel9@sha256:d32e15099dad41250e88b8b5030ce34015e084edbf32b06bc00cf97cf30663cb_amd64"
],
"known_not_affected": [
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9@sha256:fe3f9992abba61ac90a59107f6f37877876f7cc53378a9712eafb6ebb8a23ded_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9@sha256:20f1fe37363bad77ad79184fcd87a1e0b1789d97098726f9b1f9012a90e06929_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:0e0e0f327f586006f1333353184ebddccb91f1e4dc6ab0d3b96ce2e0e065808e_arm64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:f6f6aa6af83e4005c230be33d0ee66d1826c48bd8e1445049a1550b01a00e703_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-gcp-cuda-rhel9@sha256:3c547595d6b8170a6858ac6b922dc594613c350c9cfa37e83425c247fb795989_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-30922"
},
{
"category": "external",
"summary": "RHBZ#2448553",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2448553"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-30922",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-30922"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-30922",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-30922"
},
{
"category": "external",
"summary": "https://github.com/pyasn1/pyasn1/commit/25ad481c19fdb006e20485ef3fc2e5b3eff30ef0",
"url": "https://github.com/pyasn1/pyasn1/commit/25ad481c19fdb006e20485ef3fc2e5b3eff30ef0"
},
{
"category": "external",
"summary": "https://github.com/pyasn1/pyasn1/security/advisories/GHSA-jr27-m4p2-rc6r",
"url": "https://github.com/pyasn1/pyasn1/security/advisories/GHSA-jr27-m4p2-rc6r"
}
],
"release_date": "2026-03-18T02:29:45.857000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-14T13:49:52+00:00",
"details": "Before applying this update, ensure all previously released errata relevant to your system have been applied.",
"product_ids": [
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9@sha256:a5256e0394dbb29e2757969d0a4cacbd1205f3e09bb668d40800133599d75121_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-rocm-rhel9@sha256:d32e15099dad41250e88b8b5030ce34015e084edbf32b06bc00cf97cf30663cb_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:17611"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9@sha256:fe3f9992abba61ac90a59107f6f37877876f7cc53378a9712eafb6ebb8a23ded_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9@sha256:20f1fe37363bad77ad79184fcd87a1e0b1789d97098726f9b1f9012a90e06929_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9@sha256:a5256e0394dbb29e2757969d0a4cacbd1205f3e09bb668d40800133599d75121_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:0e0e0f327f586006f1333353184ebddccb91f1e4dc6ab0d3b96ce2e0e065808e_arm64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:f6f6aa6af83e4005c230be33d0ee66d1826c48bd8e1445049a1550b01a00e703_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-gcp-cuda-rhel9@sha256:3c547595d6b8170a6858ac6b922dc594613c350c9cfa37e83425c247fb795989_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-rocm-rhel9@sha256:d32e15099dad41250e88b8b5030ce34015e084edbf32b06bc00cf97cf30663cb_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9@sha256:fe3f9992abba61ac90a59107f6f37877876f7cc53378a9712eafb6ebb8a23ded_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9@sha256:20f1fe37363bad77ad79184fcd87a1e0b1789d97098726f9b1f9012a90e06929_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9@sha256:a5256e0394dbb29e2757969d0a4cacbd1205f3e09bb668d40800133599d75121_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:0e0e0f327f586006f1333353184ebddccb91f1e4dc6ab0d3b96ce2e0e065808e_arm64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:f6f6aa6af83e4005c230be33d0ee66d1826c48bd8e1445049a1550b01a00e703_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-gcp-cuda-rhel9@sha256:3c547595d6b8170a6858ac6b922dc594613c350c9cfa37e83425c247fb795989_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-rocm-rhel9@sha256:d32e15099dad41250e88b8b5030ce34015e084edbf32b06bc00cf97cf30663cb_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "pyasn1: pyasn1 Vulnerable to Denial of Service via Unbounded Recursion"
},
{
"cve": "CVE-2026-40192",
"cwe": {
"id": "CWE-409",
"name": "Improper Handling of Highly Compressed Data (Data Amplification)"
},
"discovery_date": "2026-04-16T00:00:49.590876+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2458856"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Pillow, a Python imaging library. This vulnerability allows a remote attacker to trigger a denial of service (DoS) by providing a specially crafted FITS image file. The library\u0027s failure to limit the amount of GZIP-compressed data during decoding can lead to unbounded memory consumption, causing the system to crash or experience severe performance issues.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Pillow: Pillow: Denial of Service via decompression bomb in FITS image processing",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9@sha256:fe3f9992abba61ac90a59107f6f37877876f7cc53378a9712eafb6ebb8a23ded_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9@sha256:20f1fe37363bad77ad79184fcd87a1e0b1789d97098726f9b1f9012a90e06929_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9@sha256:a5256e0394dbb29e2757969d0a4cacbd1205f3e09bb668d40800133599d75121_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:0e0e0f327f586006f1333353184ebddccb91f1e4dc6ab0d3b96ce2e0e065808e_arm64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:f6f6aa6af83e4005c230be33d0ee66d1826c48bd8e1445049a1550b01a00e703_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-gcp-cuda-rhel9@sha256:3c547595d6b8170a6858ac6b922dc594613c350c9cfa37e83425c247fb795989_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-rocm-rhel9@sha256:d32e15099dad41250e88b8b5030ce34015e084edbf32b06bc00cf97cf30663cb_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-40192"
},
{
"category": "external",
"summary": "RHBZ#2458856",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2458856"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-40192",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-40192"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-40192",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-40192"
},
{
"category": "external",
"summary": "https://github.com/python-pillow/Pillow/commit/3cb854e8b2bab43f40e342e665f9340d861aa628",
"url": "https://github.com/python-pillow/Pillow/commit/3cb854e8b2bab43f40e342e665f9340d861aa628"
},
{
"category": "external",
"summary": "https://github.com/python-pillow/Pillow/pull/9521",
"url": "https://github.com/python-pillow/Pillow/pull/9521"
},
{
"category": "external",
"summary": "https://github.com/python-pillow/Pillow/security/advisories/GHSA-whj4-6x5x-4v2j",
"url": "https://github.com/python-pillow/Pillow/security/advisories/GHSA-whj4-6x5x-4v2j"
},
{
"category": "external",
"summary": "https://pillow.readthedocs.io/en/stable/releasenotes/12.2.0.html#prevent-fits-decompression-bomb",
"url": "https://pillow.readthedocs.io/en/stable/releasenotes/12.2.0.html#prevent-fits-decompression-bomb"
}
],
"release_date": "2026-04-15T22:53:56.147000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-14T13:49:52+00:00",
"details": "Before applying this update, ensure all previously released errata relevant to your system have been applied.",
"product_ids": [
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9@sha256:fe3f9992abba61ac90a59107f6f37877876f7cc53378a9712eafb6ebb8a23ded_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9@sha256:20f1fe37363bad77ad79184fcd87a1e0b1789d97098726f9b1f9012a90e06929_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9@sha256:a5256e0394dbb29e2757969d0a4cacbd1205f3e09bb668d40800133599d75121_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:0e0e0f327f586006f1333353184ebddccb91f1e4dc6ab0d3b96ce2e0e065808e_arm64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:f6f6aa6af83e4005c230be33d0ee66d1826c48bd8e1445049a1550b01a00e703_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-gcp-cuda-rhel9@sha256:3c547595d6b8170a6858ac6b922dc594613c350c9cfa37e83425c247fb795989_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-rocm-rhel9@sha256:d32e15099dad41250e88b8b5030ce34015e084edbf32b06bc00cf97cf30663cb_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:17611"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9@sha256:fe3f9992abba61ac90a59107f6f37877876f7cc53378a9712eafb6ebb8a23ded_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9@sha256:20f1fe37363bad77ad79184fcd87a1e0b1789d97098726f9b1f9012a90e06929_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9@sha256:a5256e0394dbb29e2757969d0a4cacbd1205f3e09bb668d40800133599d75121_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:0e0e0f327f586006f1333353184ebddccb91f1e4dc6ab0d3b96ce2e0e065808e_arm64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:f6f6aa6af83e4005c230be33d0ee66d1826c48bd8e1445049a1550b01a00e703_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-gcp-cuda-rhel9@sha256:3c547595d6b8170a6858ac6b922dc594613c350c9cfa37e83425c247fb795989_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-rocm-rhel9@sha256:d32e15099dad41250e88b8b5030ce34015e084edbf32b06bc00cf97cf30663cb_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9@sha256:fe3f9992abba61ac90a59107f6f37877876f7cc53378a9712eafb6ebb8a23ded_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9@sha256:20f1fe37363bad77ad79184fcd87a1e0b1789d97098726f9b1f9012a90e06929_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9@sha256:a5256e0394dbb29e2757969d0a4cacbd1205f3e09bb668d40800133599d75121_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:0e0e0f327f586006f1333353184ebddccb91f1e4dc6ab0d3b96ce2e0e065808e_arm64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-cuda-rhel9@sha256:f6f6aa6af83e4005c230be33d0ee66d1826c48bd8e1445049a1550b01a00e703_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-gcp-cuda-rhel9@sha256:3c547595d6b8170a6858ac6b922dc594613c350c9cfa37e83425c247fb795989_amd64",
"Red Hat Enterprise Linux AI 3.3:registry.redhat.io/rhelai3/bootc-rocm-rhel9@sha256:d32e15099dad41250e88b8b5030ce34015e084edbf32b06bc00cf97cf30663cb_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Pillow: Pillow: Denial of Service via decompression bomb in FITS image processing"
}
]
}
RHSA-2026:19138
Vulnerability from csaf_redhat - Published: 2026-05-19 16:22 - Updated: 2026-07-20 04:37Summary
Red Hat Security Advisory: fence-agents security update
Severity
Important
Notes
Topic: An update for fence-agents is now available for Red Hat Enterprise Linux 10.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster.
Security Fix(es):
* pyjwt: PyJWT accepts unknown `crit` header extensions (RFC 7515 ?4.1.11 MUST violation) (CVE-2026-32597)
* pyasn1: pyasn1 Vulnerable to Denial of Service via Unbounded Recursion (CVE-2026-30922)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
An unbounded recursion flaw has been discovered in the pypi pyasn1 library. This uncontrolled recursion occurs when decoding ASN.1 data with deeply nested structures. An attacker can supply a crafted payload containing nested SEQUENCE (0x30) or SET (0x31) tags with Indefinite Length (0x80) markers. This forces the decoder to recursively call itself until the Python interpreter crashes with a RecursionError or consumes all available memory (OOM), crashing the host application.
7.5 (High)
Affected products
Fixed
96 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-10.2.Z:fence-agents-0:4.16.0-21.el10_2.1.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-agents-aliyun-0:4.16.0-21.el10_2.1.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-agents-all-0:4.16.0-21.el10_2.1.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-agents-all-0:4.16.0-21.el10_2.1.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-agents-all-0:4.16.0-21.el10_2.1.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-agents-all-0:4.16.0-21.el10_2.1.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-agents-amt-ws-0:4.16.0-21.el10_2.1.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-agents-apc-0:4.16.0-21.el10_2.1.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-agents-apc-snmp-0:4.16.0-21.el10_2.1.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-agents-aws-0:4.16.0-21.el10_2.1.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-agents-azure-arm-0:4.16.0-21.el10_2.1.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-agents-bladecenter-0:4.16.0-21.el10_2.1.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-agents-brocade-0:4.16.0-21.el10_2.1.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-agents-cisco-mds-0:4.16.0-21.el10_2.1.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-agents-cisco-ucs-0:4.16.0-21.el10_2.1.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-agents-common-0:4.16.0-21.el10_2.1.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-agents-common-0:4.16.0-21.el10_2.1.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-agents-common-0:4.16.0-21.el10_2.1.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-agents-common-0:4.16.0-21.el10_2.1.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-agents-common-debuginfo-0:4.16.0-21.el10_2.1.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-agents-common-debuginfo-0:4.16.0-21.el10_2.1.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-agents-common-debuginfo-0:4.16.0-21.el10_2.1.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-agents-common-debuginfo-0:4.16.0-21.el10_2.1.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-agents-debuginfo-0:4.16.0-21.el10_2.1.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-agents-debuginfo-0:4.16.0-21.el10_2.1.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-agents-debuginfo-0:4.16.0-21.el10_2.1.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-agents-debuginfo-0:4.16.0-21.el10_2.1.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-agents-debugsource-0:4.16.0-21.el10_2.1.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-agents-debugsource-0:4.16.0-21.el10_2.1.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-agents-debugsource-0:4.16.0-21.el10_2.1.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-agents-debugsource-0:4.16.0-21.el10_2.1.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-agents-drac5-0:4.16.0-21.el10_2.1.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-agents-eaton-snmp-0:4.16.0-21.el10_2.1.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-agents-emerson-0:4.16.0-21.el10_2.1.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-agents-eps-0:4.16.0-21.el10_2.1.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-agents-gce-0:4.16.0-21.el10_2.1.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-agents-heuristics-ping-0:4.16.0-21.el10_2.1.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-agents-hpblade-0:4.16.0-21.el10_2.1.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-agents-ibm-powervs-0:4.16.0-21.el10_2.1.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-agents-ibm-vpc-0:4.16.0-21.el10_2.1.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-agents-ibmblade-0:4.16.0-21.el10_2.1.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-agents-ifmib-0:4.16.0-21.el10_2.1.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-agents-ilo-moonshot-0:4.16.0-21.el10_2.1.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-agents-ilo-mp-0:4.16.0-21.el10_2.1.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-agents-ilo-ssh-0:4.16.0-21.el10_2.1.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-agents-ilo2-0:4.16.0-21.el10_2.1.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-agents-intelmodular-0:4.16.0-21.el10_2.1.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-agents-ipdu-0:4.16.0-21.el10_2.1.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-agents-ipmilan-0:4.16.0-21.el10_2.1.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-agents-kdump-0:4.16.0-21.el10_2.1.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-agents-kdump-0:4.16.0-21.el10_2.1.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-agents-kdump-0:4.16.0-21.el10_2.1.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-agents-kdump-0:4.16.0-21.el10_2.1.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-agents-kdump-debuginfo-0:4.16.0-21.el10_2.1.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-agents-kdump-debuginfo-0:4.16.0-21.el10_2.1.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-agents-kdump-debuginfo-0:4.16.0-21.el10_2.1.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-agents-kdump-debuginfo-0:4.16.0-21.el10_2.1.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-agents-kubevirt-0:4.16.0-21.el10_2.1.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-agents-kubevirt-0:4.16.0-21.el10_2.1.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-agents-kubevirt-0:4.16.0-21.el10_2.1.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-agents-kubevirt-0:4.16.0-21.el10_2.1.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-agents-lpar-0:4.16.0-21.el10_2.1.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-agents-mpath-0:4.16.0-21.el10_2.1.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-agents-nutanix-ahv-0:4.16.0-21.el10_2.1.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-agents-openstack-0:4.16.0-21.el10_2.1.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-agents-openstack-0:4.16.0-21.el10_2.1.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-agents-redfish-0:4.16.0-21.el10_2.1.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-agents-redfish-0:4.16.0-21.el10_2.1.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-agents-redfish-0:4.16.0-21.el10_2.1.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-agents-redfish-0:4.16.0-21.el10_2.1.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-agents-rhevm-0:4.16.0-21.el10_2.1.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-agents-rsa-0:4.16.0-21.el10_2.1.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-agents-rsb-0:4.16.0-21.el10_2.1.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-agents-sbd-0:4.16.0-21.el10_2.1.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-agents-scsi-0:4.16.0-21.el10_2.1.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-agents-virsh-0:4.16.0-21.el10_2.1.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-agents-vmware-rest-0:4.16.0-21.el10_2.1.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-agents-vmware-soap-0:4.16.0-21.el10_2.1.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-agents-wti-0:4.16.0-21.el10_2.1.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-agents-zvm-0:4.16.0-21.el10_2.1.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-virt-0:4.16.0-21.el10_2.1.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-virt-debuginfo-0:4.16.0-21.el10_2.1.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-virtd-0:4.16.0-21.el10_2.1.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-virtd-cpg-0:4.16.0-21.el10_2.1.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-virtd-cpg-debuginfo-0:4.16.0-21.el10_2.1.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-virtd-debuginfo-0:4.16.0-21.el10_2.1.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-virtd-libvirt-0:4.16.0-21.el10_2.1.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-virtd-libvirt-debuginfo-0:4.16.0-21.el10_2.1.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-virtd-multicast-0:4.16.0-21.el10_2.1.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-virtd-multicast-debuginfo-0:4.16.0-21.el10_2.1.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-virtd-serial-0:4.16.0-21.el10_2.1.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-virtd-serial-debuginfo-0:4.16.0-21.el10_2.1.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-virtd-tcp-0:4.16.0-21.el10_2.1.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-virtd-tcp-debuginfo-0:4.16.0-21.el10_2.1.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:ha-cloud-support-0:4.16.0-21.el10_2.1.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:ha-cloud-support-debuginfo-0:4.16.0-21.el10_2.1.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A missing verification step has been discovered in PyJWT. PyJWT does not validate the crit (Critical) Header Parameter defined in RFC 7515 §4.1.11. When a JWS token contains a crit array listing extensions that PyJWT does not understand, the library accepts the token instead of rejecting it. This violates the MUST requirement in the RFC.
7.5 (High)
Affected products
Fixed
96 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-10.2.Z:fence-agents-0:4.16.0-21.el10_2.1.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-agents-aliyun-0:4.16.0-21.el10_2.1.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-agents-all-0:4.16.0-21.el10_2.1.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-agents-all-0:4.16.0-21.el10_2.1.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-agents-all-0:4.16.0-21.el10_2.1.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-agents-all-0:4.16.0-21.el10_2.1.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-agents-amt-ws-0:4.16.0-21.el10_2.1.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-agents-apc-0:4.16.0-21.el10_2.1.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-agents-apc-snmp-0:4.16.0-21.el10_2.1.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-agents-aws-0:4.16.0-21.el10_2.1.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-agents-azure-arm-0:4.16.0-21.el10_2.1.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-agents-bladecenter-0:4.16.0-21.el10_2.1.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-agents-brocade-0:4.16.0-21.el10_2.1.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-agents-cisco-mds-0:4.16.0-21.el10_2.1.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-agents-cisco-ucs-0:4.16.0-21.el10_2.1.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-agents-common-0:4.16.0-21.el10_2.1.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-agents-common-0:4.16.0-21.el10_2.1.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-agents-common-0:4.16.0-21.el10_2.1.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-agents-common-0:4.16.0-21.el10_2.1.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-agents-common-debuginfo-0:4.16.0-21.el10_2.1.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-agents-common-debuginfo-0:4.16.0-21.el10_2.1.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-agents-common-debuginfo-0:4.16.0-21.el10_2.1.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-agents-common-debuginfo-0:4.16.0-21.el10_2.1.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-agents-debuginfo-0:4.16.0-21.el10_2.1.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-agents-debuginfo-0:4.16.0-21.el10_2.1.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-agents-debuginfo-0:4.16.0-21.el10_2.1.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-agents-debuginfo-0:4.16.0-21.el10_2.1.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-agents-debugsource-0:4.16.0-21.el10_2.1.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-agents-debugsource-0:4.16.0-21.el10_2.1.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-agents-debugsource-0:4.16.0-21.el10_2.1.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-agents-debugsource-0:4.16.0-21.el10_2.1.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-agents-drac5-0:4.16.0-21.el10_2.1.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-agents-eaton-snmp-0:4.16.0-21.el10_2.1.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-agents-emerson-0:4.16.0-21.el10_2.1.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-agents-eps-0:4.16.0-21.el10_2.1.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-agents-gce-0:4.16.0-21.el10_2.1.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-agents-heuristics-ping-0:4.16.0-21.el10_2.1.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-agents-hpblade-0:4.16.0-21.el10_2.1.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-agents-ibm-powervs-0:4.16.0-21.el10_2.1.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-agents-ibm-vpc-0:4.16.0-21.el10_2.1.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-agents-ibmblade-0:4.16.0-21.el10_2.1.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-agents-ifmib-0:4.16.0-21.el10_2.1.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-agents-ilo-moonshot-0:4.16.0-21.el10_2.1.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-agents-ilo-mp-0:4.16.0-21.el10_2.1.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-agents-ilo-ssh-0:4.16.0-21.el10_2.1.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-agents-ilo2-0:4.16.0-21.el10_2.1.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-agents-intelmodular-0:4.16.0-21.el10_2.1.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-agents-ipdu-0:4.16.0-21.el10_2.1.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-agents-ipmilan-0:4.16.0-21.el10_2.1.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-agents-kdump-0:4.16.0-21.el10_2.1.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-agents-kdump-0:4.16.0-21.el10_2.1.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-agents-kdump-0:4.16.0-21.el10_2.1.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-agents-kdump-0:4.16.0-21.el10_2.1.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-agents-kdump-debuginfo-0:4.16.0-21.el10_2.1.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-agents-kdump-debuginfo-0:4.16.0-21.el10_2.1.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-agents-kdump-debuginfo-0:4.16.0-21.el10_2.1.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-agents-kdump-debuginfo-0:4.16.0-21.el10_2.1.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-agents-kubevirt-0:4.16.0-21.el10_2.1.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-agents-kubevirt-0:4.16.0-21.el10_2.1.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-agents-kubevirt-0:4.16.0-21.el10_2.1.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-agents-kubevirt-0:4.16.0-21.el10_2.1.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-agents-lpar-0:4.16.0-21.el10_2.1.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-agents-mpath-0:4.16.0-21.el10_2.1.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-agents-nutanix-ahv-0:4.16.0-21.el10_2.1.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-agents-openstack-0:4.16.0-21.el10_2.1.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-agents-openstack-0:4.16.0-21.el10_2.1.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-agents-redfish-0:4.16.0-21.el10_2.1.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-agents-redfish-0:4.16.0-21.el10_2.1.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-agents-redfish-0:4.16.0-21.el10_2.1.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-agents-redfish-0:4.16.0-21.el10_2.1.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-agents-rhevm-0:4.16.0-21.el10_2.1.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-agents-rsa-0:4.16.0-21.el10_2.1.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-agents-rsb-0:4.16.0-21.el10_2.1.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-agents-sbd-0:4.16.0-21.el10_2.1.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-agents-scsi-0:4.16.0-21.el10_2.1.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-agents-virsh-0:4.16.0-21.el10_2.1.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-agents-vmware-rest-0:4.16.0-21.el10_2.1.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-agents-vmware-soap-0:4.16.0-21.el10_2.1.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-agents-wti-0:4.16.0-21.el10_2.1.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-agents-zvm-0:4.16.0-21.el10_2.1.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-virt-0:4.16.0-21.el10_2.1.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-virt-debuginfo-0:4.16.0-21.el10_2.1.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-virtd-0:4.16.0-21.el10_2.1.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-virtd-cpg-0:4.16.0-21.el10_2.1.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-virtd-cpg-debuginfo-0:4.16.0-21.el10_2.1.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-virtd-debuginfo-0:4.16.0-21.el10_2.1.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-virtd-libvirt-0:4.16.0-21.el10_2.1.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-virtd-libvirt-debuginfo-0:4.16.0-21.el10_2.1.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-virtd-multicast-0:4.16.0-21.el10_2.1.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-virtd-multicast-debuginfo-0:4.16.0-21.el10_2.1.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-virtd-serial-0:4.16.0-21.el10_2.1.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-virtd-serial-debuginfo-0:4.16.0-21.el10_2.1.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-virtd-tcp-0:4.16.0-21.el10_2.1.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:fence-virtd-tcp-debuginfo-0:4.16.0-21.el10_2.1.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:ha-cloud-support-0:4.16.0-21.el10_2.1.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-10.2.Z:ha-cloud-support-debuginfo-0:4.16.0-21.el10_2.1.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
References
16 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for fence-agents is now available for Red Hat Enterprise Linux 10.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster. \n\nSecurity Fix(es):\n\n* pyjwt: PyJWT accepts unknown `crit` header extensions (RFC 7515 ?4.1.11 MUST violation) (CVE-2026-32597)\n\n* pyasn1: pyasn1 Vulnerable to Denial of Service via Unbounded Recursion (CVE-2026-30922)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:19138",
"url": "https://access.redhat.com/errata/RHSA-2026:19138"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2447194",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2447194"
},
{
"category": "external",
"summary": "2448553",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2448553"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_19138.json"
}
],
"title": "Red Hat Security Advisory: fence-agents security update",
"tracking": {
"current_release_date": "2026-07-20T04:37:01+00:00",
"generator": {
"date": "2026-07-20T04:37:01+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.7"
}
},
"id": "RHSA-2026:19138",
"initial_release_date": "2026-05-19T16:22:56+00:00",
"revision_history": [
{
"date": "2026-05-19T16:22:56+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-05-19T16:22:56+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-07-20T04:37:01+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AppStream (v. 10)",
"product": {
"name": "Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:10.2"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "fence-agents-0:4.16.0-21.el10_2.1.src",
"product": {
"name": "fence-agents-0:4.16.0-21.el10_2.1.src",
"product_id": "fence-agents-0:4.16.0-21.el10_2.1.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents@4.16.0-21.el10_2.1?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "fence-agents-aliyun-0:4.16.0-21.el10_2.1.x86_64",
"product": {
"name": "fence-agents-aliyun-0:4.16.0-21.el10_2.1.x86_64",
"product_id": "fence-agents-aliyun-0:4.16.0-21.el10_2.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-aliyun@4.16.0-21.el10_2.1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "fence-agents-all-0:4.16.0-21.el10_2.1.x86_64",
"product": {
"name": "fence-agents-all-0:4.16.0-21.el10_2.1.x86_64",
"product_id": "fence-agents-all-0:4.16.0-21.el10_2.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-all@4.16.0-21.el10_2.1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "fence-agents-aws-0:4.16.0-21.el10_2.1.x86_64",
"product": {
"name": "fence-agents-aws-0:4.16.0-21.el10_2.1.x86_64",
"product_id": "fence-agents-aws-0:4.16.0-21.el10_2.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-aws@4.16.0-21.el10_2.1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "fence-agents-azure-arm-0:4.16.0-21.el10_2.1.x86_64",
"product": {
"name": "fence-agents-azure-arm-0:4.16.0-21.el10_2.1.x86_64",
"product_id": "fence-agents-azure-arm-0:4.16.0-21.el10_2.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-azure-arm@4.16.0-21.el10_2.1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "fence-agents-common-0:4.16.0-21.el10_2.1.x86_64",
"product": {
"name": "fence-agents-common-0:4.16.0-21.el10_2.1.x86_64",
"product_id": "fence-agents-common-0:4.16.0-21.el10_2.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-common@4.16.0-21.el10_2.1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "fence-agents-gce-0:4.16.0-21.el10_2.1.x86_64",
"product": {
"name": "fence-agents-gce-0:4.16.0-21.el10_2.1.x86_64",
"product_id": "fence-agents-gce-0:4.16.0-21.el10_2.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-gce@4.16.0-21.el10_2.1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "fence-agents-kdump-0:4.16.0-21.el10_2.1.x86_64",
"product": {
"name": "fence-agents-kdump-0:4.16.0-21.el10_2.1.x86_64",
"product_id": "fence-agents-kdump-0:4.16.0-21.el10_2.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-kdump@4.16.0-21.el10_2.1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "fence-agents-kubevirt-0:4.16.0-21.el10_2.1.x86_64",
"product": {
"name": "fence-agents-kubevirt-0:4.16.0-21.el10_2.1.x86_64",
"product_id": "fence-agents-kubevirt-0:4.16.0-21.el10_2.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-kubevirt@4.16.0-21.el10_2.1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "fence-agents-openstack-0:4.16.0-21.el10_2.1.x86_64",
"product": {
"name": "fence-agents-openstack-0:4.16.0-21.el10_2.1.x86_64",
"product_id": "fence-agents-openstack-0:4.16.0-21.el10_2.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-openstack@4.16.0-21.el10_2.1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "fence-agents-redfish-0:4.16.0-21.el10_2.1.x86_64",
"product": {
"name": "fence-agents-redfish-0:4.16.0-21.el10_2.1.x86_64",
"product_id": "fence-agents-redfish-0:4.16.0-21.el10_2.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-redfish@4.16.0-21.el10_2.1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "fence-virt-0:4.16.0-21.el10_2.1.x86_64",
"product": {
"name": "fence-virt-0:4.16.0-21.el10_2.1.x86_64",
"product_id": "fence-virt-0:4.16.0-21.el10_2.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-virt@4.16.0-21.el10_2.1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "fence-virtd-0:4.16.0-21.el10_2.1.x86_64",
"product": {
"name": "fence-virtd-0:4.16.0-21.el10_2.1.x86_64",
"product_id": "fence-virtd-0:4.16.0-21.el10_2.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-virtd@4.16.0-21.el10_2.1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "fence-virtd-cpg-0:4.16.0-21.el10_2.1.x86_64",
"product": {
"name": "fence-virtd-cpg-0:4.16.0-21.el10_2.1.x86_64",
"product_id": "fence-virtd-cpg-0:4.16.0-21.el10_2.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-virtd-cpg@4.16.0-21.el10_2.1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "fence-virtd-libvirt-0:4.16.0-21.el10_2.1.x86_64",
"product": {
"name": "fence-virtd-libvirt-0:4.16.0-21.el10_2.1.x86_64",
"product_id": "fence-virtd-libvirt-0:4.16.0-21.el10_2.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-virtd-libvirt@4.16.0-21.el10_2.1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "fence-virtd-multicast-0:4.16.0-21.el10_2.1.x86_64",
"product": {
"name": "fence-virtd-multicast-0:4.16.0-21.el10_2.1.x86_64",
"product_id": "fence-virtd-multicast-0:4.16.0-21.el10_2.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-virtd-multicast@4.16.0-21.el10_2.1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "fence-virtd-serial-0:4.16.0-21.el10_2.1.x86_64",
"product": {
"name": "fence-virtd-serial-0:4.16.0-21.el10_2.1.x86_64",
"product_id": "fence-virtd-serial-0:4.16.0-21.el10_2.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-virtd-serial@4.16.0-21.el10_2.1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "fence-virtd-tcp-0:4.16.0-21.el10_2.1.x86_64",
"product": {
"name": "fence-virtd-tcp-0:4.16.0-21.el10_2.1.x86_64",
"product_id": "fence-virtd-tcp-0:4.16.0-21.el10_2.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-virtd-tcp@4.16.0-21.el10_2.1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "ha-cloud-support-0:4.16.0-21.el10_2.1.x86_64",
"product": {
"name": "ha-cloud-support-0:4.16.0-21.el10_2.1.x86_64",
"product_id": "ha-cloud-support-0:4.16.0-21.el10_2.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ha-cloud-support@4.16.0-21.el10_2.1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "fence-agents-debugsource-0:4.16.0-21.el10_2.1.x86_64",
"product": {
"name": "fence-agents-debugsource-0:4.16.0-21.el10_2.1.x86_64",
"product_id": "fence-agents-debugsource-0:4.16.0-21.el10_2.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-debugsource@4.16.0-21.el10_2.1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "fence-agents-common-debuginfo-0:4.16.0-21.el10_2.1.x86_64",
"product": {
"name": "fence-agents-common-debuginfo-0:4.16.0-21.el10_2.1.x86_64",
"product_id": "fence-agents-common-debuginfo-0:4.16.0-21.el10_2.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-common-debuginfo@4.16.0-21.el10_2.1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "fence-agents-debuginfo-0:4.16.0-21.el10_2.1.x86_64",
"product": {
"name": "fence-agents-debuginfo-0:4.16.0-21.el10_2.1.x86_64",
"product_id": "fence-agents-debuginfo-0:4.16.0-21.el10_2.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-debuginfo@4.16.0-21.el10_2.1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "fence-agents-kdump-debuginfo-0:4.16.0-21.el10_2.1.x86_64",
"product": {
"name": "fence-agents-kdump-debuginfo-0:4.16.0-21.el10_2.1.x86_64",
"product_id": "fence-agents-kdump-debuginfo-0:4.16.0-21.el10_2.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-kdump-debuginfo@4.16.0-21.el10_2.1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "fence-virt-debuginfo-0:4.16.0-21.el10_2.1.x86_64",
"product": {
"name": "fence-virt-debuginfo-0:4.16.0-21.el10_2.1.x86_64",
"product_id": "fence-virt-debuginfo-0:4.16.0-21.el10_2.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-virt-debuginfo@4.16.0-21.el10_2.1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "fence-virtd-cpg-debuginfo-0:4.16.0-21.el10_2.1.x86_64",
"product": {
"name": "fence-virtd-cpg-debuginfo-0:4.16.0-21.el10_2.1.x86_64",
"product_id": "fence-virtd-cpg-debuginfo-0:4.16.0-21.el10_2.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-virtd-cpg-debuginfo@4.16.0-21.el10_2.1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "fence-virtd-debuginfo-0:4.16.0-21.el10_2.1.x86_64",
"product": {
"name": "fence-virtd-debuginfo-0:4.16.0-21.el10_2.1.x86_64",
"product_id": "fence-virtd-debuginfo-0:4.16.0-21.el10_2.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-virtd-debuginfo@4.16.0-21.el10_2.1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "fence-virtd-libvirt-debuginfo-0:4.16.0-21.el10_2.1.x86_64",
"product": {
"name": "fence-virtd-libvirt-debuginfo-0:4.16.0-21.el10_2.1.x86_64",
"product_id": "fence-virtd-libvirt-debuginfo-0:4.16.0-21.el10_2.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-virtd-libvirt-debuginfo@4.16.0-21.el10_2.1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "fence-virtd-multicast-debuginfo-0:4.16.0-21.el10_2.1.x86_64",
"product": {
"name": "fence-virtd-multicast-debuginfo-0:4.16.0-21.el10_2.1.x86_64",
"product_id": "fence-virtd-multicast-debuginfo-0:4.16.0-21.el10_2.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-virtd-multicast-debuginfo@4.16.0-21.el10_2.1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "fence-virtd-serial-debuginfo-0:4.16.0-21.el10_2.1.x86_64",
"product": {
"name": "fence-virtd-serial-debuginfo-0:4.16.0-21.el10_2.1.x86_64",
"product_id": "fence-virtd-serial-debuginfo-0:4.16.0-21.el10_2.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-virtd-serial-debuginfo@4.16.0-21.el10_2.1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "fence-virtd-tcp-debuginfo-0:4.16.0-21.el10_2.1.x86_64",
"product": {
"name": "fence-virtd-tcp-debuginfo-0:4.16.0-21.el10_2.1.x86_64",
"product_id": "fence-virtd-tcp-debuginfo-0:4.16.0-21.el10_2.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-virtd-tcp-debuginfo@4.16.0-21.el10_2.1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "ha-cloud-support-debuginfo-0:4.16.0-21.el10_2.1.x86_64",
"product": {
"name": "ha-cloud-support-debuginfo-0:4.16.0-21.el10_2.1.x86_64",
"product_id": "ha-cloud-support-debuginfo-0:4.16.0-21.el10_2.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ha-cloud-support-debuginfo@4.16.0-21.el10_2.1?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "fence-agents-all-0:4.16.0-21.el10_2.1.ppc64le",
"product": {
"name": "fence-agents-all-0:4.16.0-21.el10_2.1.ppc64le",
"product_id": "fence-agents-all-0:4.16.0-21.el10_2.1.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-all@4.16.0-21.el10_2.1?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "fence-agents-common-0:4.16.0-21.el10_2.1.ppc64le",
"product": {
"name": "fence-agents-common-0:4.16.0-21.el10_2.1.ppc64le",
"product_id": "fence-agents-common-0:4.16.0-21.el10_2.1.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-common@4.16.0-21.el10_2.1?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "fence-agents-kdump-0:4.16.0-21.el10_2.1.ppc64le",
"product": {
"name": "fence-agents-kdump-0:4.16.0-21.el10_2.1.ppc64le",
"product_id": "fence-agents-kdump-0:4.16.0-21.el10_2.1.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-kdump@4.16.0-21.el10_2.1?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "fence-agents-kubevirt-0:4.16.0-21.el10_2.1.ppc64le",
"product": {
"name": "fence-agents-kubevirt-0:4.16.0-21.el10_2.1.ppc64le",
"product_id": "fence-agents-kubevirt-0:4.16.0-21.el10_2.1.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-kubevirt@4.16.0-21.el10_2.1?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "fence-agents-openstack-0:4.16.0-21.el10_2.1.ppc64le",
"product": {
"name": "fence-agents-openstack-0:4.16.0-21.el10_2.1.ppc64le",
"product_id": "fence-agents-openstack-0:4.16.0-21.el10_2.1.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-openstack@4.16.0-21.el10_2.1?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "fence-agents-redfish-0:4.16.0-21.el10_2.1.ppc64le",
"product": {
"name": "fence-agents-redfish-0:4.16.0-21.el10_2.1.ppc64le",
"product_id": "fence-agents-redfish-0:4.16.0-21.el10_2.1.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-redfish@4.16.0-21.el10_2.1?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "fence-agents-debugsource-0:4.16.0-21.el10_2.1.ppc64le",
"product": {
"name": "fence-agents-debugsource-0:4.16.0-21.el10_2.1.ppc64le",
"product_id": "fence-agents-debugsource-0:4.16.0-21.el10_2.1.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-debugsource@4.16.0-21.el10_2.1?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "fence-agents-common-debuginfo-0:4.16.0-21.el10_2.1.ppc64le",
"product": {
"name": "fence-agents-common-debuginfo-0:4.16.0-21.el10_2.1.ppc64le",
"product_id": "fence-agents-common-debuginfo-0:4.16.0-21.el10_2.1.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-common-debuginfo@4.16.0-21.el10_2.1?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "fence-agents-debuginfo-0:4.16.0-21.el10_2.1.ppc64le",
"product": {
"name": "fence-agents-debuginfo-0:4.16.0-21.el10_2.1.ppc64le",
"product_id": "fence-agents-debuginfo-0:4.16.0-21.el10_2.1.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-debuginfo@4.16.0-21.el10_2.1?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "fence-agents-kdump-debuginfo-0:4.16.0-21.el10_2.1.ppc64le",
"product": {
"name": "fence-agents-kdump-debuginfo-0:4.16.0-21.el10_2.1.ppc64le",
"product_id": "fence-agents-kdump-debuginfo-0:4.16.0-21.el10_2.1.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-kdump-debuginfo@4.16.0-21.el10_2.1?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "fence-agents-all-0:4.16.0-21.el10_2.1.aarch64",
"product": {
"name": "fence-agents-all-0:4.16.0-21.el10_2.1.aarch64",
"product_id": "fence-agents-all-0:4.16.0-21.el10_2.1.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-all@4.16.0-21.el10_2.1?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "fence-agents-common-0:4.16.0-21.el10_2.1.aarch64",
"product": {
"name": "fence-agents-common-0:4.16.0-21.el10_2.1.aarch64",
"product_id": "fence-agents-common-0:4.16.0-21.el10_2.1.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-common@4.16.0-21.el10_2.1?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "fence-agents-kdump-0:4.16.0-21.el10_2.1.aarch64",
"product": {
"name": "fence-agents-kdump-0:4.16.0-21.el10_2.1.aarch64",
"product_id": "fence-agents-kdump-0:4.16.0-21.el10_2.1.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-kdump@4.16.0-21.el10_2.1?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "fence-agents-kubevirt-0:4.16.0-21.el10_2.1.aarch64",
"product": {
"name": "fence-agents-kubevirt-0:4.16.0-21.el10_2.1.aarch64",
"product_id": "fence-agents-kubevirt-0:4.16.0-21.el10_2.1.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-kubevirt@4.16.0-21.el10_2.1?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "fence-agents-redfish-0:4.16.0-21.el10_2.1.aarch64",
"product": {
"name": "fence-agents-redfish-0:4.16.0-21.el10_2.1.aarch64",
"product_id": "fence-agents-redfish-0:4.16.0-21.el10_2.1.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-redfish@4.16.0-21.el10_2.1?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "fence-agents-debugsource-0:4.16.0-21.el10_2.1.aarch64",
"product": {
"name": "fence-agents-debugsource-0:4.16.0-21.el10_2.1.aarch64",
"product_id": "fence-agents-debugsource-0:4.16.0-21.el10_2.1.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-debugsource@4.16.0-21.el10_2.1?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "fence-agents-common-debuginfo-0:4.16.0-21.el10_2.1.aarch64",
"product": {
"name": "fence-agents-common-debuginfo-0:4.16.0-21.el10_2.1.aarch64",
"product_id": "fence-agents-common-debuginfo-0:4.16.0-21.el10_2.1.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-common-debuginfo@4.16.0-21.el10_2.1?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "fence-agents-debuginfo-0:4.16.0-21.el10_2.1.aarch64",
"product": {
"name": "fence-agents-debuginfo-0:4.16.0-21.el10_2.1.aarch64",
"product_id": "fence-agents-debuginfo-0:4.16.0-21.el10_2.1.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-debuginfo@4.16.0-21.el10_2.1?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "fence-agents-kdump-debuginfo-0:4.16.0-21.el10_2.1.aarch64",
"product": {
"name": "fence-agents-kdump-debuginfo-0:4.16.0-21.el10_2.1.aarch64",
"product_id": "fence-agents-kdump-debuginfo-0:4.16.0-21.el10_2.1.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-kdump-debuginfo@4.16.0-21.el10_2.1?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "fence-agents-all-0:4.16.0-21.el10_2.1.s390x",
"product": {
"name": "fence-agents-all-0:4.16.0-21.el10_2.1.s390x",
"product_id": "fence-agents-all-0:4.16.0-21.el10_2.1.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-all@4.16.0-21.el10_2.1?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "fence-agents-common-0:4.16.0-21.el10_2.1.s390x",
"product": {
"name": "fence-agents-common-0:4.16.0-21.el10_2.1.s390x",
"product_id": "fence-agents-common-0:4.16.0-21.el10_2.1.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-common@4.16.0-21.el10_2.1?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "fence-agents-kdump-0:4.16.0-21.el10_2.1.s390x",
"product": {
"name": "fence-agents-kdump-0:4.16.0-21.el10_2.1.s390x",
"product_id": "fence-agents-kdump-0:4.16.0-21.el10_2.1.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-kdump@4.16.0-21.el10_2.1?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "fence-agents-kubevirt-0:4.16.0-21.el10_2.1.s390x",
"product": {
"name": "fence-agents-kubevirt-0:4.16.0-21.el10_2.1.s390x",
"product_id": "fence-agents-kubevirt-0:4.16.0-21.el10_2.1.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-kubevirt@4.16.0-21.el10_2.1?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "fence-agents-redfish-0:4.16.0-21.el10_2.1.s390x",
"product": {
"name": "fence-agents-redfish-0:4.16.0-21.el10_2.1.s390x",
"product_id": "fence-agents-redfish-0:4.16.0-21.el10_2.1.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-redfish@4.16.0-21.el10_2.1?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "fence-agents-zvm-0:4.16.0-21.el10_2.1.s390x",
"product": {
"name": "fence-agents-zvm-0:4.16.0-21.el10_2.1.s390x",
"product_id": "fence-agents-zvm-0:4.16.0-21.el10_2.1.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-zvm@4.16.0-21.el10_2.1?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "fence-agents-debugsource-0:4.16.0-21.el10_2.1.s390x",
"product": {
"name": "fence-agents-debugsource-0:4.16.0-21.el10_2.1.s390x",
"product_id": "fence-agents-debugsource-0:4.16.0-21.el10_2.1.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-debugsource@4.16.0-21.el10_2.1?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "fence-agents-common-debuginfo-0:4.16.0-21.el10_2.1.s390x",
"product": {
"name": "fence-agents-common-debuginfo-0:4.16.0-21.el10_2.1.s390x",
"product_id": "fence-agents-common-debuginfo-0:4.16.0-21.el10_2.1.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-common-debuginfo@4.16.0-21.el10_2.1?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "fence-agents-debuginfo-0:4.16.0-21.el10_2.1.s390x",
"product": {
"name": "fence-agents-debuginfo-0:4.16.0-21.el10_2.1.s390x",
"product_id": "fence-agents-debuginfo-0:4.16.0-21.el10_2.1.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-debuginfo@4.16.0-21.el10_2.1?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "fence-agents-kdump-debuginfo-0:4.16.0-21.el10_2.1.s390x",
"product": {
"name": "fence-agents-kdump-debuginfo-0:4.16.0-21.el10_2.1.s390x",
"product_id": "fence-agents-kdump-debuginfo-0:4.16.0-21.el10_2.1.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-kdump-debuginfo@4.16.0-21.el10_2.1?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "fence-agents-amt-ws-0:4.16.0-21.el10_2.1.noarch",
"product": {
"name": "fence-agents-amt-ws-0:4.16.0-21.el10_2.1.noarch",
"product_id": "fence-agents-amt-ws-0:4.16.0-21.el10_2.1.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-amt-ws@4.16.0-21.el10_2.1?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-apc-0:4.16.0-21.el10_2.1.noarch",
"product": {
"name": "fence-agents-apc-0:4.16.0-21.el10_2.1.noarch",
"product_id": "fence-agents-apc-0:4.16.0-21.el10_2.1.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-apc@4.16.0-21.el10_2.1?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-apc-snmp-0:4.16.0-21.el10_2.1.noarch",
"product": {
"name": "fence-agents-apc-snmp-0:4.16.0-21.el10_2.1.noarch",
"product_id": "fence-agents-apc-snmp-0:4.16.0-21.el10_2.1.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-apc-snmp@4.16.0-21.el10_2.1?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-bladecenter-0:4.16.0-21.el10_2.1.noarch",
"product": {
"name": "fence-agents-bladecenter-0:4.16.0-21.el10_2.1.noarch",
"product_id": "fence-agents-bladecenter-0:4.16.0-21.el10_2.1.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-bladecenter@4.16.0-21.el10_2.1?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-brocade-0:4.16.0-21.el10_2.1.noarch",
"product": {
"name": "fence-agents-brocade-0:4.16.0-21.el10_2.1.noarch",
"product_id": "fence-agents-brocade-0:4.16.0-21.el10_2.1.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-brocade@4.16.0-21.el10_2.1?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-cisco-mds-0:4.16.0-21.el10_2.1.noarch",
"product": {
"name": "fence-agents-cisco-mds-0:4.16.0-21.el10_2.1.noarch",
"product_id": "fence-agents-cisco-mds-0:4.16.0-21.el10_2.1.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-cisco-mds@4.16.0-21.el10_2.1?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-cisco-ucs-0:4.16.0-21.el10_2.1.noarch",
"product": {
"name": "fence-agents-cisco-ucs-0:4.16.0-21.el10_2.1.noarch",
"product_id": "fence-agents-cisco-ucs-0:4.16.0-21.el10_2.1.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-cisco-ucs@4.16.0-21.el10_2.1?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-drac5-0:4.16.0-21.el10_2.1.noarch",
"product": {
"name": "fence-agents-drac5-0:4.16.0-21.el10_2.1.noarch",
"product_id": "fence-agents-drac5-0:4.16.0-21.el10_2.1.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-drac5@4.16.0-21.el10_2.1?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-eaton-snmp-0:4.16.0-21.el10_2.1.noarch",
"product": {
"name": "fence-agents-eaton-snmp-0:4.16.0-21.el10_2.1.noarch",
"product_id": "fence-agents-eaton-snmp-0:4.16.0-21.el10_2.1.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-eaton-snmp@4.16.0-21.el10_2.1?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-emerson-0:4.16.0-21.el10_2.1.noarch",
"product": {
"name": "fence-agents-emerson-0:4.16.0-21.el10_2.1.noarch",
"product_id": "fence-agents-emerson-0:4.16.0-21.el10_2.1.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-emerson@4.16.0-21.el10_2.1?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-eps-0:4.16.0-21.el10_2.1.noarch",
"product": {
"name": "fence-agents-eps-0:4.16.0-21.el10_2.1.noarch",
"product_id": "fence-agents-eps-0:4.16.0-21.el10_2.1.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-eps@4.16.0-21.el10_2.1?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-heuristics-ping-0:4.16.0-21.el10_2.1.noarch",
"product": {
"name": "fence-agents-heuristics-ping-0:4.16.0-21.el10_2.1.noarch",
"product_id": "fence-agents-heuristics-ping-0:4.16.0-21.el10_2.1.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-heuristics-ping@4.16.0-21.el10_2.1?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-hpblade-0:4.16.0-21.el10_2.1.noarch",
"product": {
"name": "fence-agents-hpblade-0:4.16.0-21.el10_2.1.noarch",
"product_id": "fence-agents-hpblade-0:4.16.0-21.el10_2.1.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-hpblade@4.16.0-21.el10_2.1?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-ibm-powervs-0:4.16.0-21.el10_2.1.noarch",
"product": {
"name": "fence-agents-ibm-powervs-0:4.16.0-21.el10_2.1.noarch",
"product_id": "fence-agents-ibm-powervs-0:4.16.0-21.el10_2.1.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-ibm-powervs@4.16.0-21.el10_2.1?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-ibm-vpc-0:4.16.0-21.el10_2.1.noarch",
"product": {
"name": "fence-agents-ibm-vpc-0:4.16.0-21.el10_2.1.noarch",
"product_id": "fence-agents-ibm-vpc-0:4.16.0-21.el10_2.1.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-ibm-vpc@4.16.0-21.el10_2.1?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-ibmblade-0:4.16.0-21.el10_2.1.noarch",
"product": {
"name": "fence-agents-ibmblade-0:4.16.0-21.el10_2.1.noarch",
"product_id": "fence-agents-ibmblade-0:4.16.0-21.el10_2.1.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-ibmblade@4.16.0-21.el10_2.1?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-ifmib-0:4.16.0-21.el10_2.1.noarch",
"product": {
"name": "fence-agents-ifmib-0:4.16.0-21.el10_2.1.noarch",
"product_id": "fence-agents-ifmib-0:4.16.0-21.el10_2.1.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-ifmib@4.16.0-21.el10_2.1?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-ilo-moonshot-0:4.16.0-21.el10_2.1.noarch",
"product": {
"name": "fence-agents-ilo-moonshot-0:4.16.0-21.el10_2.1.noarch",
"product_id": "fence-agents-ilo-moonshot-0:4.16.0-21.el10_2.1.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-ilo-moonshot@4.16.0-21.el10_2.1?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-ilo-mp-0:4.16.0-21.el10_2.1.noarch",
"product": {
"name": "fence-agents-ilo-mp-0:4.16.0-21.el10_2.1.noarch",
"product_id": "fence-agents-ilo-mp-0:4.16.0-21.el10_2.1.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-ilo-mp@4.16.0-21.el10_2.1?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-ilo-ssh-0:4.16.0-21.el10_2.1.noarch",
"product": {
"name": "fence-agents-ilo-ssh-0:4.16.0-21.el10_2.1.noarch",
"product_id": "fence-agents-ilo-ssh-0:4.16.0-21.el10_2.1.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-ilo-ssh@4.16.0-21.el10_2.1?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-ilo2-0:4.16.0-21.el10_2.1.noarch",
"product": {
"name": "fence-agents-ilo2-0:4.16.0-21.el10_2.1.noarch",
"product_id": "fence-agents-ilo2-0:4.16.0-21.el10_2.1.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-ilo2@4.16.0-21.el10_2.1?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-intelmodular-0:4.16.0-21.el10_2.1.noarch",
"product": {
"name": "fence-agents-intelmodular-0:4.16.0-21.el10_2.1.noarch",
"product_id": "fence-agents-intelmodular-0:4.16.0-21.el10_2.1.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-intelmodular@4.16.0-21.el10_2.1?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-ipdu-0:4.16.0-21.el10_2.1.noarch",
"product": {
"name": "fence-agents-ipdu-0:4.16.0-21.el10_2.1.noarch",
"product_id": "fence-agents-ipdu-0:4.16.0-21.el10_2.1.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-ipdu@4.16.0-21.el10_2.1?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-ipmilan-0:4.16.0-21.el10_2.1.noarch",
"product": {
"name": "fence-agents-ipmilan-0:4.16.0-21.el10_2.1.noarch",
"product_id": "fence-agents-ipmilan-0:4.16.0-21.el10_2.1.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-ipmilan@4.16.0-21.el10_2.1?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-lpar-0:4.16.0-21.el10_2.1.noarch",
"product": {
"name": "fence-agents-lpar-0:4.16.0-21.el10_2.1.noarch",
"product_id": "fence-agents-lpar-0:4.16.0-21.el10_2.1.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-lpar@4.16.0-21.el10_2.1?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-mpath-0:4.16.0-21.el10_2.1.noarch",
"product": {
"name": "fence-agents-mpath-0:4.16.0-21.el10_2.1.noarch",
"product_id": "fence-agents-mpath-0:4.16.0-21.el10_2.1.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-mpath@4.16.0-21.el10_2.1?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-nutanix-ahv-0:4.16.0-21.el10_2.1.noarch",
"product": {
"name": "fence-agents-nutanix-ahv-0:4.16.0-21.el10_2.1.noarch",
"product_id": "fence-agents-nutanix-ahv-0:4.16.0-21.el10_2.1.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-nutanix-ahv@4.16.0-21.el10_2.1?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-rhevm-0:4.16.0-21.el10_2.1.noarch",
"product": {
"name": "fence-agents-rhevm-0:4.16.0-21.el10_2.1.noarch",
"product_id": "fence-agents-rhevm-0:4.16.0-21.el10_2.1.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-rhevm@4.16.0-21.el10_2.1?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-rsa-0:4.16.0-21.el10_2.1.noarch",
"product": {
"name": "fence-agents-rsa-0:4.16.0-21.el10_2.1.noarch",
"product_id": "fence-agents-rsa-0:4.16.0-21.el10_2.1.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-rsa@4.16.0-21.el10_2.1?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-rsb-0:4.16.0-21.el10_2.1.noarch",
"product": {
"name": "fence-agents-rsb-0:4.16.0-21.el10_2.1.noarch",
"product_id": "fence-agents-rsb-0:4.16.0-21.el10_2.1.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-rsb@4.16.0-21.el10_2.1?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-sbd-0:4.16.0-21.el10_2.1.noarch",
"product": {
"name": "fence-agents-sbd-0:4.16.0-21.el10_2.1.noarch",
"product_id": "fence-agents-sbd-0:4.16.0-21.el10_2.1.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-sbd@4.16.0-21.el10_2.1?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-scsi-0:4.16.0-21.el10_2.1.noarch",
"product": {
"name": "fence-agents-scsi-0:4.16.0-21.el10_2.1.noarch",
"product_id": "fence-agents-scsi-0:4.16.0-21.el10_2.1.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-scsi@4.16.0-21.el10_2.1?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-virsh-0:4.16.0-21.el10_2.1.noarch",
"product": {
"name": "fence-agents-virsh-0:4.16.0-21.el10_2.1.noarch",
"product_id": "fence-agents-virsh-0:4.16.0-21.el10_2.1.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-virsh@4.16.0-21.el10_2.1?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-vmware-rest-0:4.16.0-21.el10_2.1.noarch",
"product": {
"name": "fence-agents-vmware-rest-0:4.16.0-21.el10_2.1.noarch",
"product_id": "fence-agents-vmware-rest-0:4.16.0-21.el10_2.1.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-vmware-rest@4.16.0-21.el10_2.1?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-vmware-soap-0:4.16.0-21.el10_2.1.noarch",
"product": {
"name": "fence-agents-vmware-soap-0:4.16.0-21.el10_2.1.noarch",
"product_id": "fence-agents-vmware-soap-0:4.16.0-21.el10_2.1.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-vmware-soap@4.16.0-21.el10_2.1?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-wti-0:4.16.0-21.el10_2.1.noarch",
"product": {
"name": "fence-agents-wti-0:4.16.0-21.el10_2.1.noarch",
"product_id": "fence-agents-wti-0:4.16.0-21.el10_2.1.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-wti@4.16.0-21.el10_2.1?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-0:4.16.0-21.el10_2.1.src as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:fence-agents-0:4.16.0-21.el10_2.1.src"
},
"product_reference": "fence-agents-0:4.16.0-21.el10_2.1.src",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-aliyun-0:4.16.0-21.el10_2.1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:fence-agents-aliyun-0:4.16.0-21.el10_2.1.x86_64"
},
"product_reference": "fence-agents-aliyun-0:4.16.0-21.el10_2.1.x86_64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-all-0:4.16.0-21.el10_2.1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:fence-agents-all-0:4.16.0-21.el10_2.1.aarch64"
},
"product_reference": "fence-agents-all-0:4.16.0-21.el10_2.1.aarch64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-all-0:4.16.0-21.el10_2.1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:fence-agents-all-0:4.16.0-21.el10_2.1.ppc64le"
},
"product_reference": "fence-agents-all-0:4.16.0-21.el10_2.1.ppc64le",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-all-0:4.16.0-21.el10_2.1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:fence-agents-all-0:4.16.0-21.el10_2.1.s390x"
},
"product_reference": "fence-agents-all-0:4.16.0-21.el10_2.1.s390x",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-all-0:4.16.0-21.el10_2.1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:fence-agents-all-0:4.16.0-21.el10_2.1.x86_64"
},
"product_reference": "fence-agents-all-0:4.16.0-21.el10_2.1.x86_64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-amt-ws-0:4.16.0-21.el10_2.1.noarch as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:fence-agents-amt-ws-0:4.16.0-21.el10_2.1.noarch"
},
"product_reference": "fence-agents-amt-ws-0:4.16.0-21.el10_2.1.noarch",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-apc-0:4.16.0-21.el10_2.1.noarch as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:fence-agents-apc-0:4.16.0-21.el10_2.1.noarch"
},
"product_reference": "fence-agents-apc-0:4.16.0-21.el10_2.1.noarch",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-apc-snmp-0:4.16.0-21.el10_2.1.noarch as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:fence-agents-apc-snmp-0:4.16.0-21.el10_2.1.noarch"
},
"product_reference": "fence-agents-apc-snmp-0:4.16.0-21.el10_2.1.noarch",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-aws-0:4.16.0-21.el10_2.1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:fence-agents-aws-0:4.16.0-21.el10_2.1.x86_64"
},
"product_reference": "fence-agents-aws-0:4.16.0-21.el10_2.1.x86_64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-azure-arm-0:4.16.0-21.el10_2.1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:fence-agents-azure-arm-0:4.16.0-21.el10_2.1.x86_64"
},
"product_reference": "fence-agents-azure-arm-0:4.16.0-21.el10_2.1.x86_64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-bladecenter-0:4.16.0-21.el10_2.1.noarch as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:fence-agents-bladecenter-0:4.16.0-21.el10_2.1.noarch"
},
"product_reference": "fence-agents-bladecenter-0:4.16.0-21.el10_2.1.noarch",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-brocade-0:4.16.0-21.el10_2.1.noarch as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:fence-agents-brocade-0:4.16.0-21.el10_2.1.noarch"
},
"product_reference": "fence-agents-brocade-0:4.16.0-21.el10_2.1.noarch",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-cisco-mds-0:4.16.0-21.el10_2.1.noarch as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:fence-agents-cisco-mds-0:4.16.0-21.el10_2.1.noarch"
},
"product_reference": "fence-agents-cisco-mds-0:4.16.0-21.el10_2.1.noarch",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-cisco-ucs-0:4.16.0-21.el10_2.1.noarch as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:fence-agents-cisco-ucs-0:4.16.0-21.el10_2.1.noarch"
},
"product_reference": "fence-agents-cisco-ucs-0:4.16.0-21.el10_2.1.noarch",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-common-0:4.16.0-21.el10_2.1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:fence-agents-common-0:4.16.0-21.el10_2.1.aarch64"
},
"product_reference": "fence-agents-common-0:4.16.0-21.el10_2.1.aarch64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-common-0:4.16.0-21.el10_2.1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:fence-agents-common-0:4.16.0-21.el10_2.1.ppc64le"
},
"product_reference": "fence-agents-common-0:4.16.0-21.el10_2.1.ppc64le",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-common-0:4.16.0-21.el10_2.1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:fence-agents-common-0:4.16.0-21.el10_2.1.s390x"
},
"product_reference": "fence-agents-common-0:4.16.0-21.el10_2.1.s390x",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-common-0:4.16.0-21.el10_2.1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:fence-agents-common-0:4.16.0-21.el10_2.1.x86_64"
},
"product_reference": "fence-agents-common-0:4.16.0-21.el10_2.1.x86_64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-common-debuginfo-0:4.16.0-21.el10_2.1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:fence-agents-common-debuginfo-0:4.16.0-21.el10_2.1.aarch64"
},
"product_reference": "fence-agents-common-debuginfo-0:4.16.0-21.el10_2.1.aarch64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-common-debuginfo-0:4.16.0-21.el10_2.1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:fence-agents-common-debuginfo-0:4.16.0-21.el10_2.1.ppc64le"
},
"product_reference": "fence-agents-common-debuginfo-0:4.16.0-21.el10_2.1.ppc64le",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-common-debuginfo-0:4.16.0-21.el10_2.1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:fence-agents-common-debuginfo-0:4.16.0-21.el10_2.1.s390x"
},
"product_reference": "fence-agents-common-debuginfo-0:4.16.0-21.el10_2.1.s390x",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-common-debuginfo-0:4.16.0-21.el10_2.1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:fence-agents-common-debuginfo-0:4.16.0-21.el10_2.1.x86_64"
},
"product_reference": "fence-agents-common-debuginfo-0:4.16.0-21.el10_2.1.x86_64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-debuginfo-0:4.16.0-21.el10_2.1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:fence-agents-debuginfo-0:4.16.0-21.el10_2.1.aarch64"
},
"product_reference": "fence-agents-debuginfo-0:4.16.0-21.el10_2.1.aarch64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-debuginfo-0:4.16.0-21.el10_2.1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:fence-agents-debuginfo-0:4.16.0-21.el10_2.1.ppc64le"
},
"product_reference": "fence-agents-debuginfo-0:4.16.0-21.el10_2.1.ppc64le",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-debuginfo-0:4.16.0-21.el10_2.1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:fence-agents-debuginfo-0:4.16.0-21.el10_2.1.s390x"
},
"product_reference": "fence-agents-debuginfo-0:4.16.0-21.el10_2.1.s390x",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-debuginfo-0:4.16.0-21.el10_2.1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:fence-agents-debuginfo-0:4.16.0-21.el10_2.1.x86_64"
},
"product_reference": "fence-agents-debuginfo-0:4.16.0-21.el10_2.1.x86_64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-debugsource-0:4.16.0-21.el10_2.1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:fence-agents-debugsource-0:4.16.0-21.el10_2.1.aarch64"
},
"product_reference": "fence-agents-debugsource-0:4.16.0-21.el10_2.1.aarch64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-debugsource-0:4.16.0-21.el10_2.1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:fence-agents-debugsource-0:4.16.0-21.el10_2.1.ppc64le"
},
"product_reference": "fence-agents-debugsource-0:4.16.0-21.el10_2.1.ppc64le",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-debugsource-0:4.16.0-21.el10_2.1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:fence-agents-debugsource-0:4.16.0-21.el10_2.1.s390x"
},
"product_reference": "fence-agents-debugsource-0:4.16.0-21.el10_2.1.s390x",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-debugsource-0:4.16.0-21.el10_2.1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:fence-agents-debugsource-0:4.16.0-21.el10_2.1.x86_64"
},
"product_reference": "fence-agents-debugsource-0:4.16.0-21.el10_2.1.x86_64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-drac5-0:4.16.0-21.el10_2.1.noarch as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:fence-agents-drac5-0:4.16.0-21.el10_2.1.noarch"
},
"product_reference": "fence-agents-drac5-0:4.16.0-21.el10_2.1.noarch",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-eaton-snmp-0:4.16.0-21.el10_2.1.noarch as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:fence-agents-eaton-snmp-0:4.16.0-21.el10_2.1.noarch"
},
"product_reference": "fence-agents-eaton-snmp-0:4.16.0-21.el10_2.1.noarch",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-emerson-0:4.16.0-21.el10_2.1.noarch as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:fence-agents-emerson-0:4.16.0-21.el10_2.1.noarch"
},
"product_reference": "fence-agents-emerson-0:4.16.0-21.el10_2.1.noarch",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-eps-0:4.16.0-21.el10_2.1.noarch as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:fence-agents-eps-0:4.16.0-21.el10_2.1.noarch"
},
"product_reference": "fence-agents-eps-0:4.16.0-21.el10_2.1.noarch",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-gce-0:4.16.0-21.el10_2.1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:fence-agents-gce-0:4.16.0-21.el10_2.1.x86_64"
},
"product_reference": "fence-agents-gce-0:4.16.0-21.el10_2.1.x86_64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-heuristics-ping-0:4.16.0-21.el10_2.1.noarch as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:fence-agents-heuristics-ping-0:4.16.0-21.el10_2.1.noarch"
},
"product_reference": "fence-agents-heuristics-ping-0:4.16.0-21.el10_2.1.noarch",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-hpblade-0:4.16.0-21.el10_2.1.noarch as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:fence-agents-hpblade-0:4.16.0-21.el10_2.1.noarch"
},
"product_reference": "fence-agents-hpblade-0:4.16.0-21.el10_2.1.noarch",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-ibm-powervs-0:4.16.0-21.el10_2.1.noarch as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:fence-agents-ibm-powervs-0:4.16.0-21.el10_2.1.noarch"
},
"product_reference": "fence-agents-ibm-powervs-0:4.16.0-21.el10_2.1.noarch",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-ibm-vpc-0:4.16.0-21.el10_2.1.noarch as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:fence-agents-ibm-vpc-0:4.16.0-21.el10_2.1.noarch"
},
"product_reference": "fence-agents-ibm-vpc-0:4.16.0-21.el10_2.1.noarch",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-ibmblade-0:4.16.0-21.el10_2.1.noarch as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:fence-agents-ibmblade-0:4.16.0-21.el10_2.1.noarch"
},
"product_reference": "fence-agents-ibmblade-0:4.16.0-21.el10_2.1.noarch",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-ifmib-0:4.16.0-21.el10_2.1.noarch as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:fence-agents-ifmib-0:4.16.0-21.el10_2.1.noarch"
},
"product_reference": "fence-agents-ifmib-0:4.16.0-21.el10_2.1.noarch",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-ilo-moonshot-0:4.16.0-21.el10_2.1.noarch as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:fence-agents-ilo-moonshot-0:4.16.0-21.el10_2.1.noarch"
},
"product_reference": "fence-agents-ilo-moonshot-0:4.16.0-21.el10_2.1.noarch",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-ilo-mp-0:4.16.0-21.el10_2.1.noarch as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:fence-agents-ilo-mp-0:4.16.0-21.el10_2.1.noarch"
},
"product_reference": "fence-agents-ilo-mp-0:4.16.0-21.el10_2.1.noarch",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-ilo-ssh-0:4.16.0-21.el10_2.1.noarch as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:fence-agents-ilo-ssh-0:4.16.0-21.el10_2.1.noarch"
},
"product_reference": "fence-agents-ilo-ssh-0:4.16.0-21.el10_2.1.noarch",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-ilo2-0:4.16.0-21.el10_2.1.noarch as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:fence-agents-ilo2-0:4.16.0-21.el10_2.1.noarch"
},
"product_reference": "fence-agents-ilo2-0:4.16.0-21.el10_2.1.noarch",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-intelmodular-0:4.16.0-21.el10_2.1.noarch as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:fence-agents-intelmodular-0:4.16.0-21.el10_2.1.noarch"
},
"product_reference": "fence-agents-intelmodular-0:4.16.0-21.el10_2.1.noarch",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-ipdu-0:4.16.0-21.el10_2.1.noarch as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:fence-agents-ipdu-0:4.16.0-21.el10_2.1.noarch"
},
"product_reference": "fence-agents-ipdu-0:4.16.0-21.el10_2.1.noarch",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-ipmilan-0:4.16.0-21.el10_2.1.noarch as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:fence-agents-ipmilan-0:4.16.0-21.el10_2.1.noarch"
},
"product_reference": "fence-agents-ipmilan-0:4.16.0-21.el10_2.1.noarch",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-kdump-0:4.16.0-21.el10_2.1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:fence-agents-kdump-0:4.16.0-21.el10_2.1.aarch64"
},
"product_reference": "fence-agents-kdump-0:4.16.0-21.el10_2.1.aarch64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-kdump-0:4.16.0-21.el10_2.1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:fence-agents-kdump-0:4.16.0-21.el10_2.1.ppc64le"
},
"product_reference": "fence-agents-kdump-0:4.16.0-21.el10_2.1.ppc64le",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-kdump-0:4.16.0-21.el10_2.1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:fence-agents-kdump-0:4.16.0-21.el10_2.1.s390x"
},
"product_reference": "fence-agents-kdump-0:4.16.0-21.el10_2.1.s390x",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-kdump-0:4.16.0-21.el10_2.1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:fence-agents-kdump-0:4.16.0-21.el10_2.1.x86_64"
},
"product_reference": "fence-agents-kdump-0:4.16.0-21.el10_2.1.x86_64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-kdump-debuginfo-0:4.16.0-21.el10_2.1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:fence-agents-kdump-debuginfo-0:4.16.0-21.el10_2.1.aarch64"
},
"product_reference": "fence-agents-kdump-debuginfo-0:4.16.0-21.el10_2.1.aarch64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-kdump-debuginfo-0:4.16.0-21.el10_2.1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:fence-agents-kdump-debuginfo-0:4.16.0-21.el10_2.1.ppc64le"
},
"product_reference": "fence-agents-kdump-debuginfo-0:4.16.0-21.el10_2.1.ppc64le",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-kdump-debuginfo-0:4.16.0-21.el10_2.1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:fence-agents-kdump-debuginfo-0:4.16.0-21.el10_2.1.s390x"
},
"product_reference": "fence-agents-kdump-debuginfo-0:4.16.0-21.el10_2.1.s390x",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-kdump-debuginfo-0:4.16.0-21.el10_2.1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:fence-agents-kdump-debuginfo-0:4.16.0-21.el10_2.1.x86_64"
},
"product_reference": "fence-agents-kdump-debuginfo-0:4.16.0-21.el10_2.1.x86_64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-kubevirt-0:4.16.0-21.el10_2.1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:fence-agents-kubevirt-0:4.16.0-21.el10_2.1.aarch64"
},
"product_reference": "fence-agents-kubevirt-0:4.16.0-21.el10_2.1.aarch64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-kubevirt-0:4.16.0-21.el10_2.1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:fence-agents-kubevirt-0:4.16.0-21.el10_2.1.ppc64le"
},
"product_reference": "fence-agents-kubevirt-0:4.16.0-21.el10_2.1.ppc64le",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-kubevirt-0:4.16.0-21.el10_2.1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:fence-agents-kubevirt-0:4.16.0-21.el10_2.1.s390x"
},
"product_reference": "fence-agents-kubevirt-0:4.16.0-21.el10_2.1.s390x",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-kubevirt-0:4.16.0-21.el10_2.1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:fence-agents-kubevirt-0:4.16.0-21.el10_2.1.x86_64"
},
"product_reference": "fence-agents-kubevirt-0:4.16.0-21.el10_2.1.x86_64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-lpar-0:4.16.0-21.el10_2.1.noarch as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:fence-agents-lpar-0:4.16.0-21.el10_2.1.noarch"
},
"product_reference": "fence-agents-lpar-0:4.16.0-21.el10_2.1.noarch",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-mpath-0:4.16.0-21.el10_2.1.noarch as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:fence-agents-mpath-0:4.16.0-21.el10_2.1.noarch"
},
"product_reference": "fence-agents-mpath-0:4.16.0-21.el10_2.1.noarch",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-nutanix-ahv-0:4.16.0-21.el10_2.1.noarch as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:fence-agents-nutanix-ahv-0:4.16.0-21.el10_2.1.noarch"
},
"product_reference": "fence-agents-nutanix-ahv-0:4.16.0-21.el10_2.1.noarch",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-openstack-0:4.16.0-21.el10_2.1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:fence-agents-openstack-0:4.16.0-21.el10_2.1.ppc64le"
},
"product_reference": "fence-agents-openstack-0:4.16.0-21.el10_2.1.ppc64le",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-openstack-0:4.16.0-21.el10_2.1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:fence-agents-openstack-0:4.16.0-21.el10_2.1.x86_64"
},
"product_reference": "fence-agents-openstack-0:4.16.0-21.el10_2.1.x86_64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-redfish-0:4.16.0-21.el10_2.1.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:fence-agents-redfish-0:4.16.0-21.el10_2.1.aarch64"
},
"product_reference": "fence-agents-redfish-0:4.16.0-21.el10_2.1.aarch64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-redfish-0:4.16.0-21.el10_2.1.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:fence-agents-redfish-0:4.16.0-21.el10_2.1.ppc64le"
},
"product_reference": "fence-agents-redfish-0:4.16.0-21.el10_2.1.ppc64le",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-redfish-0:4.16.0-21.el10_2.1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:fence-agents-redfish-0:4.16.0-21.el10_2.1.s390x"
},
"product_reference": "fence-agents-redfish-0:4.16.0-21.el10_2.1.s390x",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-redfish-0:4.16.0-21.el10_2.1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:fence-agents-redfish-0:4.16.0-21.el10_2.1.x86_64"
},
"product_reference": "fence-agents-redfish-0:4.16.0-21.el10_2.1.x86_64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-rhevm-0:4.16.0-21.el10_2.1.noarch as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:fence-agents-rhevm-0:4.16.0-21.el10_2.1.noarch"
},
"product_reference": "fence-agents-rhevm-0:4.16.0-21.el10_2.1.noarch",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-rsa-0:4.16.0-21.el10_2.1.noarch as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:fence-agents-rsa-0:4.16.0-21.el10_2.1.noarch"
},
"product_reference": "fence-agents-rsa-0:4.16.0-21.el10_2.1.noarch",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-rsb-0:4.16.0-21.el10_2.1.noarch as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:fence-agents-rsb-0:4.16.0-21.el10_2.1.noarch"
},
"product_reference": "fence-agents-rsb-0:4.16.0-21.el10_2.1.noarch",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-sbd-0:4.16.0-21.el10_2.1.noarch as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:fence-agents-sbd-0:4.16.0-21.el10_2.1.noarch"
},
"product_reference": "fence-agents-sbd-0:4.16.0-21.el10_2.1.noarch",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-scsi-0:4.16.0-21.el10_2.1.noarch as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:fence-agents-scsi-0:4.16.0-21.el10_2.1.noarch"
},
"product_reference": "fence-agents-scsi-0:4.16.0-21.el10_2.1.noarch",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-virsh-0:4.16.0-21.el10_2.1.noarch as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:fence-agents-virsh-0:4.16.0-21.el10_2.1.noarch"
},
"product_reference": "fence-agents-virsh-0:4.16.0-21.el10_2.1.noarch",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-vmware-rest-0:4.16.0-21.el10_2.1.noarch as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:fence-agents-vmware-rest-0:4.16.0-21.el10_2.1.noarch"
},
"product_reference": "fence-agents-vmware-rest-0:4.16.0-21.el10_2.1.noarch",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-vmware-soap-0:4.16.0-21.el10_2.1.noarch as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:fence-agents-vmware-soap-0:4.16.0-21.el10_2.1.noarch"
},
"product_reference": "fence-agents-vmware-soap-0:4.16.0-21.el10_2.1.noarch",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-wti-0:4.16.0-21.el10_2.1.noarch as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:fence-agents-wti-0:4.16.0-21.el10_2.1.noarch"
},
"product_reference": "fence-agents-wti-0:4.16.0-21.el10_2.1.noarch",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-zvm-0:4.16.0-21.el10_2.1.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:fence-agents-zvm-0:4.16.0-21.el10_2.1.s390x"
},
"product_reference": "fence-agents-zvm-0:4.16.0-21.el10_2.1.s390x",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-virt-0:4.16.0-21.el10_2.1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:fence-virt-0:4.16.0-21.el10_2.1.x86_64"
},
"product_reference": "fence-virt-0:4.16.0-21.el10_2.1.x86_64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-virt-debuginfo-0:4.16.0-21.el10_2.1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:fence-virt-debuginfo-0:4.16.0-21.el10_2.1.x86_64"
},
"product_reference": "fence-virt-debuginfo-0:4.16.0-21.el10_2.1.x86_64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-virtd-0:4.16.0-21.el10_2.1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:fence-virtd-0:4.16.0-21.el10_2.1.x86_64"
},
"product_reference": "fence-virtd-0:4.16.0-21.el10_2.1.x86_64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-virtd-cpg-0:4.16.0-21.el10_2.1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:fence-virtd-cpg-0:4.16.0-21.el10_2.1.x86_64"
},
"product_reference": "fence-virtd-cpg-0:4.16.0-21.el10_2.1.x86_64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-virtd-cpg-debuginfo-0:4.16.0-21.el10_2.1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:fence-virtd-cpg-debuginfo-0:4.16.0-21.el10_2.1.x86_64"
},
"product_reference": "fence-virtd-cpg-debuginfo-0:4.16.0-21.el10_2.1.x86_64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-virtd-debuginfo-0:4.16.0-21.el10_2.1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:fence-virtd-debuginfo-0:4.16.0-21.el10_2.1.x86_64"
},
"product_reference": "fence-virtd-debuginfo-0:4.16.0-21.el10_2.1.x86_64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-virtd-libvirt-0:4.16.0-21.el10_2.1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:fence-virtd-libvirt-0:4.16.0-21.el10_2.1.x86_64"
},
"product_reference": "fence-virtd-libvirt-0:4.16.0-21.el10_2.1.x86_64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-virtd-libvirt-debuginfo-0:4.16.0-21.el10_2.1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:fence-virtd-libvirt-debuginfo-0:4.16.0-21.el10_2.1.x86_64"
},
"product_reference": "fence-virtd-libvirt-debuginfo-0:4.16.0-21.el10_2.1.x86_64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-virtd-multicast-0:4.16.0-21.el10_2.1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:fence-virtd-multicast-0:4.16.0-21.el10_2.1.x86_64"
},
"product_reference": "fence-virtd-multicast-0:4.16.0-21.el10_2.1.x86_64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-virtd-multicast-debuginfo-0:4.16.0-21.el10_2.1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:fence-virtd-multicast-debuginfo-0:4.16.0-21.el10_2.1.x86_64"
},
"product_reference": "fence-virtd-multicast-debuginfo-0:4.16.0-21.el10_2.1.x86_64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-virtd-serial-0:4.16.0-21.el10_2.1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:fence-virtd-serial-0:4.16.0-21.el10_2.1.x86_64"
},
"product_reference": "fence-virtd-serial-0:4.16.0-21.el10_2.1.x86_64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-virtd-serial-debuginfo-0:4.16.0-21.el10_2.1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:fence-virtd-serial-debuginfo-0:4.16.0-21.el10_2.1.x86_64"
},
"product_reference": "fence-virtd-serial-debuginfo-0:4.16.0-21.el10_2.1.x86_64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-virtd-tcp-0:4.16.0-21.el10_2.1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:fence-virtd-tcp-0:4.16.0-21.el10_2.1.x86_64"
},
"product_reference": "fence-virtd-tcp-0:4.16.0-21.el10_2.1.x86_64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-virtd-tcp-debuginfo-0:4.16.0-21.el10_2.1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:fence-virtd-tcp-debuginfo-0:4.16.0-21.el10_2.1.x86_64"
},
"product_reference": "fence-virtd-tcp-debuginfo-0:4.16.0-21.el10_2.1.x86_64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ha-cloud-support-0:4.16.0-21.el10_2.1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:ha-cloud-support-0:4.16.0-21.el10_2.1.x86_64"
},
"product_reference": "ha-cloud-support-0:4.16.0-21.el10_2.1.x86_64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ha-cloud-support-debuginfo-0:4.16.0-21.el10_2.1.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:ha-cloud-support-debuginfo-0:4.16.0-21.el10_2.1.x86_64"
},
"product_reference": "ha-cloud-support-debuginfo-0:4.16.0-21.el10_2.1.x86_64",
"relates_to_product_reference": "AppStream-10.2.Z"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-30922",
"cwe": {
"id": "CWE-835",
"name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
},
"discovery_date": "2026-03-18T04:02:45.401296+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2448553"
}
],
"notes": [
{
"category": "description",
"text": "An unbounded recursion flaw has been discovered in the pypi pyasn1 library. This uncontrolled recursion occurs when decoding ASN.1 data with deeply nested structures. An attacker can supply a crafted payload containing nested SEQUENCE (0x30) or SET (0x31) tags with Indefinite Length (0x80) markers. This forces the decoder to recursively call itself until the Python interpreter crashes with a RecursionError or consumes all available memory (OOM), crashing the host application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "pyasn1: pyasn1 Vulnerable to Denial of Service via Unbounded Recursion",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.2.Z:fence-agents-0:4.16.0-21.el10_2.1.src",
"AppStream-10.2.Z:fence-agents-aliyun-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-agents-all-0:4.16.0-21.el10_2.1.aarch64",
"AppStream-10.2.Z:fence-agents-all-0:4.16.0-21.el10_2.1.ppc64le",
"AppStream-10.2.Z:fence-agents-all-0:4.16.0-21.el10_2.1.s390x",
"AppStream-10.2.Z:fence-agents-all-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-agents-amt-ws-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-apc-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-apc-snmp-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-aws-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-agents-azure-arm-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-agents-bladecenter-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-brocade-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-cisco-mds-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-cisco-ucs-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-common-0:4.16.0-21.el10_2.1.aarch64",
"AppStream-10.2.Z:fence-agents-common-0:4.16.0-21.el10_2.1.ppc64le",
"AppStream-10.2.Z:fence-agents-common-0:4.16.0-21.el10_2.1.s390x",
"AppStream-10.2.Z:fence-agents-common-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-agents-common-debuginfo-0:4.16.0-21.el10_2.1.aarch64",
"AppStream-10.2.Z:fence-agents-common-debuginfo-0:4.16.0-21.el10_2.1.ppc64le",
"AppStream-10.2.Z:fence-agents-common-debuginfo-0:4.16.0-21.el10_2.1.s390x",
"AppStream-10.2.Z:fence-agents-common-debuginfo-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-agents-debuginfo-0:4.16.0-21.el10_2.1.aarch64",
"AppStream-10.2.Z:fence-agents-debuginfo-0:4.16.0-21.el10_2.1.ppc64le",
"AppStream-10.2.Z:fence-agents-debuginfo-0:4.16.0-21.el10_2.1.s390x",
"AppStream-10.2.Z:fence-agents-debuginfo-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-agents-debugsource-0:4.16.0-21.el10_2.1.aarch64",
"AppStream-10.2.Z:fence-agents-debugsource-0:4.16.0-21.el10_2.1.ppc64le",
"AppStream-10.2.Z:fence-agents-debugsource-0:4.16.0-21.el10_2.1.s390x",
"AppStream-10.2.Z:fence-agents-debugsource-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-agents-drac5-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-eaton-snmp-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-emerson-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-eps-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-gce-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-agents-heuristics-ping-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-hpblade-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-ibm-powervs-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-ibm-vpc-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-ibmblade-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-ifmib-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-ilo-moonshot-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-ilo-mp-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-ilo-ssh-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-ilo2-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-intelmodular-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-ipdu-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-ipmilan-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-kdump-0:4.16.0-21.el10_2.1.aarch64",
"AppStream-10.2.Z:fence-agents-kdump-0:4.16.0-21.el10_2.1.ppc64le",
"AppStream-10.2.Z:fence-agents-kdump-0:4.16.0-21.el10_2.1.s390x",
"AppStream-10.2.Z:fence-agents-kdump-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-agents-kdump-debuginfo-0:4.16.0-21.el10_2.1.aarch64",
"AppStream-10.2.Z:fence-agents-kdump-debuginfo-0:4.16.0-21.el10_2.1.ppc64le",
"AppStream-10.2.Z:fence-agents-kdump-debuginfo-0:4.16.0-21.el10_2.1.s390x",
"AppStream-10.2.Z:fence-agents-kdump-debuginfo-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-agents-kubevirt-0:4.16.0-21.el10_2.1.aarch64",
"AppStream-10.2.Z:fence-agents-kubevirt-0:4.16.0-21.el10_2.1.ppc64le",
"AppStream-10.2.Z:fence-agents-kubevirt-0:4.16.0-21.el10_2.1.s390x",
"AppStream-10.2.Z:fence-agents-kubevirt-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-agents-lpar-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-mpath-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-nutanix-ahv-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-openstack-0:4.16.0-21.el10_2.1.ppc64le",
"AppStream-10.2.Z:fence-agents-openstack-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-agents-redfish-0:4.16.0-21.el10_2.1.aarch64",
"AppStream-10.2.Z:fence-agents-redfish-0:4.16.0-21.el10_2.1.ppc64le",
"AppStream-10.2.Z:fence-agents-redfish-0:4.16.0-21.el10_2.1.s390x",
"AppStream-10.2.Z:fence-agents-redfish-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-agents-rhevm-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-rsa-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-rsb-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-sbd-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-scsi-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-virsh-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-vmware-rest-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-vmware-soap-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-wti-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-zvm-0:4.16.0-21.el10_2.1.s390x",
"AppStream-10.2.Z:fence-virt-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-virt-debuginfo-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-virtd-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-virtd-cpg-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-virtd-cpg-debuginfo-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-virtd-debuginfo-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-virtd-libvirt-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-virtd-libvirt-debuginfo-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-virtd-multicast-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-virtd-multicast-debuginfo-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-virtd-serial-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-virtd-serial-debuginfo-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-virtd-tcp-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-virtd-tcp-debuginfo-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:ha-cloud-support-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:ha-cloud-support-debuginfo-0:4.16.0-21.el10_2.1.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-30922"
},
{
"category": "external",
"summary": "RHBZ#2448553",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2448553"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-30922",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-30922"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-30922",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-30922"
},
{
"category": "external",
"summary": "https://github.com/pyasn1/pyasn1/commit/25ad481c19fdb006e20485ef3fc2e5b3eff30ef0",
"url": "https://github.com/pyasn1/pyasn1/commit/25ad481c19fdb006e20485ef3fc2e5b3eff30ef0"
},
{
"category": "external",
"summary": "https://github.com/pyasn1/pyasn1/security/advisories/GHSA-jr27-m4p2-rc6r",
"url": "https://github.com/pyasn1/pyasn1/security/advisories/GHSA-jr27-m4p2-rc6r"
}
],
"release_date": "2026-03-18T02:29:45.857000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-19T16:22:56+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.2.Z:fence-agents-0:4.16.0-21.el10_2.1.src",
"AppStream-10.2.Z:fence-agents-aliyun-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-agents-all-0:4.16.0-21.el10_2.1.aarch64",
"AppStream-10.2.Z:fence-agents-all-0:4.16.0-21.el10_2.1.ppc64le",
"AppStream-10.2.Z:fence-agents-all-0:4.16.0-21.el10_2.1.s390x",
"AppStream-10.2.Z:fence-agents-all-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-agents-amt-ws-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-apc-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-apc-snmp-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-aws-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-agents-azure-arm-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-agents-bladecenter-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-brocade-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-cisco-mds-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-cisco-ucs-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-common-0:4.16.0-21.el10_2.1.aarch64",
"AppStream-10.2.Z:fence-agents-common-0:4.16.0-21.el10_2.1.ppc64le",
"AppStream-10.2.Z:fence-agents-common-0:4.16.0-21.el10_2.1.s390x",
"AppStream-10.2.Z:fence-agents-common-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-agents-common-debuginfo-0:4.16.0-21.el10_2.1.aarch64",
"AppStream-10.2.Z:fence-agents-common-debuginfo-0:4.16.0-21.el10_2.1.ppc64le",
"AppStream-10.2.Z:fence-agents-common-debuginfo-0:4.16.0-21.el10_2.1.s390x",
"AppStream-10.2.Z:fence-agents-common-debuginfo-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-agents-debuginfo-0:4.16.0-21.el10_2.1.aarch64",
"AppStream-10.2.Z:fence-agents-debuginfo-0:4.16.0-21.el10_2.1.ppc64le",
"AppStream-10.2.Z:fence-agents-debuginfo-0:4.16.0-21.el10_2.1.s390x",
"AppStream-10.2.Z:fence-agents-debuginfo-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-agents-debugsource-0:4.16.0-21.el10_2.1.aarch64",
"AppStream-10.2.Z:fence-agents-debugsource-0:4.16.0-21.el10_2.1.ppc64le",
"AppStream-10.2.Z:fence-agents-debugsource-0:4.16.0-21.el10_2.1.s390x",
"AppStream-10.2.Z:fence-agents-debugsource-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-agents-drac5-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-eaton-snmp-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-emerson-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-eps-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-gce-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-agents-heuristics-ping-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-hpblade-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-ibm-powervs-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-ibm-vpc-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-ibmblade-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-ifmib-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-ilo-moonshot-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-ilo-mp-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-ilo-ssh-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-ilo2-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-intelmodular-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-ipdu-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-ipmilan-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-kdump-0:4.16.0-21.el10_2.1.aarch64",
"AppStream-10.2.Z:fence-agents-kdump-0:4.16.0-21.el10_2.1.ppc64le",
"AppStream-10.2.Z:fence-agents-kdump-0:4.16.0-21.el10_2.1.s390x",
"AppStream-10.2.Z:fence-agents-kdump-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-agents-kdump-debuginfo-0:4.16.0-21.el10_2.1.aarch64",
"AppStream-10.2.Z:fence-agents-kdump-debuginfo-0:4.16.0-21.el10_2.1.ppc64le",
"AppStream-10.2.Z:fence-agents-kdump-debuginfo-0:4.16.0-21.el10_2.1.s390x",
"AppStream-10.2.Z:fence-agents-kdump-debuginfo-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-agents-kubevirt-0:4.16.0-21.el10_2.1.aarch64",
"AppStream-10.2.Z:fence-agents-kubevirt-0:4.16.0-21.el10_2.1.ppc64le",
"AppStream-10.2.Z:fence-agents-kubevirt-0:4.16.0-21.el10_2.1.s390x",
"AppStream-10.2.Z:fence-agents-kubevirt-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-agents-lpar-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-mpath-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-nutanix-ahv-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-openstack-0:4.16.0-21.el10_2.1.ppc64le",
"AppStream-10.2.Z:fence-agents-openstack-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-agents-redfish-0:4.16.0-21.el10_2.1.aarch64",
"AppStream-10.2.Z:fence-agents-redfish-0:4.16.0-21.el10_2.1.ppc64le",
"AppStream-10.2.Z:fence-agents-redfish-0:4.16.0-21.el10_2.1.s390x",
"AppStream-10.2.Z:fence-agents-redfish-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-agents-rhevm-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-rsa-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-rsb-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-sbd-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-scsi-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-virsh-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-vmware-rest-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-vmware-soap-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-wti-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-zvm-0:4.16.0-21.el10_2.1.s390x",
"AppStream-10.2.Z:fence-virt-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-virt-debuginfo-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-virtd-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-virtd-cpg-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-virtd-cpg-debuginfo-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-virtd-debuginfo-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-virtd-libvirt-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-virtd-libvirt-debuginfo-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-virtd-multicast-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-virtd-multicast-debuginfo-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-virtd-serial-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-virtd-serial-debuginfo-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-virtd-tcp-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-virtd-tcp-debuginfo-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:ha-cloud-support-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:ha-cloud-support-debuginfo-0:4.16.0-21.el10_2.1.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:19138"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"AppStream-10.2.Z:fence-agents-0:4.16.0-21.el10_2.1.src",
"AppStream-10.2.Z:fence-agents-aliyun-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-agents-all-0:4.16.0-21.el10_2.1.aarch64",
"AppStream-10.2.Z:fence-agents-all-0:4.16.0-21.el10_2.1.ppc64le",
"AppStream-10.2.Z:fence-agents-all-0:4.16.0-21.el10_2.1.s390x",
"AppStream-10.2.Z:fence-agents-all-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-agents-amt-ws-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-apc-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-apc-snmp-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-aws-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-agents-azure-arm-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-agents-bladecenter-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-brocade-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-cisco-mds-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-cisco-ucs-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-common-0:4.16.0-21.el10_2.1.aarch64",
"AppStream-10.2.Z:fence-agents-common-0:4.16.0-21.el10_2.1.ppc64le",
"AppStream-10.2.Z:fence-agents-common-0:4.16.0-21.el10_2.1.s390x",
"AppStream-10.2.Z:fence-agents-common-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-agents-common-debuginfo-0:4.16.0-21.el10_2.1.aarch64",
"AppStream-10.2.Z:fence-agents-common-debuginfo-0:4.16.0-21.el10_2.1.ppc64le",
"AppStream-10.2.Z:fence-agents-common-debuginfo-0:4.16.0-21.el10_2.1.s390x",
"AppStream-10.2.Z:fence-agents-common-debuginfo-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-agents-debuginfo-0:4.16.0-21.el10_2.1.aarch64",
"AppStream-10.2.Z:fence-agents-debuginfo-0:4.16.0-21.el10_2.1.ppc64le",
"AppStream-10.2.Z:fence-agents-debuginfo-0:4.16.0-21.el10_2.1.s390x",
"AppStream-10.2.Z:fence-agents-debuginfo-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-agents-debugsource-0:4.16.0-21.el10_2.1.aarch64",
"AppStream-10.2.Z:fence-agents-debugsource-0:4.16.0-21.el10_2.1.ppc64le",
"AppStream-10.2.Z:fence-agents-debugsource-0:4.16.0-21.el10_2.1.s390x",
"AppStream-10.2.Z:fence-agents-debugsource-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-agents-drac5-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-eaton-snmp-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-emerson-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-eps-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-gce-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-agents-heuristics-ping-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-hpblade-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-ibm-powervs-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-ibm-vpc-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-ibmblade-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-ifmib-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-ilo-moonshot-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-ilo-mp-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-ilo-ssh-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-ilo2-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-intelmodular-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-ipdu-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-ipmilan-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-kdump-0:4.16.0-21.el10_2.1.aarch64",
"AppStream-10.2.Z:fence-agents-kdump-0:4.16.0-21.el10_2.1.ppc64le",
"AppStream-10.2.Z:fence-agents-kdump-0:4.16.0-21.el10_2.1.s390x",
"AppStream-10.2.Z:fence-agents-kdump-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-agents-kdump-debuginfo-0:4.16.0-21.el10_2.1.aarch64",
"AppStream-10.2.Z:fence-agents-kdump-debuginfo-0:4.16.0-21.el10_2.1.ppc64le",
"AppStream-10.2.Z:fence-agents-kdump-debuginfo-0:4.16.0-21.el10_2.1.s390x",
"AppStream-10.2.Z:fence-agents-kdump-debuginfo-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-agents-kubevirt-0:4.16.0-21.el10_2.1.aarch64",
"AppStream-10.2.Z:fence-agents-kubevirt-0:4.16.0-21.el10_2.1.ppc64le",
"AppStream-10.2.Z:fence-agents-kubevirt-0:4.16.0-21.el10_2.1.s390x",
"AppStream-10.2.Z:fence-agents-kubevirt-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-agents-lpar-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-mpath-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-nutanix-ahv-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-openstack-0:4.16.0-21.el10_2.1.ppc64le",
"AppStream-10.2.Z:fence-agents-openstack-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-agents-redfish-0:4.16.0-21.el10_2.1.aarch64",
"AppStream-10.2.Z:fence-agents-redfish-0:4.16.0-21.el10_2.1.ppc64le",
"AppStream-10.2.Z:fence-agents-redfish-0:4.16.0-21.el10_2.1.s390x",
"AppStream-10.2.Z:fence-agents-redfish-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-agents-rhevm-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-rsa-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-rsb-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-sbd-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-scsi-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-virsh-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-vmware-rest-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-vmware-soap-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-wti-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-zvm-0:4.16.0-21.el10_2.1.s390x",
"AppStream-10.2.Z:fence-virt-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-virt-debuginfo-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-virtd-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-virtd-cpg-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-virtd-cpg-debuginfo-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-virtd-debuginfo-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-virtd-libvirt-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-virtd-libvirt-debuginfo-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-virtd-multicast-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-virtd-multicast-debuginfo-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-virtd-serial-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-virtd-serial-debuginfo-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-virtd-tcp-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-virtd-tcp-debuginfo-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:ha-cloud-support-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:ha-cloud-support-debuginfo-0:4.16.0-21.el10_2.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"AppStream-10.2.Z:fence-agents-0:4.16.0-21.el10_2.1.src",
"AppStream-10.2.Z:fence-agents-aliyun-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-agents-all-0:4.16.0-21.el10_2.1.aarch64",
"AppStream-10.2.Z:fence-agents-all-0:4.16.0-21.el10_2.1.ppc64le",
"AppStream-10.2.Z:fence-agents-all-0:4.16.0-21.el10_2.1.s390x",
"AppStream-10.2.Z:fence-agents-all-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-agents-amt-ws-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-apc-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-apc-snmp-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-aws-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-agents-azure-arm-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-agents-bladecenter-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-brocade-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-cisco-mds-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-cisco-ucs-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-common-0:4.16.0-21.el10_2.1.aarch64",
"AppStream-10.2.Z:fence-agents-common-0:4.16.0-21.el10_2.1.ppc64le",
"AppStream-10.2.Z:fence-agents-common-0:4.16.0-21.el10_2.1.s390x",
"AppStream-10.2.Z:fence-agents-common-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-agents-common-debuginfo-0:4.16.0-21.el10_2.1.aarch64",
"AppStream-10.2.Z:fence-agents-common-debuginfo-0:4.16.0-21.el10_2.1.ppc64le",
"AppStream-10.2.Z:fence-agents-common-debuginfo-0:4.16.0-21.el10_2.1.s390x",
"AppStream-10.2.Z:fence-agents-common-debuginfo-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-agents-debuginfo-0:4.16.0-21.el10_2.1.aarch64",
"AppStream-10.2.Z:fence-agents-debuginfo-0:4.16.0-21.el10_2.1.ppc64le",
"AppStream-10.2.Z:fence-agents-debuginfo-0:4.16.0-21.el10_2.1.s390x",
"AppStream-10.2.Z:fence-agents-debuginfo-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-agents-debugsource-0:4.16.0-21.el10_2.1.aarch64",
"AppStream-10.2.Z:fence-agents-debugsource-0:4.16.0-21.el10_2.1.ppc64le",
"AppStream-10.2.Z:fence-agents-debugsource-0:4.16.0-21.el10_2.1.s390x",
"AppStream-10.2.Z:fence-agents-debugsource-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-agents-drac5-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-eaton-snmp-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-emerson-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-eps-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-gce-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-agents-heuristics-ping-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-hpblade-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-ibm-powervs-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-ibm-vpc-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-ibmblade-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-ifmib-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-ilo-moonshot-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-ilo-mp-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-ilo-ssh-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-ilo2-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-intelmodular-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-ipdu-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-ipmilan-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-kdump-0:4.16.0-21.el10_2.1.aarch64",
"AppStream-10.2.Z:fence-agents-kdump-0:4.16.0-21.el10_2.1.ppc64le",
"AppStream-10.2.Z:fence-agents-kdump-0:4.16.0-21.el10_2.1.s390x",
"AppStream-10.2.Z:fence-agents-kdump-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-agents-kdump-debuginfo-0:4.16.0-21.el10_2.1.aarch64",
"AppStream-10.2.Z:fence-agents-kdump-debuginfo-0:4.16.0-21.el10_2.1.ppc64le",
"AppStream-10.2.Z:fence-agents-kdump-debuginfo-0:4.16.0-21.el10_2.1.s390x",
"AppStream-10.2.Z:fence-agents-kdump-debuginfo-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-agents-kubevirt-0:4.16.0-21.el10_2.1.aarch64",
"AppStream-10.2.Z:fence-agents-kubevirt-0:4.16.0-21.el10_2.1.ppc64le",
"AppStream-10.2.Z:fence-agents-kubevirt-0:4.16.0-21.el10_2.1.s390x",
"AppStream-10.2.Z:fence-agents-kubevirt-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-agents-lpar-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-mpath-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-nutanix-ahv-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-openstack-0:4.16.0-21.el10_2.1.ppc64le",
"AppStream-10.2.Z:fence-agents-openstack-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-agents-redfish-0:4.16.0-21.el10_2.1.aarch64",
"AppStream-10.2.Z:fence-agents-redfish-0:4.16.0-21.el10_2.1.ppc64le",
"AppStream-10.2.Z:fence-agents-redfish-0:4.16.0-21.el10_2.1.s390x",
"AppStream-10.2.Z:fence-agents-redfish-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-agents-rhevm-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-rsa-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-rsb-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-sbd-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-scsi-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-virsh-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-vmware-rest-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-vmware-soap-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-wti-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-zvm-0:4.16.0-21.el10_2.1.s390x",
"AppStream-10.2.Z:fence-virt-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-virt-debuginfo-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-virtd-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-virtd-cpg-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-virtd-cpg-debuginfo-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-virtd-debuginfo-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-virtd-libvirt-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-virtd-libvirt-debuginfo-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-virtd-multicast-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-virtd-multicast-debuginfo-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-virtd-serial-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-virtd-serial-debuginfo-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-virtd-tcp-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-virtd-tcp-debuginfo-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:ha-cloud-support-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:ha-cloud-support-debuginfo-0:4.16.0-21.el10_2.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "pyasn1: pyasn1 Vulnerable to Denial of Service via Unbounded Recursion"
},
{
"cve": "CVE-2026-32597",
"cwe": {
"id": "CWE-347",
"name": "Improper Verification of Cryptographic Signature"
},
"discovery_date": "2026-03-12T22:01:29.967713+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2447194"
}
],
"notes": [
{
"category": "description",
"text": "A missing verification step has been discovered in PyJWT. PyJWT does not validate the crit (Critical) Header Parameter defined in RFC 7515 \u00a74.1.11. When a JWS token contains a crit array listing extensions that PyJWT does not understand, the library accepts the token instead of rejecting it. This violates the MUST requirement in the RFC.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "pyjwt: PyJWT accepts unknown `crit` header extensions (RFC 7515 \u00a74.1.11 MUST violation)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.2.Z:fence-agents-0:4.16.0-21.el10_2.1.src",
"AppStream-10.2.Z:fence-agents-aliyun-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-agents-all-0:4.16.0-21.el10_2.1.aarch64",
"AppStream-10.2.Z:fence-agents-all-0:4.16.0-21.el10_2.1.ppc64le",
"AppStream-10.2.Z:fence-agents-all-0:4.16.0-21.el10_2.1.s390x",
"AppStream-10.2.Z:fence-agents-all-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-agents-amt-ws-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-apc-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-apc-snmp-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-aws-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-agents-azure-arm-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-agents-bladecenter-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-brocade-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-cisco-mds-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-cisco-ucs-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-common-0:4.16.0-21.el10_2.1.aarch64",
"AppStream-10.2.Z:fence-agents-common-0:4.16.0-21.el10_2.1.ppc64le",
"AppStream-10.2.Z:fence-agents-common-0:4.16.0-21.el10_2.1.s390x",
"AppStream-10.2.Z:fence-agents-common-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-agents-common-debuginfo-0:4.16.0-21.el10_2.1.aarch64",
"AppStream-10.2.Z:fence-agents-common-debuginfo-0:4.16.0-21.el10_2.1.ppc64le",
"AppStream-10.2.Z:fence-agents-common-debuginfo-0:4.16.0-21.el10_2.1.s390x",
"AppStream-10.2.Z:fence-agents-common-debuginfo-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-agents-debuginfo-0:4.16.0-21.el10_2.1.aarch64",
"AppStream-10.2.Z:fence-agents-debuginfo-0:4.16.0-21.el10_2.1.ppc64le",
"AppStream-10.2.Z:fence-agents-debuginfo-0:4.16.0-21.el10_2.1.s390x",
"AppStream-10.2.Z:fence-agents-debuginfo-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-agents-debugsource-0:4.16.0-21.el10_2.1.aarch64",
"AppStream-10.2.Z:fence-agents-debugsource-0:4.16.0-21.el10_2.1.ppc64le",
"AppStream-10.2.Z:fence-agents-debugsource-0:4.16.0-21.el10_2.1.s390x",
"AppStream-10.2.Z:fence-agents-debugsource-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-agents-drac5-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-eaton-snmp-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-emerson-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-eps-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-gce-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-agents-heuristics-ping-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-hpblade-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-ibm-powervs-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-ibm-vpc-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-ibmblade-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-ifmib-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-ilo-moonshot-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-ilo-mp-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-ilo-ssh-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-ilo2-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-intelmodular-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-ipdu-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-ipmilan-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-kdump-0:4.16.0-21.el10_2.1.aarch64",
"AppStream-10.2.Z:fence-agents-kdump-0:4.16.0-21.el10_2.1.ppc64le",
"AppStream-10.2.Z:fence-agents-kdump-0:4.16.0-21.el10_2.1.s390x",
"AppStream-10.2.Z:fence-agents-kdump-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-agents-kdump-debuginfo-0:4.16.0-21.el10_2.1.aarch64",
"AppStream-10.2.Z:fence-agents-kdump-debuginfo-0:4.16.0-21.el10_2.1.ppc64le",
"AppStream-10.2.Z:fence-agents-kdump-debuginfo-0:4.16.0-21.el10_2.1.s390x",
"AppStream-10.2.Z:fence-agents-kdump-debuginfo-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-agents-kubevirt-0:4.16.0-21.el10_2.1.aarch64",
"AppStream-10.2.Z:fence-agents-kubevirt-0:4.16.0-21.el10_2.1.ppc64le",
"AppStream-10.2.Z:fence-agents-kubevirt-0:4.16.0-21.el10_2.1.s390x",
"AppStream-10.2.Z:fence-agents-kubevirt-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-agents-lpar-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-mpath-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-nutanix-ahv-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-openstack-0:4.16.0-21.el10_2.1.ppc64le",
"AppStream-10.2.Z:fence-agents-openstack-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-agents-redfish-0:4.16.0-21.el10_2.1.aarch64",
"AppStream-10.2.Z:fence-agents-redfish-0:4.16.0-21.el10_2.1.ppc64le",
"AppStream-10.2.Z:fence-agents-redfish-0:4.16.0-21.el10_2.1.s390x",
"AppStream-10.2.Z:fence-agents-redfish-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-agents-rhevm-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-rsa-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-rsb-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-sbd-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-scsi-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-virsh-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-vmware-rest-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-vmware-soap-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-wti-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-zvm-0:4.16.0-21.el10_2.1.s390x",
"AppStream-10.2.Z:fence-virt-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-virt-debuginfo-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-virtd-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-virtd-cpg-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-virtd-cpg-debuginfo-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-virtd-debuginfo-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-virtd-libvirt-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-virtd-libvirt-debuginfo-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-virtd-multicast-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-virtd-multicast-debuginfo-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-virtd-serial-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-virtd-serial-debuginfo-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-virtd-tcp-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-virtd-tcp-debuginfo-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:ha-cloud-support-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:ha-cloud-support-debuginfo-0:4.16.0-21.el10_2.1.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32597"
},
{
"category": "external",
"summary": "RHBZ#2447194",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2447194"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32597",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32597"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32597",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32597"
},
{
"category": "external",
"summary": "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-752w-5fwx-jx9f",
"url": "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-752w-5fwx-jx9f"
}
],
"release_date": "2026-03-12T21:41:50.427000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-19T16:22:56+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.2.Z:fence-agents-0:4.16.0-21.el10_2.1.src",
"AppStream-10.2.Z:fence-agents-aliyun-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-agents-all-0:4.16.0-21.el10_2.1.aarch64",
"AppStream-10.2.Z:fence-agents-all-0:4.16.0-21.el10_2.1.ppc64le",
"AppStream-10.2.Z:fence-agents-all-0:4.16.0-21.el10_2.1.s390x",
"AppStream-10.2.Z:fence-agents-all-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-agents-amt-ws-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-apc-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-apc-snmp-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-aws-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-agents-azure-arm-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-agents-bladecenter-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-brocade-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-cisco-mds-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-cisco-ucs-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-common-0:4.16.0-21.el10_2.1.aarch64",
"AppStream-10.2.Z:fence-agents-common-0:4.16.0-21.el10_2.1.ppc64le",
"AppStream-10.2.Z:fence-agents-common-0:4.16.0-21.el10_2.1.s390x",
"AppStream-10.2.Z:fence-agents-common-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-agents-common-debuginfo-0:4.16.0-21.el10_2.1.aarch64",
"AppStream-10.2.Z:fence-agents-common-debuginfo-0:4.16.0-21.el10_2.1.ppc64le",
"AppStream-10.2.Z:fence-agents-common-debuginfo-0:4.16.0-21.el10_2.1.s390x",
"AppStream-10.2.Z:fence-agents-common-debuginfo-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-agents-debuginfo-0:4.16.0-21.el10_2.1.aarch64",
"AppStream-10.2.Z:fence-agents-debuginfo-0:4.16.0-21.el10_2.1.ppc64le",
"AppStream-10.2.Z:fence-agents-debuginfo-0:4.16.0-21.el10_2.1.s390x",
"AppStream-10.2.Z:fence-agents-debuginfo-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-agents-debugsource-0:4.16.0-21.el10_2.1.aarch64",
"AppStream-10.2.Z:fence-agents-debugsource-0:4.16.0-21.el10_2.1.ppc64le",
"AppStream-10.2.Z:fence-agents-debugsource-0:4.16.0-21.el10_2.1.s390x",
"AppStream-10.2.Z:fence-agents-debugsource-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-agents-drac5-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-eaton-snmp-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-emerson-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-eps-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-gce-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-agents-heuristics-ping-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-hpblade-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-ibm-powervs-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-ibm-vpc-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-ibmblade-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-ifmib-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-ilo-moonshot-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-ilo-mp-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-ilo-ssh-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-ilo2-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-intelmodular-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-ipdu-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-ipmilan-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-kdump-0:4.16.0-21.el10_2.1.aarch64",
"AppStream-10.2.Z:fence-agents-kdump-0:4.16.0-21.el10_2.1.ppc64le",
"AppStream-10.2.Z:fence-agents-kdump-0:4.16.0-21.el10_2.1.s390x",
"AppStream-10.2.Z:fence-agents-kdump-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-agents-kdump-debuginfo-0:4.16.0-21.el10_2.1.aarch64",
"AppStream-10.2.Z:fence-agents-kdump-debuginfo-0:4.16.0-21.el10_2.1.ppc64le",
"AppStream-10.2.Z:fence-agents-kdump-debuginfo-0:4.16.0-21.el10_2.1.s390x",
"AppStream-10.2.Z:fence-agents-kdump-debuginfo-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-agents-kubevirt-0:4.16.0-21.el10_2.1.aarch64",
"AppStream-10.2.Z:fence-agents-kubevirt-0:4.16.0-21.el10_2.1.ppc64le",
"AppStream-10.2.Z:fence-agents-kubevirt-0:4.16.0-21.el10_2.1.s390x",
"AppStream-10.2.Z:fence-agents-kubevirt-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-agents-lpar-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-mpath-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-nutanix-ahv-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-openstack-0:4.16.0-21.el10_2.1.ppc64le",
"AppStream-10.2.Z:fence-agents-openstack-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-agents-redfish-0:4.16.0-21.el10_2.1.aarch64",
"AppStream-10.2.Z:fence-agents-redfish-0:4.16.0-21.el10_2.1.ppc64le",
"AppStream-10.2.Z:fence-agents-redfish-0:4.16.0-21.el10_2.1.s390x",
"AppStream-10.2.Z:fence-agents-redfish-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-agents-rhevm-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-rsa-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-rsb-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-sbd-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-scsi-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-virsh-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-vmware-rest-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-vmware-soap-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-wti-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-zvm-0:4.16.0-21.el10_2.1.s390x",
"AppStream-10.2.Z:fence-virt-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-virt-debuginfo-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-virtd-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-virtd-cpg-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-virtd-cpg-debuginfo-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-virtd-debuginfo-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-virtd-libvirt-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-virtd-libvirt-debuginfo-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-virtd-multicast-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-virtd-multicast-debuginfo-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-virtd-serial-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-virtd-serial-debuginfo-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-virtd-tcp-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-virtd-tcp-debuginfo-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:ha-cloud-support-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:ha-cloud-support-debuginfo-0:4.16.0-21.el10_2.1.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:19138"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"AppStream-10.2.Z:fence-agents-0:4.16.0-21.el10_2.1.src",
"AppStream-10.2.Z:fence-agents-aliyun-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-agents-all-0:4.16.0-21.el10_2.1.aarch64",
"AppStream-10.2.Z:fence-agents-all-0:4.16.0-21.el10_2.1.ppc64le",
"AppStream-10.2.Z:fence-agents-all-0:4.16.0-21.el10_2.1.s390x",
"AppStream-10.2.Z:fence-agents-all-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-agents-amt-ws-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-apc-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-apc-snmp-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-aws-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-agents-azure-arm-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-agents-bladecenter-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-brocade-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-cisco-mds-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-cisco-ucs-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-common-0:4.16.0-21.el10_2.1.aarch64",
"AppStream-10.2.Z:fence-agents-common-0:4.16.0-21.el10_2.1.ppc64le",
"AppStream-10.2.Z:fence-agents-common-0:4.16.0-21.el10_2.1.s390x",
"AppStream-10.2.Z:fence-agents-common-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-agents-common-debuginfo-0:4.16.0-21.el10_2.1.aarch64",
"AppStream-10.2.Z:fence-agents-common-debuginfo-0:4.16.0-21.el10_2.1.ppc64le",
"AppStream-10.2.Z:fence-agents-common-debuginfo-0:4.16.0-21.el10_2.1.s390x",
"AppStream-10.2.Z:fence-agents-common-debuginfo-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-agents-debuginfo-0:4.16.0-21.el10_2.1.aarch64",
"AppStream-10.2.Z:fence-agents-debuginfo-0:4.16.0-21.el10_2.1.ppc64le",
"AppStream-10.2.Z:fence-agents-debuginfo-0:4.16.0-21.el10_2.1.s390x",
"AppStream-10.2.Z:fence-agents-debuginfo-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-agents-debugsource-0:4.16.0-21.el10_2.1.aarch64",
"AppStream-10.2.Z:fence-agents-debugsource-0:4.16.0-21.el10_2.1.ppc64le",
"AppStream-10.2.Z:fence-agents-debugsource-0:4.16.0-21.el10_2.1.s390x",
"AppStream-10.2.Z:fence-agents-debugsource-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-agents-drac5-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-eaton-snmp-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-emerson-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-eps-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-gce-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-agents-heuristics-ping-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-hpblade-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-ibm-powervs-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-ibm-vpc-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-ibmblade-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-ifmib-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-ilo-moonshot-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-ilo-mp-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-ilo-ssh-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-ilo2-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-intelmodular-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-ipdu-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-ipmilan-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-kdump-0:4.16.0-21.el10_2.1.aarch64",
"AppStream-10.2.Z:fence-agents-kdump-0:4.16.0-21.el10_2.1.ppc64le",
"AppStream-10.2.Z:fence-agents-kdump-0:4.16.0-21.el10_2.1.s390x",
"AppStream-10.2.Z:fence-agents-kdump-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-agents-kdump-debuginfo-0:4.16.0-21.el10_2.1.aarch64",
"AppStream-10.2.Z:fence-agents-kdump-debuginfo-0:4.16.0-21.el10_2.1.ppc64le",
"AppStream-10.2.Z:fence-agents-kdump-debuginfo-0:4.16.0-21.el10_2.1.s390x",
"AppStream-10.2.Z:fence-agents-kdump-debuginfo-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-agents-kubevirt-0:4.16.0-21.el10_2.1.aarch64",
"AppStream-10.2.Z:fence-agents-kubevirt-0:4.16.0-21.el10_2.1.ppc64le",
"AppStream-10.2.Z:fence-agents-kubevirt-0:4.16.0-21.el10_2.1.s390x",
"AppStream-10.2.Z:fence-agents-kubevirt-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-agents-lpar-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-mpath-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-nutanix-ahv-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-openstack-0:4.16.0-21.el10_2.1.ppc64le",
"AppStream-10.2.Z:fence-agents-openstack-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-agents-redfish-0:4.16.0-21.el10_2.1.aarch64",
"AppStream-10.2.Z:fence-agents-redfish-0:4.16.0-21.el10_2.1.ppc64le",
"AppStream-10.2.Z:fence-agents-redfish-0:4.16.0-21.el10_2.1.s390x",
"AppStream-10.2.Z:fence-agents-redfish-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-agents-rhevm-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-rsa-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-rsb-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-sbd-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-scsi-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-virsh-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-vmware-rest-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-vmware-soap-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-wti-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-zvm-0:4.16.0-21.el10_2.1.s390x",
"AppStream-10.2.Z:fence-virt-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-virt-debuginfo-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-virtd-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-virtd-cpg-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-virtd-cpg-debuginfo-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-virtd-debuginfo-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-virtd-libvirt-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-virtd-libvirt-debuginfo-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-virtd-multicast-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-virtd-multicast-debuginfo-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-virtd-serial-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-virtd-serial-debuginfo-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-virtd-tcp-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-virtd-tcp-debuginfo-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:ha-cloud-support-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:ha-cloud-support-debuginfo-0:4.16.0-21.el10_2.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"AppStream-10.2.Z:fence-agents-0:4.16.0-21.el10_2.1.src",
"AppStream-10.2.Z:fence-agents-aliyun-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-agents-all-0:4.16.0-21.el10_2.1.aarch64",
"AppStream-10.2.Z:fence-agents-all-0:4.16.0-21.el10_2.1.ppc64le",
"AppStream-10.2.Z:fence-agents-all-0:4.16.0-21.el10_2.1.s390x",
"AppStream-10.2.Z:fence-agents-all-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-agents-amt-ws-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-apc-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-apc-snmp-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-aws-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-agents-azure-arm-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-agents-bladecenter-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-brocade-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-cisco-mds-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-cisco-ucs-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-common-0:4.16.0-21.el10_2.1.aarch64",
"AppStream-10.2.Z:fence-agents-common-0:4.16.0-21.el10_2.1.ppc64le",
"AppStream-10.2.Z:fence-agents-common-0:4.16.0-21.el10_2.1.s390x",
"AppStream-10.2.Z:fence-agents-common-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-agents-common-debuginfo-0:4.16.0-21.el10_2.1.aarch64",
"AppStream-10.2.Z:fence-agents-common-debuginfo-0:4.16.0-21.el10_2.1.ppc64le",
"AppStream-10.2.Z:fence-agents-common-debuginfo-0:4.16.0-21.el10_2.1.s390x",
"AppStream-10.2.Z:fence-agents-common-debuginfo-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-agents-debuginfo-0:4.16.0-21.el10_2.1.aarch64",
"AppStream-10.2.Z:fence-agents-debuginfo-0:4.16.0-21.el10_2.1.ppc64le",
"AppStream-10.2.Z:fence-agents-debuginfo-0:4.16.0-21.el10_2.1.s390x",
"AppStream-10.2.Z:fence-agents-debuginfo-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-agents-debugsource-0:4.16.0-21.el10_2.1.aarch64",
"AppStream-10.2.Z:fence-agents-debugsource-0:4.16.0-21.el10_2.1.ppc64le",
"AppStream-10.2.Z:fence-agents-debugsource-0:4.16.0-21.el10_2.1.s390x",
"AppStream-10.2.Z:fence-agents-debugsource-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-agents-drac5-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-eaton-snmp-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-emerson-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-eps-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-gce-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-agents-heuristics-ping-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-hpblade-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-ibm-powervs-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-ibm-vpc-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-ibmblade-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-ifmib-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-ilo-moonshot-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-ilo-mp-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-ilo-ssh-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-ilo2-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-intelmodular-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-ipdu-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-ipmilan-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-kdump-0:4.16.0-21.el10_2.1.aarch64",
"AppStream-10.2.Z:fence-agents-kdump-0:4.16.0-21.el10_2.1.ppc64le",
"AppStream-10.2.Z:fence-agents-kdump-0:4.16.0-21.el10_2.1.s390x",
"AppStream-10.2.Z:fence-agents-kdump-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-agents-kdump-debuginfo-0:4.16.0-21.el10_2.1.aarch64",
"AppStream-10.2.Z:fence-agents-kdump-debuginfo-0:4.16.0-21.el10_2.1.ppc64le",
"AppStream-10.2.Z:fence-agents-kdump-debuginfo-0:4.16.0-21.el10_2.1.s390x",
"AppStream-10.2.Z:fence-agents-kdump-debuginfo-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-agents-kubevirt-0:4.16.0-21.el10_2.1.aarch64",
"AppStream-10.2.Z:fence-agents-kubevirt-0:4.16.0-21.el10_2.1.ppc64le",
"AppStream-10.2.Z:fence-agents-kubevirt-0:4.16.0-21.el10_2.1.s390x",
"AppStream-10.2.Z:fence-agents-kubevirt-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-agents-lpar-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-mpath-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-nutanix-ahv-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-openstack-0:4.16.0-21.el10_2.1.ppc64le",
"AppStream-10.2.Z:fence-agents-openstack-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-agents-redfish-0:4.16.0-21.el10_2.1.aarch64",
"AppStream-10.2.Z:fence-agents-redfish-0:4.16.0-21.el10_2.1.ppc64le",
"AppStream-10.2.Z:fence-agents-redfish-0:4.16.0-21.el10_2.1.s390x",
"AppStream-10.2.Z:fence-agents-redfish-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-agents-rhevm-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-rsa-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-rsb-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-sbd-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-scsi-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-virsh-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-vmware-rest-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-vmware-soap-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-wti-0:4.16.0-21.el10_2.1.noarch",
"AppStream-10.2.Z:fence-agents-zvm-0:4.16.0-21.el10_2.1.s390x",
"AppStream-10.2.Z:fence-virt-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-virt-debuginfo-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-virtd-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-virtd-cpg-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-virtd-cpg-debuginfo-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-virtd-debuginfo-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-virtd-libvirt-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-virtd-libvirt-debuginfo-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-virtd-multicast-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-virtd-multicast-debuginfo-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-virtd-serial-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-virtd-serial-debuginfo-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-virtd-tcp-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:fence-virtd-tcp-debuginfo-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:ha-cloud-support-0:4.16.0-21.el10_2.1.x86_64",
"AppStream-10.2.Z:ha-cloud-support-debuginfo-0:4.16.0-21.el10_2.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "pyjwt: PyJWT accepts unknown `crit` header extensions (RFC 7515 \u00a74.1.11 MUST violation)"
}
]
}
RHSA-2026:19355
Vulnerability from csaf_redhat - Published: 2026-05-19 22:05 - Updated: 2026-07-20 04:37Summary
Red Hat Security Advisory: fence-agents security update
Severity
Important
Notes
Topic: An update for fence-agents is now available for Red Hat Enterprise Linux 9.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster.
Security Fix(es):
* cryptography: cryptography Subgroup Attack Due to Missing Subgroup Validation for SECT Curves (CVE-2026-26007)
* pyjwt: PyJWT accepts unknown `crit` header extensions (RFC 7515 ?4.1.11 MUST violation) (CVE-2026-32597)
* pyasn1: pyasn1 Vulnerable to Denial of Service via Unbounded Recursion (CVE-2026-30922)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A validation flaw has been discovered in the python cryptography package. This missing validation allows an attacker to provide a public key point P from a small-order subgroup. This can lead to security issues in various situations, such as the most commonly used signature verification (ECDSA) and shared key negotiation (ECDH). When the victim computes the shared secret as S = [victim_private_key]P via ECDH, this leaks information about victim_private_key mod (small_subgroup_order). For curves with cofactor > 1, this reveals the least significant bits of the private key. When these weak public keys are used in ECDSA , it's easy to forge signatures on the small subgroup. Only SECT curves are impacted by this.
7.4 (High)
Affected products
Fixed
96 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-0:4.10.0-110.el9_8.2.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-aliyun-0:4.10.0-110.el9_8.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-all-0:4.10.0-110.el9_8.2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-all-0:4.10.0-110.el9_8.2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-all-0:4.10.0-110.el9_8.2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-all-0:4.10.0-110.el9_8.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-amt-ws-0:4.10.0-110.el9_8.2.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-apc-0:4.10.0-110.el9_8.2.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-apc-snmp-0:4.10.0-110.el9_8.2.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-aws-0:4.10.0-110.el9_8.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-azure-arm-0:4.10.0-110.el9_8.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-bladecenter-0:4.10.0-110.el9_8.2.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-brocade-0:4.10.0-110.el9_8.2.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-cisco-mds-0:4.10.0-110.el9_8.2.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-cisco-ucs-0:4.10.0-110.el9_8.2.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-common-0:4.10.0-110.el9_8.2.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-compute-0:4.10.0-110.el9_8.2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-compute-0:4.10.0-110.el9_8.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-debuginfo-0:4.10.0-110.el9_8.2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-debuginfo-0:4.10.0-110.el9_8.2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-debuginfo-0:4.10.0-110.el9_8.2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-debuginfo-0:4.10.0-110.el9_8.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-debugsource-0:4.10.0-110.el9_8.2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-debugsource-0:4.10.0-110.el9_8.2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-debugsource-0:4.10.0-110.el9_8.2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-debugsource-0:4.10.0-110.el9_8.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-drac5-0:4.10.0-110.el9_8.2.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-eaton-snmp-0:4.10.0-110.el9_8.2.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-emerson-0:4.10.0-110.el9_8.2.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-eps-0:4.10.0-110.el9_8.2.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-gce-0:4.10.0-110.el9_8.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-heuristics-ping-0:4.10.0-110.el9_8.2.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-hpblade-0:4.10.0-110.el9_8.2.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ibm-powervs-0:4.10.0-110.el9_8.2.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ibm-vpc-0:4.10.0-110.el9_8.2.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ibmblade-0:4.10.0-110.el9_8.2.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ifmib-0:4.10.0-110.el9_8.2.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ilo-moonshot-0:4.10.0-110.el9_8.2.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ilo-mp-0:4.10.0-110.el9_8.2.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ilo-ssh-0:4.10.0-110.el9_8.2.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ilo2-0:4.10.0-110.el9_8.2.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-intelmodular-0:4.10.0-110.el9_8.2.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ipdu-0:4.10.0-110.el9_8.2.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ipmilan-0:4.10.0-110.el9_8.2.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kdump-0:4.10.0-110.el9_8.2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kdump-0:4.10.0-110.el9_8.2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kdump-0:4.10.0-110.el9_8.2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kdump-0:4.10.0-110.el9_8.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kdump-debuginfo-0:4.10.0-110.el9_8.2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kdump-debuginfo-0:4.10.0-110.el9_8.2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kdump-debuginfo-0:4.10.0-110.el9_8.2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kdump-debuginfo-0:4.10.0-110.el9_8.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kubevirt-0:4.10.0-110.el9_8.2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kubevirt-0:4.10.0-110.el9_8.2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kubevirt-0:4.10.0-110.el9_8.2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kubevirt-0:4.10.0-110.el9_8.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kubevirt-debuginfo-0:4.10.0-110.el9_8.2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kubevirt-debuginfo-0:4.10.0-110.el9_8.2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kubevirt-debuginfo-0:4.10.0-110.el9_8.2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kubevirt-debuginfo-0:4.10.0-110.el9_8.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-lpar-0:4.10.0-110.el9_8.2.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-mpath-0:4.10.0-110.el9_8.2.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-nutanix-ahv-0:4.10.0-110.el9_8.2.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-openstack-0:4.10.0-110.el9_8.2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-openstack-0:4.10.0-110.el9_8.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-redfish-0:4.10.0-110.el9_8.2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-redfish-0:4.10.0-110.el9_8.2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-redfish-0:4.10.0-110.el9_8.2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-redfish-0:4.10.0-110.el9_8.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-rhevm-0:4.10.0-110.el9_8.2.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-rsa-0:4.10.0-110.el9_8.2.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-rsb-0:4.10.0-110.el9_8.2.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-sbd-0:4.10.0-110.el9_8.2.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-scsi-0:4.10.0-110.el9_8.2.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-virsh-0:4.10.0-110.el9_8.2.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-vmware-rest-0:4.10.0-110.el9_8.2.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-vmware-soap-0:4.10.0-110.el9_8.2.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-wti-0:4.10.0-110.el9_8.2.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-zvm-0:4.10.0-110.el9_8.2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-virt-0:4.10.0-110.el9_8.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-virt-debuginfo-0:4.10.0-110.el9_8.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-0:4.10.0-110.el9_8.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-cpg-0:4.10.0-110.el9_8.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-cpg-debuginfo-0:4.10.0-110.el9_8.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-debuginfo-0:4.10.0-110.el9_8.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-libvirt-0:4.10.0-110.el9_8.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-libvirt-debuginfo-0:4.10.0-110.el9_8.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-multicast-0:4.10.0-110.el9_8.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-multicast-debuginfo-0:4.10.0-110.el9_8.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-serial-0:4.10.0-110.el9_8.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-serial-debuginfo-0:4.10.0-110.el9_8.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-tcp-0:4.10.0-110.el9_8.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-tcp-debuginfo-0:4.10.0-110.el9_8.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:ha-cloud-support-0:4.10.0-110.el9_8.2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:ha-cloud-support-0:4.10.0-110.el9_8.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:ha-cloud-support-debuginfo-0:4.10.0-110.el9_8.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
An unbounded recursion flaw has been discovered in the pypi pyasn1 library. This uncontrolled recursion occurs when decoding ASN.1 data with deeply nested structures. An attacker can supply a crafted payload containing nested SEQUENCE (0x30) or SET (0x31) tags with Indefinite Length (0x80) markers. This forces the decoder to recursively call itself until the Python interpreter crashes with a RecursionError or consumes all available memory (OOM), crashing the host application.
7.5 (High)
Affected products
Fixed
96 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-0:4.10.0-110.el9_8.2.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-aliyun-0:4.10.0-110.el9_8.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-all-0:4.10.0-110.el9_8.2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-all-0:4.10.0-110.el9_8.2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-all-0:4.10.0-110.el9_8.2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-all-0:4.10.0-110.el9_8.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-amt-ws-0:4.10.0-110.el9_8.2.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-apc-0:4.10.0-110.el9_8.2.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-apc-snmp-0:4.10.0-110.el9_8.2.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-aws-0:4.10.0-110.el9_8.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-azure-arm-0:4.10.0-110.el9_8.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-bladecenter-0:4.10.0-110.el9_8.2.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-brocade-0:4.10.0-110.el9_8.2.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-cisco-mds-0:4.10.0-110.el9_8.2.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-cisco-ucs-0:4.10.0-110.el9_8.2.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-common-0:4.10.0-110.el9_8.2.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-compute-0:4.10.0-110.el9_8.2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-compute-0:4.10.0-110.el9_8.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-debuginfo-0:4.10.0-110.el9_8.2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-debuginfo-0:4.10.0-110.el9_8.2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-debuginfo-0:4.10.0-110.el9_8.2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-debuginfo-0:4.10.0-110.el9_8.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-debugsource-0:4.10.0-110.el9_8.2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-debugsource-0:4.10.0-110.el9_8.2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-debugsource-0:4.10.0-110.el9_8.2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-debugsource-0:4.10.0-110.el9_8.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-drac5-0:4.10.0-110.el9_8.2.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-eaton-snmp-0:4.10.0-110.el9_8.2.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-emerson-0:4.10.0-110.el9_8.2.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-eps-0:4.10.0-110.el9_8.2.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-gce-0:4.10.0-110.el9_8.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-heuristics-ping-0:4.10.0-110.el9_8.2.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-hpblade-0:4.10.0-110.el9_8.2.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ibm-powervs-0:4.10.0-110.el9_8.2.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ibm-vpc-0:4.10.0-110.el9_8.2.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ibmblade-0:4.10.0-110.el9_8.2.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ifmib-0:4.10.0-110.el9_8.2.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ilo-moonshot-0:4.10.0-110.el9_8.2.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ilo-mp-0:4.10.0-110.el9_8.2.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ilo-ssh-0:4.10.0-110.el9_8.2.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ilo2-0:4.10.0-110.el9_8.2.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-intelmodular-0:4.10.0-110.el9_8.2.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ipdu-0:4.10.0-110.el9_8.2.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ipmilan-0:4.10.0-110.el9_8.2.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kdump-0:4.10.0-110.el9_8.2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kdump-0:4.10.0-110.el9_8.2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kdump-0:4.10.0-110.el9_8.2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kdump-0:4.10.0-110.el9_8.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kdump-debuginfo-0:4.10.0-110.el9_8.2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kdump-debuginfo-0:4.10.0-110.el9_8.2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kdump-debuginfo-0:4.10.0-110.el9_8.2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kdump-debuginfo-0:4.10.0-110.el9_8.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kubevirt-0:4.10.0-110.el9_8.2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kubevirt-0:4.10.0-110.el9_8.2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kubevirt-0:4.10.0-110.el9_8.2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kubevirt-0:4.10.0-110.el9_8.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kubevirt-debuginfo-0:4.10.0-110.el9_8.2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kubevirt-debuginfo-0:4.10.0-110.el9_8.2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kubevirt-debuginfo-0:4.10.0-110.el9_8.2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kubevirt-debuginfo-0:4.10.0-110.el9_8.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-lpar-0:4.10.0-110.el9_8.2.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-mpath-0:4.10.0-110.el9_8.2.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-nutanix-ahv-0:4.10.0-110.el9_8.2.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-openstack-0:4.10.0-110.el9_8.2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-openstack-0:4.10.0-110.el9_8.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-redfish-0:4.10.0-110.el9_8.2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-redfish-0:4.10.0-110.el9_8.2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-redfish-0:4.10.0-110.el9_8.2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-redfish-0:4.10.0-110.el9_8.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-rhevm-0:4.10.0-110.el9_8.2.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-rsa-0:4.10.0-110.el9_8.2.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-rsb-0:4.10.0-110.el9_8.2.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-sbd-0:4.10.0-110.el9_8.2.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-scsi-0:4.10.0-110.el9_8.2.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-virsh-0:4.10.0-110.el9_8.2.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-vmware-rest-0:4.10.0-110.el9_8.2.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-vmware-soap-0:4.10.0-110.el9_8.2.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-wti-0:4.10.0-110.el9_8.2.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-zvm-0:4.10.0-110.el9_8.2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-virt-0:4.10.0-110.el9_8.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-virt-debuginfo-0:4.10.0-110.el9_8.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-0:4.10.0-110.el9_8.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-cpg-0:4.10.0-110.el9_8.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-cpg-debuginfo-0:4.10.0-110.el9_8.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-debuginfo-0:4.10.0-110.el9_8.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-libvirt-0:4.10.0-110.el9_8.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-libvirt-debuginfo-0:4.10.0-110.el9_8.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-multicast-0:4.10.0-110.el9_8.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-multicast-debuginfo-0:4.10.0-110.el9_8.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-serial-0:4.10.0-110.el9_8.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-serial-debuginfo-0:4.10.0-110.el9_8.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-tcp-0:4.10.0-110.el9_8.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-tcp-debuginfo-0:4.10.0-110.el9_8.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:ha-cloud-support-0:4.10.0-110.el9_8.2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:ha-cloud-support-0:4.10.0-110.el9_8.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:ha-cloud-support-debuginfo-0:4.10.0-110.el9_8.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A missing verification step has been discovered in PyJWT. PyJWT does not validate the crit (Critical) Header Parameter defined in RFC 7515 §4.1.11. When a JWS token contains a crit array listing extensions that PyJWT does not understand, the library accepts the token instead of rejecting it. This violates the MUST requirement in the RFC.
7.5 (High)
Affected products
Fixed
96 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-0:4.10.0-110.el9_8.2.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-aliyun-0:4.10.0-110.el9_8.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-all-0:4.10.0-110.el9_8.2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-all-0:4.10.0-110.el9_8.2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-all-0:4.10.0-110.el9_8.2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-all-0:4.10.0-110.el9_8.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-amt-ws-0:4.10.0-110.el9_8.2.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-apc-0:4.10.0-110.el9_8.2.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-apc-snmp-0:4.10.0-110.el9_8.2.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-aws-0:4.10.0-110.el9_8.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-azure-arm-0:4.10.0-110.el9_8.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-bladecenter-0:4.10.0-110.el9_8.2.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-brocade-0:4.10.0-110.el9_8.2.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-cisco-mds-0:4.10.0-110.el9_8.2.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-cisco-ucs-0:4.10.0-110.el9_8.2.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-common-0:4.10.0-110.el9_8.2.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-compute-0:4.10.0-110.el9_8.2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-compute-0:4.10.0-110.el9_8.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-debuginfo-0:4.10.0-110.el9_8.2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-debuginfo-0:4.10.0-110.el9_8.2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-debuginfo-0:4.10.0-110.el9_8.2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-debuginfo-0:4.10.0-110.el9_8.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-debugsource-0:4.10.0-110.el9_8.2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-debugsource-0:4.10.0-110.el9_8.2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-debugsource-0:4.10.0-110.el9_8.2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-debugsource-0:4.10.0-110.el9_8.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-drac5-0:4.10.0-110.el9_8.2.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-eaton-snmp-0:4.10.0-110.el9_8.2.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-emerson-0:4.10.0-110.el9_8.2.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-eps-0:4.10.0-110.el9_8.2.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-gce-0:4.10.0-110.el9_8.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-heuristics-ping-0:4.10.0-110.el9_8.2.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-hpblade-0:4.10.0-110.el9_8.2.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ibm-powervs-0:4.10.0-110.el9_8.2.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ibm-vpc-0:4.10.0-110.el9_8.2.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ibmblade-0:4.10.0-110.el9_8.2.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ifmib-0:4.10.0-110.el9_8.2.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ilo-moonshot-0:4.10.0-110.el9_8.2.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ilo-mp-0:4.10.0-110.el9_8.2.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ilo-ssh-0:4.10.0-110.el9_8.2.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ilo2-0:4.10.0-110.el9_8.2.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-intelmodular-0:4.10.0-110.el9_8.2.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ipdu-0:4.10.0-110.el9_8.2.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ipmilan-0:4.10.0-110.el9_8.2.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kdump-0:4.10.0-110.el9_8.2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kdump-0:4.10.0-110.el9_8.2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kdump-0:4.10.0-110.el9_8.2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kdump-0:4.10.0-110.el9_8.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kdump-debuginfo-0:4.10.0-110.el9_8.2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kdump-debuginfo-0:4.10.0-110.el9_8.2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kdump-debuginfo-0:4.10.0-110.el9_8.2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kdump-debuginfo-0:4.10.0-110.el9_8.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kubevirt-0:4.10.0-110.el9_8.2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kubevirt-0:4.10.0-110.el9_8.2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kubevirt-0:4.10.0-110.el9_8.2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kubevirt-0:4.10.0-110.el9_8.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kubevirt-debuginfo-0:4.10.0-110.el9_8.2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kubevirt-debuginfo-0:4.10.0-110.el9_8.2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kubevirt-debuginfo-0:4.10.0-110.el9_8.2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kubevirt-debuginfo-0:4.10.0-110.el9_8.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-lpar-0:4.10.0-110.el9_8.2.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-mpath-0:4.10.0-110.el9_8.2.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-nutanix-ahv-0:4.10.0-110.el9_8.2.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-openstack-0:4.10.0-110.el9_8.2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-openstack-0:4.10.0-110.el9_8.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-redfish-0:4.10.0-110.el9_8.2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-redfish-0:4.10.0-110.el9_8.2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-redfish-0:4.10.0-110.el9_8.2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-redfish-0:4.10.0-110.el9_8.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-rhevm-0:4.10.0-110.el9_8.2.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-rsa-0:4.10.0-110.el9_8.2.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-rsb-0:4.10.0-110.el9_8.2.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-sbd-0:4.10.0-110.el9_8.2.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-scsi-0:4.10.0-110.el9_8.2.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-virsh-0:4.10.0-110.el9_8.2.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-vmware-rest-0:4.10.0-110.el9_8.2.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-vmware-soap-0:4.10.0-110.el9_8.2.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-wti-0:4.10.0-110.el9_8.2.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-agents-zvm-0:4.10.0-110.el9_8.2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-virt-0:4.10.0-110.el9_8.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-virt-debuginfo-0:4.10.0-110.el9_8.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-0:4.10.0-110.el9_8.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-cpg-0:4.10.0-110.el9_8.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-cpg-debuginfo-0:4.10.0-110.el9_8.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-debuginfo-0:4.10.0-110.el9_8.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-libvirt-0:4.10.0-110.el9_8.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-libvirt-debuginfo-0:4.10.0-110.el9_8.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-multicast-0:4.10.0-110.el9_8.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-multicast-debuginfo-0:4.10.0-110.el9_8.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-serial-0:4.10.0-110.el9_8.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-serial-debuginfo-0:4.10.0-110.el9_8.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-tcp-0:4.10.0-110.el9_8.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-tcp-debuginfo-0:4.10.0-110.el9_8.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:ha-cloud-support-0:4.10.0-110.el9_8.2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:ha-cloud-support-0:4.10.0-110.el9_8.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:ha-cloud-support-debuginfo-0:4.10.0-110.el9_8.2.x86_64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
References
23 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for fence-agents is now available for Red Hat Enterprise Linux 9.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster. \n\nSecurity Fix(es):\n\n* cryptography: cryptography Subgroup Attack Due to Missing Subgroup Validation for SECT Curves (CVE-2026-26007)\n\n* pyjwt: PyJWT accepts unknown `crit` header extensions (RFC 7515 ?4.1.11 MUST violation) (CVE-2026-32597)\n\n* pyasn1: pyasn1 Vulnerable to Denial of Service via Unbounded Recursion (CVE-2026-30922)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:19355",
"url": "https://access.redhat.com/errata/RHSA-2026:19355"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2438762",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2438762"
},
{
"category": "external",
"summary": "2447194",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2447194"
},
{
"category": "external",
"summary": "2448553",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2448553"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_19355.json"
}
],
"title": "Red Hat Security Advisory: fence-agents security update",
"tracking": {
"current_release_date": "2026-07-20T04:37:04+00:00",
"generator": {
"date": "2026-07-20T04:37:04+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.7"
}
},
"id": "RHSA-2026:19355",
"initial_release_date": "2026-05-19T22:05:17+00:00",
"revision_history": [
{
"date": "2026-05-19T22:05:17+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-05-19T22:05:17+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-07-20T04:37:04+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AppStream (v. 9)",
"product": {
"name": "Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:enterprise_linux:9::appstream"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "fence-agents-0:4.10.0-110.el9_8.2.src",
"product": {
"name": "fence-agents-0:4.10.0-110.el9_8.2.src",
"product_id": "fence-agents-0:4.10.0-110.el9_8.2.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents@4.10.0-110.el9_8.2?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "fence-agents-aliyun-0:4.10.0-110.el9_8.2.x86_64",
"product": {
"name": "fence-agents-aliyun-0:4.10.0-110.el9_8.2.x86_64",
"product_id": "fence-agents-aliyun-0:4.10.0-110.el9_8.2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-aliyun@4.10.0-110.el9_8.2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "fence-agents-all-0:4.10.0-110.el9_8.2.x86_64",
"product": {
"name": "fence-agents-all-0:4.10.0-110.el9_8.2.x86_64",
"product_id": "fence-agents-all-0:4.10.0-110.el9_8.2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-all@4.10.0-110.el9_8.2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "fence-agents-aws-0:4.10.0-110.el9_8.2.x86_64",
"product": {
"name": "fence-agents-aws-0:4.10.0-110.el9_8.2.x86_64",
"product_id": "fence-agents-aws-0:4.10.0-110.el9_8.2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-aws@4.10.0-110.el9_8.2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "fence-agents-azure-arm-0:4.10.0-110.el9_8.2.x86_64",
"product": {
"name": "fence-agents-azure-arm-0:4.10.0-110.el9_8.2.x86_64",
"product_id": "fence-agents-azure-arm-0:4.10.0-110.el9_8.2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-azure-arm@4.10.0-110.el9_8.2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "fence-agents-compute-0:4.10.0-110.el9_8.2.x86_64",
"product": {
"name": "fence-agents-compute-0:4.10.0-110.el9_8.2.x86_64",
"product_id": "fence-agents-compute-0:4.10.0-110.el9_8.2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-compute@4.10.0-110.el9_8.2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "fence-agents-gce-0:4.10.0-110.el9_8.2.x86_64",
"product": {
"name": "fence-agents-gce-0:4.10.0-110.el9_8.2.x86_64",
"product_id": "fence-agents-gce-0:4.10.0-110.el9_8.2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-gce@4.10.0-110.el9_8.2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "fence-agents-kdump-0:4.10.0-110.el9_8.2.x86_64",
"product": {
"name": "fence-agents-kdump-0:4.10.0-110.el9_8.2.x86_64",
"product_id": "fence-agents-kdump-0:4.10.0-110.el9_8.2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-kdump@4.10.0-110.el9_8.2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "fence-agents-kubevirt-0:4.10.0-110.el9_8.2.x86_64",
"product": {
"name": "fence-agents-kubevirt-0:4.10.0-110.el9_8.2.x86_64",
"product_id": "fence-agents-kubevirt-0:4.10.0-110.el9_8.2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-kubevirt@4.10.0-110.el9_8.2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "fence-agents-openstack-0:4.10.0-110.el9_8.2.x86_64",
"product": {
"name": "fence-agents-openstack-0:4.10.0-110.el9_8.2.x86_64",
"product_id": "fence-agents-openstack-0:4.10.0-110.el9_8.2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-openstack@4.10.0-110.el9_8.2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "fence-agents-redfish-0:4.10.0-110.el9_8.2.x86_64",
"product": {
"name": "fence-agents-redfish-0:4.10.0-110.el9_8.2.x86_64",
"product_id": "fence-agents-redfish-0:4.10.0-110.el9_8.2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-redfish@4.10.0-110.el9_8.2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "fence-virt-0:4.10.0-110.el9_8.2.x86_64",
"product": {
"name": "fence-virt-0:4.10.0-110.el9_8.2.x86_64",
"product_id": "fence-virt-0:4.10.0-110.el9_8.2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-virt@4.10.0-110.el9_8.2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "fence-virtd-0:4.10.0-110.el9_8.2.x86_64",
"product": {
"name": "fence-virtd-0:4.10.0-110.el9_8.2.x86_64",
"product_id": "fence-virtd-0:4.10.0-110.el9_8.2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-virtd@4.10.0-110.el9_8.2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "fence-virtd-cpg-0:4.10.0-110.el9_8.2.x86_64",
"product": {
"name": "fence-virtd-cpg-0:4.10.0-110.el9_8.2.x86_64",
"product_id": "fence-virtd-cpg-0:4.10.0-110.el9_8.2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-virtd-cpg@4.10.0-110.el9_8.2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "fence-virtd-libvirt-0:4.10.0-110.el9_8.2.x86_64",
"product": {
"name": "fence-virtd-libvirt-0:4.10.0-110.el9_8.2.x86_64",
"product_id": "fence-virtd-libvirt-0:4.10.0-110.el9_8.2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-virtd-libvirt@4.10.0-110.el9_8.2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "fence-virtd-multicast-0:4.10.0-110.el9_8.2.x86_64",
"product": {
"name": "fence-virtd-multicast-0:4.10.0-110.el9_8.2.x86_64",
"product_id": "fence-virtd-multicast-0:4.10.0-110.el9_8.2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-virtd-multicast@4.10.0-110.el9_8.2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "fence-virtd-serial-0:4.10.0-110.el9_8.2.x86_64",
"product": {
"name": "fence-virtd-serial-0:4.10.0-110.el9_8.2.x86_64",
"product_id": "fence-virtd-serial-0:4.10.0-110.el9_8.2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-virtd-serial@4.10.0-110.el9_8.2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "fence-virtd-tcp-0:4.10.0-110.el9_8.2.x86_64",
"product": {
"name": "fence-virtd-tcp-0:4.10.0-110.el9_8.2.x86_64",
"product_id": "fence-virtd-tcp-0:4.10.0-110.el9_8.2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-virtd-tcp@4.10.0-110.el9_8.2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "ha-cloud-support-0:4.10.0-110.el9_8.2.x86_64",
"product": {
"name": "ha-cloud-support-0:4.10.0-110.el9_8.2.x86_64",
"product_id": "ha-cloud-support-0:4.10.0-110.el9_8.2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ha-cloud-support@4.10.0-110.el9_8.2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "fence-agents-debugsource-0:4.10.0-110.el9_8.2.x86_64",
"product": {
"name": "fence-agents-debugsource-0:4.10.0-110.el9_8.2.x86_64",
"product_id": "fence-agents-debugsource-0:4.10.0-110.el9_8.2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-debugsource@4.10.0-110.el9_8.2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "fence-agents-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"product": {
"name": "fence-agents-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"product_id": "fence-agents-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-debuginfo@4.10.0-110.el9_8.2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "fence-agents-kdump-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"product": {
"name": "fence-agents-kdump-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"product_id": "fence-agents-kdump-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-kdump-debuginfo@4.10.0-110.el9_8.2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "fence-agents-kubevirt-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"product": {
"name": "fence-agents-kubevirt-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"product_id": "fence-agents-kubevirt-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-kubevirt-debuginfo@4.10.0-110.el9_8.2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "fence-virt-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"product": {
"name": "fence-virt-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"product_id": "fence-virt-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-virt-debuginfo@4.10.0-110.el9_8.2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "fence-virtd-cpg-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"product": {
"name": "fence-virtd-cpg-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"product_id": "fence-virtd-cpg-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-virtd-cpg-debuginfo@4.10.0-110.el9_8.2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "fence-virtd-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"product": {
"name": "fence-virtd-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"product_id": "fence-virtd-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-virtd-debuginfo@4.10.0-110.el9_8.2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "fence-virtd-libvirt-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"product": {
"name": "fence-virtd-libvirt-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"product_id": "fence-virtd-libvirt-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-virtd-libvirt-debuginfo@4.10.0-110.el9_8.2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "fence-virtd-multicast-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"product": {
"name": "fence-virtd-multicast-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"product_id": "fence-virtd-multicast-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-virtd-multicast-debuginfo@4.10.0-110.el9_8.2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "fence-virtd-serial-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"product": {
"name": "fence-virtd-serial-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"product_id": "fence-virtd-serial-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-virtd-serial-debuginfo@4.10.0-110.el9_8.2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "fence-virtd-tcp-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"product": {
"name": "fence-virtd-tcp-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"product_id": "fence-virtd-tcp-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-virtd-tcp-debuginfo@4.10.0-110.el9_8.2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "ha-cloud-support-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"product": {
"name": "ha-cloud-support-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"product_id": "ha-cloud-support-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ha-cloud-support-debuginfo@4.10.0-110.el9_8.2?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "fence-agents-all-0:4.10.0-110.el9_8.2.s390x",
"product": {
"name": "fence-agents-all-0:4.10.0-110.el9_8.2.s390x",
"product_id": "fence-agents-all-0:4.10.0-110.el9_8.2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-all@4.10.0-110.el9_8.2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "fence-agents-kdump-0:4.10.0-110.el9_8.2.s390x",
"product": {
"name": "fence-agents-kdump-0:4.10.0-110.el9_8.2.s390x",
"product_id": "fence-agents-kdump-0:4.10.0-110.el9_8.2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-kdump@4.10.0-110.el9_8.2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "fence-agents-kubevirt-0:4.10.0-110.el9_8.2.s390x",
"product": {
"name": "fence-agents-kubevirt-0:4.10.0-110.el9_8.2.s390x",
"product_id": "fence-agents-kubevirt-0:4.10.0-110.el9_8.2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-kubevirt@4.10.0-110.el9_8.2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "fence-agents-redfish-0:4.10.0-110.el9_8.2.s390x",
"product": {
"name": "fence-agents-redfish-0:4.10.0-110.el9_8.2.s390x",
"product_id": "fence-agents-redfish-0:4.10.0-110.el9_8.2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-redfish@4.10.0-110.el9_8.2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "fence-agents-zvm-0:4.10.0-110.el9_8.2.s390x",
"product": {
"name": "fence-agents-zvm-0:4.10.0-110.el9_8.2.s390x",
"product_id": "fence-agents-zvm-0:4.10.0-110.el9_8.2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-zvm@4.10.0-110.el9_8.2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "fence-agents-debugsource-0:4.10.0-110.el9_8.2.s390x",
"product": {
"name": "fence-agents-debugsource-0:4.10.0-110.el9_8.2.s390x",
"product_id": "fence-agents-debugsource-0:4.10.0-110.el9_8.2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-debugsource@4.10.0-110.el9_8.2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "fence-agents-debuginfo-0:4.10.0-110.el9_8.2.s390x",
"product": {
"name": "fence-agents-debuginfo-0:4.10.0-110.el9_8.2.s390x",
"product_id": "fence-agents-debuginfo-0:4.10.0-110.el9_8.2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-debuginfo@4.10.0-110.el9_8.2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "fence-agents-kdump-debuginfo-0:4.10.0-110.el9_8.2.s390x",
"product": {
"name": "fence-agents-kdump-debuginfo-0:4.10.0-110.el9_8.2.s390x",
"product_id": "fence-agents-kdump-debuginfo-0:4.10.0-110.el9_8.2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-kdump-debuginfo@4.10.0-110.el9_8.2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "fence-agents-kubevirt-debuginfo-0:4.10.0-110.el9_8.2.s390x",
"product": {
"name": "fence-agents-kubevirt-debuginfo-0:4.10.0-110.el9_8.2.s390x",
"product_id": "fence-agents-kubevirt-debuginfo-0:4.10.0-110.el9_8.2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-kubevirt-debuginfo@4.10.0-110.el9_8.2?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "fence-agents-all-0:4.10.0-110.el9_8.2.aarch64",
"product": {
"name": "fence-agents-all-0:4.10.0-110.el9_8.2.aarch64",
"product_id": "fence-agents-all-0:4.10.0-110.el9_8.2.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-all@4.10.0-110.el9_8.2?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "fence-agents-kdump-0:4.10.0-110.el9_8.2.aarch64",
"product": {
"name": "fence-agents-kdump-0:4.10.0-110.el9_8.2.aarch64",
"product_id": "fence-agents-kdump-0:4.10.0-110.el9_8.2.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-kdump@4.10.0-110.el9_8.2?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "fence-agents-kubevirt-0:4.10.0-110.el9_8.2.aarch64",
"product": {
"name": "fence-agents-kubevirt-0:4.10.0-110.el9_8.2.aarch64",
"product_id": "fence-agents-kubevirt-0:4.10.0-110.el9_8.2.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-kubevirt@4.10.0-110.el9_8.2?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "fence-agents-redfish-0:4.10.0-110.el9_8.2.aarch64",
"product": {
"name": "fence-agents-redfish-0:4.10.0-110.el9_8.2.aarch64",
"product_id": "fence-agents-redfish-0:4.10.0-110.el9_8.2.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-redfish@4.10.0-110.el9_8.2?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "fence-agents-debugsource-0:4.10.0-110.el9_8.2.aarch64",
"product": {
"name": "fence-agents-debugsource-0:4.10.0-110.el9_8.2.aarch64",
"product_id": "fence-agents-debugsource-0:4.10.0-110.el9_8.2.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-debugsource@4.10.0-110.el9_8.2?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "fence-agents-debuginfo-0:4.10.0-110.el9_8.2.aarch64",
"product": {
"name": "fence-agents-debuginfo-0:4.10.0-110.el9_8.2.aarch64",
"product_id": "fence-agents-debuginfo-0:4.10.0-110.el9_8.2.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-debuginfo@4.10.0-110.el9_8.2?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "fence-agents-kdump-debuginfo-0:4.10.0-110.el9_8.2.aarch64",
"product": {
"name": "fence-agents-kdump-debuginfo-0:4.10.0-110.el9_8.2.aarch64",
"product_id": "fence-agents-kdump-debuginfo-0:4.10.0-110.el9_8.2.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-kdump-debuginfo@4.10.0-110.el9_8.2?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "fence-agents-kubevirt-debuginfo-0:4.10.0-110.el9_8.2.aarch64",
"product": {
"name": "fence-agents-kubevirt-debuginfo-0:4.10.0-110.el9_8.2.aarch64",
"product_id": "fence-agents-kubevirt-debuginfo-0:4.10.0-110.el9_8.2.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-kubevirt-debuginfo@4.10.0-110.el9_8.2?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "fence-agents-all-0:4.10.0-110.el9_8.2.ppc64le",
"product": {
"name": "fence-agents-all-0:4.10.0-110.el9_8.2.ppc64le",
"product_id": "fence-agents-all-0:4.10.0-110.el9_8.2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-all@4.10.0-110.el9_8.2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "fence-agents-compute-0:4.10.0-110.el9_8.2.ppc64le",
"product": {
"name": "fence-agents-compute-0:4.10.0-110.el9_8.2.ppc64le",
"product_id": "fence-agents-compute-0:4.10.0-110.el9_8.2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-compute@4.10.0-110.el9_8.2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "fence-agents-kdump-0:4.10.0-110.el9_8.2.ppc64le",
"product": {
"name": "fence-agents-kdump-0:4.10.0-110.el9_8.2.ppc64le",
"product_id": "fence-agents-kdump-0:4.10.0-110.el9_8.2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-kdump@4.10.0-110.el9_8.2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "fence-agents-kubevirt-0:4.10.0-110.el9_8.2.ppc64le",
"product": {
"name": "fence-agents-kubevirt-0:4.10.0-110.el9_8.2.ppc64le",
"product_id": "fence-agents-kubevirt-0:4.10.0-110.el9_8.2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-kubevirt@4.10.0-110.el9_8.2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "fence-agents-openstack-0:4.10.0-110.el9_8.2.ppc64le",
"product": {
"name": "fence-agents-openstack-0:4.10.0-110.el9_8.2.ppc64le",
"product_id": "fence-agents-openstack-0:4.10.0-110.el9_8.2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-openstack@4.10.0-110.el9_8.2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "fence-agents-redfish-0:4.10.0-110.el9_8.2.ppc64le",
"product": {
"name": "fence-agents-redfish-0:4.10.0-110.el9_8.2.ppc64le",
"product_id": "fence-agents-redfish-0:4.10.0-110.el9_8.2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-redfish@4.10.0-110.el9_8.2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "ha-cloud-support-0:4.10.0-110.el9_8.2.ppc64le",
"product": {
"name": "ha-cloud-support-0:4.10.0-110.el9_8.2.ppc64le",
"product_id": "ha-cloud-support-0:4.10.0-110.el9_8.2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/ha-cloud-support@4.10.0-110.el9_8.2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "fence-agents-debugsource-0:4.10.0-110.el9_8.2.ppc64le",
"product": {
"name": "fence-agents-debugsource-0:4.10.0-110.el9_8.2.ppc64le",
"product_id": "fence-agents-debugsource-0:4.10.0-110.el9_8.2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-debugsource@4.10.0-110.el9_8.2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "fence-agents-debuginfo-0:4.10.0-110.el9_8.2.ppc64le",
"product": {
"name": "fence-agents-debuginfo-0:4.10.0-110.el9_8.2.ppc64le",
"product_id": "fence-agents-debuginfo-0:4.10.0-110.el9_8.2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-debuginfo@4.10.0-110.el9_8.2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "fence-agents-kdump-debuginfo-0:4.10.0-110.el9_8.2.ppc64le",
"product": {
"name": "fence-agents-kdump-debuginfo-0:4.10.0-110.el9_8.2.ppc64le",
"product_id": "fence-agents-kdump-debuginfo-0:4.10.0-110.el9_8.2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-kdump-debuginfo@4.10.0-110.el9_8.2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "fence-agents-kubevirt-debuginfo-0:4.10.0-110.el9_8.2.ppc64le",
"product": {
"name": "fence-agents-kubevirt-debuginfo-0:4.10.0-110.el9_8.2.ppc64le",
"product_id": "fence-agents-kubevirt-debuginfo-0:4.10.0-110.el9_8.2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-kubevirt-debuginfo@4.10.0-110.el9_8.2?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "fence-agents-amt-ws-0:4.10.0-110.el9_8.2.noarch",
"product": {
"name": "fence-agents-amt-ws-0:4.10.0-110.el9_8.2.noarch",
"product_id": "fence-agents-amt-ws-0:4.10.0-110.el9_8.2.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-amt-ws@4.10.0-110.el9_8.2?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-apc-0:4.10.0-110.el9_8.2.noarch",
"product": {
"name": "fence-agents-apc-0:4.10.0-110.el9_8.2.noarch",
"product_id": "fence-agents-apc-0:4.10.0-110.el9_8.2.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-apc@4.10.0-110.el9_8.2?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-apc-snmp-0:4.10.0-110.el9_8.2.noarch",
"product": {
"name": "fence-agents-apc-snmp-0:4.10.0-110.el9_8.2.noarch",
"product_id": "fence-agents-apc-snmp-0:4.10.0-110.el9_8.2.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-apc-snmp@4.10.0-110.el9_8.2?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-bladecenter-0:4.10.0-110.el9_8.2.noarch",
"product": {
"name": "fence-agents-bladecenter-0:4.10.0-110.el9_8.2.noarch",
"product_id": "fence-agents-bladecenter-0:4.10.0-110.el9_8.2.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-bladecenter@4.10.0-110.el9_8.2?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-brocade-0:4.10.0-110.el9_8.2.noarch",
"product": {
"name": "fence-agents-brocade-0:4.10.0-110.el9_8.2.noarch",
"product_id": "fence-agents-brocade-0:4.10.0-110.el9_8.2.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-brocade@4.10.0-110.el9_8.2?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-cisco-mds-0:4.10.0-110.el9_8.2.noarch",
"product": {
"name": "fence-agents-cisco-mds-0:4.10.0-110.el9_8.2.noarch",
"product_id": "fence-agents-cisco-mds-0:4.10.0-110.el9_8.2.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-cisco-mds@4.10.0-110.el9_8.2?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-cisco-ucs-0:4.10.0-110.el9_8.2.noarch",
"product": {
"name": "fence-agents-cisco-ucs-0:4.10.0-110.el9_8.2.noarch",
"product_id": "fence-agents-cisco-ucs-0:4.10.0-110.el9_8.2.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-cisco-ucs@4.10.0-110.el9_8.2?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-common-0:4.10.0-110.el9_8.2.noarch",
"product": {
"name": "fence-agents-common-0:4.10.0-110.el9_8.2.noarch",
"product_id": "fence-agents-common-0:4.10.0-110.el9_8.2.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-common@4.10.0-110.el9_8.2?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-drac5-0:4.10.0-110.el9_8.2.noarch",
"product": {
"name": "fence-agents-drac5-0:4.10.0-110.el9_8.2.noarch",
"product_id": "fence-agents-drac5-0:4.10.0-110.el9_8.2.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-drac5@4.10.0-110.el9_8.2?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-eaton-snmp-0:4.10.0-110.el9_8.2.noarch",
"product": {
"name": "fence-agents-eaton-snmp-0:4.10.0-110.el9_8.2.noarch",
"product_id": "fence-agents-eaton-snmp-0:4.10.0-110.el9_8.2.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-eaton-snmp@4.10.0-110.el9_8.2?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-emerson-0:4.10.0-110.el9_8.2.noarch",
"product": {
"name": "fence-agents-emerson-0:4.10.0-110.el9_8.2.noarch",
"product_id": "fence-agents-emerson-0:4.10.0-110.el9_8.2.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-emerson@4.10.0-110.el9_8.2?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-eps-0:4.10.0-110.el9_8.2.noarch",
"product": {
"name": "fence-agents-eps-0:4.10.0-110.el9_8.2.noarch",
"product_id": "fence-agents-eps-0:4.10.0-110.el9_8.2.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-eps@4.10.0-110.el9_8.2?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-heuristics-ping-0:4.10.0-110.el9_8.2.noarch",
"product": {
"name": "fence-agents-heuristics-ping-0:4.10.0-110.el9_8.2.noarch",
"product_id": "fence-agents-heuristics-ping-0:4.10.0-110.el9_8.2.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-heuristics-ping@4.10.0-110.el9_8.2?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-hpblade-0:4.10.0-110.el9_8.2.noarch",
"product": {
"name": "fence-agents-hpblade-0:4.10.0-110.el9_8.2.noarch",
"product_id": "fence-agents-hpblade-0:4.10.0-110.el9_8.2.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-hpblade@4.10.0-110.el9_8.2?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-ibm-powervs-0:4.10.0-110.el9_8.2.noarch",
"product": {
"name": "fence-agents-ibm-powervs-0:4.10.0-110.el9_8.2.noarch",
"product_id": "fence-agents-ibm-powervs-0:4.10.0-110.el9_8.2.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-ibm-powervs@4.10.0-110.el9_8.2?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-ibm-vpc-0:4.10.0-110.el9_8.2.noarch",
"product": {
"name": "fence-agents-ibm-vpc-0:4.10.0-110.el9_8.2.noarch",
"product_id": "fence-agents-ibm-vpc-0:4.10.0-110.el9_8.2.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-ibm-vpc@4.10.0-110.el9_8.2?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-ibmblade-0:4.10.0-110.el9_8.2.noarch",
"product": {
"name": "fence-agents-ibmblade-0:4.10.0-110.el9_8.2.noarch",
"product_id": "fence-agents-ibmblade-0:4.10.0-110.el9_8.2.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-ibmblade@4.10.0-110.el9_8.2?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-ifmib-0:4.10.0-110.el9_8.2.noarch",
"product": {
"name": "fence-agents-ifmib-0:4.10.0-110.el9_8.2.noarch",
"product_id": "fence-agents-ifmib-0:4.10.0-110.el9_8.2.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-ifmib@4.10.0-110.el9_8.2?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-ilo-moonshot-0:4.10.0-110.el9_8.2.noarch",
"product": {
"name": "fence-agents-ilo-moonshot-0:4.10.0-110.el9_8.2.noarch",
"product_id": "fence-agents-ilo-moonshot-0:4.10.0-110.el9_8.2.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-ilo-moonshot@4.10.0-110.el9_8.2?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-ilo-mp-0:4.10.0-110.el9_8.2.noarch",
"product": {
"name": "fence-agents-ilo-mp-0:4.10.0-110.el9_8.2.noarch",
"product_id": "fence-agents-ilo-mp-0:4.10.0-110.el9_8.2.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-ilo-mp@4.10.0-110.el9_8.2?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-ilo-ssh-0:4.10.0-110.el9_8.2.noarch",
"product": {
"name": "fence-agents-ilo-ssh-0:4.10.0-110.el9_8.2.noarch",
"product_id": "fence-agents-ilo-ssh-0:4.10.0-110.el9_8.2.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-ilo-ssh@4.10.0-110.el9_8.2?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-ilo2-0:4.10.0-110.el9_8.2.noarch",
"product": {
"name": "fence-agents-ilo2-0:4.10.0-110.el9_8.2.noarch",
"product_id": "fence-agents-ilo2-0:4.10.0-110.el9_8.2.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-ilo2@4.10.0-110.el9_8.2?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-intelmodular-0:4.10.0-110.el9_8.2.noarch",
"product": {
"name": "fence-agents-intelmodular-0:4.10.0-110.el9_8.2.noarch",
"product_id": "fence-agents-intelmodular-0:4.10.0-110.el9_8.2.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-intelmodular@4.10.0-110.el9_8.2?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-ipdu-0:4.10.0-110.el9_8.2.noarch",
"product": {
"name": "fence-agents-ipdu-0:4.10.0-110.el9_8.2.noarch",
"product_id": "fence-agents-ipdu-0:4.10.0-110.el9_8.2.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-ipdu@4.10.0-110.el9_8.2?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-ipmilan-0:4.10.0-110.el9_8.2.noarch",
"product": {
"name": "fence-agents-ipmilan-0:4.10.0-110.el9_8.2.noarch",
"product_id": "fence-agents-ipmilan-0:4.10.0-110.el9_8.2.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-ipmilan@4.10.0-110.el9_8.2?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-lpar-0:4.10.0-110.el9_8.2.noarch",
"product": {
"name": "fence-agents-lpar-0:4.10.0-110.el9_8.2.noarch",
"product_id": "fence-agents-lpar-0:4.10.0-110.el9_8.2.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-lpar@4.10.0-110.el9_8.2?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-mpath-0:4.10.0-110.el9_8.2.noarch",
"product": {
"name": "fence-agents-mpath-0:4.10.0-110.el9_8.2.noarch",
"product_id": "fence-agents-mpath-0:4.10.0-110.el9_8.2.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-mpath@4.10.0-110.el9_8.2?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-nutanix-ahv-0:4.10.0-110.el9_8.2.noarch",
"product": {
"name": "fence-agents-nutanix-ahv-0:4.10.0-110.el9_8.2.noarch",
"product_id": "fence-agents-nutanix-ahv-0:4.10.0-110.el9_8.2.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-nutanix-ahv@4.10.0-110.el9_8.2?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-rhevm-0:4.10.0-110.el9_8.2.noarch",
"product": {
"name": "fence-agents-rhevm-0:4.10.0-110.el9_8.2.noarch",
"product_id": "fence-agents-rhevm-0:4.10.0-110.el9_8.2.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-rhevm@4.10.0-110.el9_8.2?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-rsa-0:4.10.0-110.el9_8.2.noarch",
"product": {
"name": "fence-agents-rsa-0:4.10.0-110.el9_8.2.noarch",
"product_id": "fence-agents-rsa-0:4.10.0-110.el9_8.2.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-rsa@4.10.0-110.el9_8.2?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-rsb-0:4.10.0-110.el9_8.2.noarch",
"product": {
"name": "fence-agents-rsb-0:4.10.0-110.el9_8.2.noarch",
"product_id": "fence-agents-rsb-0:4.10.0-110.el9_8.2.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-rsb@4.10.0-110.el9_8.2?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-sbd-0:4.10.0-110.el9_8.2.noarch",
"product": {
"name": "fence-agents-sbd-0:4.10.0-110.el9_8.2.noarch",
"product_id": "fence-agents-sbd-0:4.10.0-110.el9_8.2.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-sbd@4.10.0-110.el9_8.2?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-scsi-0:4.10.0-110.el9_8.2.noarch",
"product": {
"name": "fence-agents-scsi-0:4.10.0-110.el9_8.2.noarch",
"product_id": "fence-agents-scsi-0:4.10.0-110.el9_8.2.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-scsi@4.10.0-110.el9_8.2?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-virsh-0:4.10.0-110.el9_8.2.noarch",
"product": {
"name": "fence-agents-virsh-0:4.10.0-110.el9_8.2.noarch",
"product_id": "fence-agents-virsh-0:4.10.0-110.el9_8.2.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-virsh@4.10.0-110.el9_8.2?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-vmware-rest-0:4.10.0-110.el9_8.2.noarch",
"product": {
"name": "fence-agents-vmware-rest-0:4.10.0-110.el9_8.2.noarch",
"product_id": "fence-agents-vmware-rest-0:4.10.0-110.el9_8.2.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-vmware-rest@4.10.0-110.el9_8.2?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-vmware-soap-0:4.10.0-110.el9_8.2.noarch",
"product": {
"name": "fence-agents-vmware-soap-0:4.10.0-110.el9_8.2.noarch",
"product_id": "fence-agents-vmware-soap-0:4.10.0-110.el9_8.2.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-vmware-soap@4.10.0-110.el9_8.2?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "fence-agents-wti-0:4.10.0-110.el9_8.2.noarch",
"product": {
"name": "fence-agents-wti-0:4.10.0-110.el9_8.2.noarch",
"product_id": "fence-agents-wti-0:4.10.0-110.el9_8.2.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/fence-agents-wti@4.10.0-110.el9_8.2?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-0:4.10.0-110.el9_8.2.src as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:fence-agents-0:4.10.0-110.el9_8.2.src"
},
"product_reference": "fence-agents-0:4.10.0-110.el9_8.2.src",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-aliyun-0:4.10.0-110.el9_8.2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:fence-agents-aliyun-0:4.10.0-110.el9_8.2.x86_64"
},
"product_reference": "fence-agents-aliyun-0:4.10.0-110.el9_8.2.x86_64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-all-0:4.10.0-110.el9_8.2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:fence-agents-all-0:4.10.0-110.el9_8.2.aarch64"
},
"product_reference": "fence-agents-all-0:4.10.0-110.el9_8.2.aarch64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-all-0:4.10.0-110.el9_8.2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:fence-agents-all-0:4.10.0-110.el9_8.2.ppc64le"
},
"product_reference": "fence-agents-all-0:4.10.0-110.el9_8.2.ppc64le",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-all-0:4.10.0-110.el9_8.2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:fence-agents-all-0:4.10.0-110.el9_8.2.s390x"
},
"product_reference": "fence-agents-all-0:4.10.0-110.el9_8.2.s390x",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-all-0:4.10.0-110.el9_8.2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:fence-agents-all-0:4.10.0-110.el9_8.2.x86_64"
},
"product_reference": "fence-agents-all-0:4.10.0-110.el9_8.2.x86_64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-amt-ws-0:4.10.0-110.el9_8.2.noarch as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:fence-agents-amt-ws-0:4.10.0-110.el9_8.2.noarch"
},
"product_reference": "fence-agents-amt-ws-0:4.10.0-110.el9_8.2.noarch",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-apc-0:4.10.0-110.el9_8.2.noarch as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:fence-agents-apc-0:4.10.0-110.el9_8.2.noarch"
},
"product_reference": "fence-agents-apc-0:4.10.0-110.el9_8.2.noarch",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-apc-snmp-0:4.10.0-110.el9_8.2.noarch as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:fence-agents-apc-snmp-0:4.10.0-110.el9_8.2.noarch"
},
"product_reference": "fence-agents-apc-snmp-0:4.10.0-110.el9_8.2.noarch",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-aws-0:4.10.0-110.el9_8.2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:fence-agents-aws-0:4.10.0-110.el9_8.2.x86_64"
},
"product_reference": "fence-agents-aws-0:4.10.0-110.el9_8.2.x86_64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-azure-arm-0:4.10.0-110.el9_8.2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:fence-agents-azure-arm-0:4.10.0-110.el9_8.2.x86_64"
},
"product_reference": "fence-agents-azure-arm-0:4.10.0-110.el9_8.2.x86_64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-bladecenter-0:4.10.0-110.el9_8.2.noarch as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:fence-agents-bladecenter-0:4.10.0-110.el9_8.2.noarch"
},
"product_reference": "fence-agents-bladecenter-0:4.10.0-110.el9_8.2.noarch",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-brocade-0:4.10.0-110.el9_8.2.noarch as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:fence-agents-brocade-0:4.10.0-110.el9_8.2.noarch"
},
"product_reference": "fence-agents-brocade-0:4.10.0-110.el9_8.2.noarch",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-cisco-mds-0:4.10.0-110.el9_8.2.noarch as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:fence-agents-cisco-mds-0:4.10.0-110.el9_8.2.noarch"
},
"product_reference": "fence-agents-cisco-mds-0:4.10.0-110.el9_8.2.noarch",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-cisco-ucs-0:4.10.0-110.el9_8.2.noarch as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:fence-agents-cisco-ucs-0:4.10.0-110.el9_8.2.noarch"
},
"product_reference": "fence-agents-cisco-ucs-0:4.10.0-110.el9_8.2.noarch",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-common-0:4.10.0-110.el9_8.2.noarch as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:fence-agents-common-0:4.10.0-110.el9_8.2.noarch"
},
"product_reference": "fence-agents-common-0:4.10.0-110.el9_8.2.noarch",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-compute-0:4.10.0-110.el9_8.2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:fence-agents-compute-0:4.10.0-110.el9_8.2.ppc64le"
},
"product_reference": "fence-agents-compute-0:4.10.0-110.el9_8.2.ppc64le",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-compute-0:4.10.0-110.el9_8.2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:fence-agents-compute-0:4.10.0-110.el9_8.2.x86_64"
},
"product_reference": "fence-agents-compute-0:4.10.0-110.el9_8.2.x86_64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-debuginfo-0:4.10.0-110.el9_8.2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:fence-agents-debuginfo-0:4.10.0-110.el9_8.2.aarch64"
},
"product_reference": "fence-agents-debuginfo-0:4.10.0-110.el9_8.2.aarch64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-debuginfo-0:4.10.0-110.el9_8.2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:fence-agents-debuginfo-0:4.10.0-110.el9_8.2.ppc64le"
},
"product_reference": "fence-agents-debuginfo-0:4.10.0-110.el9_8.2.ppc64le",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-debuginfo-0:4.10.0-110.el9_8.2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:fence-agents-debuginfo-0:4.10.0-110.el9_8.2.s390x"
},
"product_reference": "fence-agents-debuginfo-0:4.10.0-110.el9_8.2.s390x",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-debuginfo-0:4.10.0-110.el9_8.2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:fence-agents-debuginfo-0:4.10.0-110.el9_8.2.x86_64"
},
"product_reference": "fence-agents-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-debugsource-0:4.10.0-110.el9_8.2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:fence-agents-debugsource-0:4.10.0-110.el9_8.2.aarch64"
},
"product_reference": "fence-agents-debugsource-0:4.10.0-110.el9_8.2.aarch64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-debugsource-0:4.10.0-110.el9_8.2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:fence-agents-debugsource-0:4.10.0-110.el9_8.2.ppc64le"
},
"product_reference": "fence-agents-debugsource-0:4.10.0-110.el9_8.2.ppc64le",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-debugsource-0:4.10.0-110.el9_8.2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:fence-agents-debugsource-0:4.10.0-110.el9_8.2.s390x"
},
"product_reference": "fence-agents-debugsource-0:4.10.0-110.el9_8.2.s390x",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-debugsource-0:4.10.0-110.el9_8.2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:fence-agents-debugsource-0:4.10.0-110.el9_8.2.x86_64"
},
"product_reference": "fence-agents-debugsource-0:4.10.0-110.el9_8.2.x86_64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-drac5-0:4.10.0-110.el9_8.2.noarch as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:fence-agents-drac5-0:4.10.0-110.el9_8.2.noarch"
},
"product_reference": "fence-agents-drac5-0:4.10.0-110.el9_8.2.noarch",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-eaton-snmp-0:4.10.0-110.el9_8.2.noarch as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:fence-agents-eaton-snmp-0:4.10.0-110.el9_8.2.noarch"
},
"product_reference": "fence-agents-eaton-snmp-0:4.10.0-110.el9_8.2.noarch",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-emerson-0:4.10.0-110.el9_8.2.noarch as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:fence-agents-emerson-0:4.10.0-110.el9_8.2.noarch"
},
"product_reference": "fence-agents-emerson-0:4.10.0-110.el9_8.2.noarch",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-eps-0:4.10.0-110.el9_8.2.noarch as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:fence-agents-eps-0:4.10.0-110.el9_8.2.noarch"
},
"product_reference": "fence-agents-eps-0:4.10.0-110.el9_8.2.noarch",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-gce-0:4.10.0-110.el9_8.2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:fence-agents-gce-0:4.10.0-110.el9_8.2.x86_64"
},
"product_reference": "fence-agents-gce-0:4.10.0-110.el9_8.2.x86_64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-heuristics-ping-0:4.10.0-110.el9_8.2.noarch as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:fence-agents-heuristics-ping-0:4.10.0-110.el9_8.2.noarch"
},
"product_reference": "fence-agents-heuristics-ping-0:4.10.0-110.el9_8.2.noarch",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-hpblade-0:4.10.0-110.el9_8.2.noarch as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:fence-agents-hpblade-0:4.10.0-110.el9_8.2.noarch"
},
"product_reference": "fence-agents-hpblade-0:4.10.0-110.el9_8.2.noarch",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-ibm-powervs-0:4.10.0-110.el9_8.2.noarch as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ibm-powervs-0:4.10.0-110.el9_8.2.noarch"
},
"product_reference": "fence-agents-ibm-powervs-0:4.10.0-110.el9_8.2.noarch",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-ibm-vpc-0:4.10.0-110.el9_8.2.noarch as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ibm-vpc-0:4.10.0-110.el9_8.2.noarch"
},
"product_reference": "fence-agents-ibm-vpc-0:4.10.0-110.el9_8.2.noarch",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-ibmblade-0:4.10.0-110.el9_8.2.noarch as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ibmblade-0:4.10.0-110.el9_8.2.noarch"
},
"product_reference": "fence-agents-ibmblade-0:4.10.0-110.el9_8.2.noarch",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-ifmib-0:4.10.0-110.el9_8.2.noarch as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ifmib-0:4.10.0-110.el9_8.2.noarch"
},
"product_reference": "fence-agents-ifmib-0:4.10.0-110.el9_8.2.noarch",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-ilo-moonshot-0:4.10.0-110.el9_8.2.noarch as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ilo-moonshot-0:4.10.0-110.el9_8.2.noarch"
},
"product_reference": "fence-agents-ilo-moonshot-0:4.10.0-110.el9_8.2.noarch",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-ilo-mp-0:4.10.0-110.el9_8.2.noarch as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ilo-mp-0:4.10.0-110.el9_8.2.noarch"
},
"product_reference": "fence-agents-ilo-mp-0:4.10.0-110.el9_8.2.noarch",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-ilo-ssh-0:4.10.0-110.el9_8.2.noarch as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ilo-ssh-0:4.10.0-110.el9_8.2.noarch"
},
"product_reference": "fence-agents-ilo-ssh-0:4.10.0-110.el9_8.2.noarch",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-ilo2-0:4.10.0-110.el9_8.2.noarch as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ilo2-0:4.10.0-110.el9_8.2.noarch"
},
"product_reference": "fence-agents-ilo2-0:4.10.0-110.el9_8.2.noarch",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-intelmodular-0:4.10.0-110.el9_8.2.noarch as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:fence-agents-intelmodular-0:4.10.0-110.el9_8.2.noarch"
},
"product_reference": "fence-agents-intelmodular-0:4.10.0-110.el9_8.2.noarch",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-ipdu-0:4.10.0-110.el9_8.2.noarch as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ipdu-0:4.10.0-110.el9_8.2.noarch"
},
"product_reference": "fence-agents-ipdu-0:4.10.0-110.el9_8.2.noarch",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-ipmilan-0:4.10.0-110.el9_8.2.noarch as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ipmilan-0:4.10.0-110.el9_8.2.noarch"
},
"product_reference": "fence-agents-ipmilan-0:4.10.0-110.el9_8.2.noarch",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-kdump-0:4.10.0-110.el9_8.2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kdump-0:4.10.0-110.el9_8.2.aarch64"
},
"product_reference": "fence-agents-kdump-0:4.10.0-110.el9_8.2.aarch64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-kdump-0:4.10.0-110.el9_8.2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kdump-0:4.10.0-110.el9_8.2.ppc64le"
},
"product_reference": "fence-agents-kdump-0:4.10.0-110.el9_8.2.ppc64le",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-kdump-0:4.10.0-110.el9_8.2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kdump-0:4.10.0-110.el9_8.2.s390x"
},
"product_reference": "fence-agents-kdump-0:4.10.0-110.el9_8.2.s390x",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-kdump-0:4.10.0-110.el9_8.2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kdump-0:4.10.0-110.el9_8.2.x86_64"
},
"product_reference": "fence-agents-kdump-0:4.10.0-110.el9_8.2.x86_64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-kdump-debuginfo-0:4.10.0-110.el9_8.2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kdump-debuginfo-0:4.10.0-110.el9_8.2.aarch64"
},
"product_reference": "fence-agents-kdump-debuginfo-0:4.10.0-110.el9_8.2.aarch64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-kdump-debuginfo-0:4.10.0-110.el9_8.2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kdump-debuginfo-0:4.10.0-110.el9_8.2.ppc64le"
},
"product_reference": "fence-agents-kdump-debuginfo-0:4.10.0-110.el9_8.2.ppc64le",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-kdump-debuginfo-0:4.10.0-110.el9_8.2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kdump-debuginfo-0:4.10.0-110.el9_8.2.s390x"
},
"product_reference": "fence-agents-kdump-debuginfo-0:4.10.0-110.el9_8.2.s390x",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-kdump-debuginfo-0:4.10.0-110.el9_8.2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kdump-debuginfo-0:4.10.0-110.el9_8.2.x86_64"
},
"product_reference": "fence-agents-kdump-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-kubevirt-0:4.10.0-110.el9_8.2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kubevirt-0:4.10.0-110.el9_8.2.aarch64"
},
"product_reference": "fence-agents-kubevirt-0:4.10.0-110.el9_8.2.aarch64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-kubevirt-0:4.10.0-110.el9_8.2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kubevirt-0:4.10.0-110.el9_8.2.ppc64le"
},
"product_reference": "fence-agents-kubevirt-0:4.10.0-110.el9_8.2.ppc64le",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-kubevirt-0:4.10.0-110.el9_8.2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kubevirt-0:4.10.0-110.el9_8.2.s390x"
},
"product_reference": "fence-agents-kubevirt-0:4.10.0-110.el9_8.2.s390x",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-kubevirt-0:4.10.0-110.el9_8.2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kubevirt-0:4.10.0-110.el9_8.2.x86_64"
},
"product_reference": "fence-agents-kubevirt-0:4.10.0-110.el9_8.2.x86_64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-kubevirt-debuginfo-0:4.10.0-110.el9_8.2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kubevirt-debuginfo-0:4.10.0-110.el9_8.2.aarch64"
},
"product_reference": "fence-agents-kubevirt-debuginfo-0:4.10.0-110.el9_8.2.aarch64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-kubevirt-debuginfo-0:4.10.0-110.el9_8.2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kubevirt-debuginfo-0:4.10.0-110.el9_8.2.ppc64le"
},
"product_reference": "fence-agents-kubevirt-debuginfo-0:4.10.0-110.el9_8.2.ppc64le",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-kubevirt-debuginfo-0:4.10.0-110.el9_8.2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kubevirt-debuginfo-0:4.10.0-110.el9_8.2.s390x"
},
"product_reference": "fence-agents-kubevirt-debuginfo-0:4.10.0-110.el9_8.2.s390x",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-kubevirt-debuginfo-0:4.10.0-110.el9_8.2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kubevirt-debuginfo-0:4.10.0-110.el9_8.2.x86_64"
},
"product_reference": "fence-agents-kubevirt-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-lpar-0:4.10.0-110.el9_8.2.noarch as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:fence-agents-lpar-0:4.10.0-110.el9_8.2.noarch"
},
"product_reference": "fence-agents-lpar-0:4.10.0-110.el9_8.2.noarch",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-mpath-0:4.10.0-110.el9_8.2.noarch as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:fence-agents-mpath-0:4.10.0-110.el9_8.2.noarch"
},
"product_reference": "fence-agents-mpath-0:4.10.0-110.el9_8.2.noarch",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-nutanix-ahv-0:4.10.0-110.el9_8.2.noarch as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:fence-agents-nutanix-ahv-0:4.10.0-110.el9_8.2.noarch"
},
"product_reference": "fence-agents-nutanix-ahv-0:4.10.0-110.el9_8.2.noarch",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-openstack-0:4.10.0-110.el9_8.2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:fence-agents-openstack-0:4.10.0-110.el9_8.2.ppc64le"
},
"product_reference": "fence-agents-openstack-0:4.10.0-110.el9_8.2.ppc64le",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-openstack-0:4.10.0-110.el9_8.2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:fence-agents-openstack-0:4.10.0-110.el9_8.2.x86_64"
},
"product_reference": "fence-agents-openstack-0:4.10.0-110.el9_8.2.x86_64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-redfish-0:4.10.0-110.el9_8.2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:fence-agents-redfish-0:4.10.0-110.el9_8.2.aarch64"
},
"product_reference": "fence-agents-redfish-0:4.10.0-110.el9_8.2.aarch64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-redfish-0:4.10.0-110.el9_8.2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:fence-agents-redfish-0:4.10.0-110.el9_8.2.ppc64le"
},
"product_reference": "fence-agents-redfish-0:4.10.0-110.el9_8.2.ppc64le",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-redfish-0:4.10.0-110.el9_8.2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:fence-agents-redfish-0:4.10.0-110.el9_8.2.s390x"
},
"product_reference": "fence-agents-redfish-0:4.10.0-110.el9_8.2.s390x",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-redfish-0:4.10.0-110.el9_8.2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:fence-agents-redfish-0:4.10.0-110.el9_8.2.x86_64"
},
"product_reference": "fence-agents-redfish-0:4.10.0-110.el9_8.2.x86_64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-rhevm-0:4.10.0-110.el9_8.2.noarch as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:fence-agents-rhevm-0:4.10.0-110.el9_8.2.noarch"
},
"product_reference": "fence-agents-rhevm-0:4.10.0-110.el9_8.2.noarch",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-rsa-0:4.10.0-110.el9_8.2.noarch as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:fence-agents-rsa-0:4.10.0-110.el9_8.2.noarch"
},
"product_reference": "fence-agents-rsa-0:4.10.0-110.el9_8.2.noarch",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-rsb-0:4.10.0-110.el9_8.2.noarch as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:fence-agents-rsb-0:4.10.0-110.el9_8.2.noarch"
},
"product_reference": "fence-agents-rsb-0:4.10.0-110.el9_8.2.noarch",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-sbd-0:4.10.0-110.el9_8.2.noarch as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:fence-agents-sbd-0:4.10.0-110.el9_8.2.noarch"
},
"product_reference": "fence-agents-sbd-0:4.10.0-110.el9_8.2.noarch",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-scsi-0:4.10.0-110.el9_8.2.noarch as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:fence-agents-scsi-0:4.10.0-110.el9_8.2.noarch"
},
"product_reference": "fence-agents-scsi-0:4.10.0-110.el9_8.2.noarch",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-virsh-0:4.10.0-110.el9_8.2.noarch as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:fence-agents-virsh-0:4.10.0-110.el9_8.2.noarch"
},
"product_reference": "fence-agents-virsh-0:4.10.0-110.el9_8.2.noarch",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-vmware-rest-0:4.10.0-110.el9_8.2.noarch as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:fence-agents-vmware-rest-0:4.10.0-110.el9_8.2.noarch"
},
"product_reference": "fence-agents-vmware-rest-0:4.10.0-110.el9_8.2.noarch",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-vmware-soap-0:4.10.0-110.el9_8.2.noarch as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:fence-agents-vmware-soap-0:4.10.0-110.el9_8.2.noarch"
},
"product_reference": "fence-agents-vmware-soap-0:4.10.0-110.el9_8.2.noarch",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-wti-0:4.10.0-110.el9_8.2.noarch as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:fence-agents-wti-0:4.10.0-110.el9_8.2.noarch"
},
"product_reference": "fence-agents-wti-0:4.10.0-110.el9_8.2.noarch",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-agents-zvm-0:4.10.0-110.el9_8.2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:fence-agents-zvm-0:4.10.0-110.el9_8.2.s390x"
},
"product_reference": "fence-agents-zvm-0:4.10.0-110.el9_8.2.s390x",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-virt-0:4.10.0-110.el9_8.2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:fence-virt-0:4.10.0-110.el9_8.2.x86_64"
},
"product_reference": "fence-virt-0:4.10.0-110.el9_8.2.x86_64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-virt-debuginfo-0:4.10.0-110.el9_8.2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:fence-virt-debuginfo-0:4.10.0-110.el9_8.2.x86_64"
},
"product_reference": "fence-virt-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-virtd-0:4.10.0-110.el9_8.2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-0:4.10.0-110.el9_8.2.x86_64"
},
"product_reference": "fence-virtd-0:4.10.0-110.el9_8.2.x86_64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-virtd-cpg-0:4.10.0-110.el9_8.2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-cpg-0:4.10.0-110.el9_8.2.x86_64"
},
"product_reference": "fence-virtd-cpg-0:4.10.0-110.el9_8.2.x86_64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-virtd-cpg-debuginfo-0:4.10.0-110.el9_8.2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-cpg-debuginfo-0:4.10.0-110.el9_8.2.x86_64"
},
"product_reference": "fence-virtd-cpg-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-virtd-debuginfo-0:4.10.0-110.el9_8.2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-debuginfo-0:4.10.0-110.el9_8.2.x86_64"
},
"product_reference": "fence-virtd-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-virtd-libvirt-0:4.10.0-110.el9_8.2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-libvirt-0:4.10.0-110.el9_8.2.x86_64"
},
"product_reference": "fence-virtd-libvirt-0:4.10.0-110.el9_8.2.x86_64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-virtd-libvirt-debuginfo-0:4.10.0-110.el9_8.2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-libvirt-debuginfo-0:4.10.0-110.el9_8.2.x86_64"
},
"product_reference": "fence-virtd-libvirt-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-virtd-multicast-0:4.10.0-110.el9_8.2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-multicast-0:4.10.0-110.el9_8.2.x86_64"
},
"product_reference": "fence-virtd-multicast-0:4.10.0-110.el9_8.2.x86_64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-virtd-multicast-debuginfo-0:4.10.0-110.el9_8.2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-multicast-debuginfo-0:4.10.0-110.el9_8.2.x86_64"
},
"product_reference": "fence-virtd-multicast-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-virtd-serial-0:4.10.0-110.el9_8.2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-serial-0:4.10.0-110.el9_8.2.x86_64"
},
"product_reference": "fence-virtd-serial-0:4.10.0-110.el9_8.2.x86_64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-virtd-serial-debuginfo-0:4.10.0-110.el9_8.2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-serial-debuginfo-0:4.10.0-110.el9_8.2.x86_64"
},
"product_reference": "fence-virtd-serial-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-virtd-tcp-0:4.10.0-110.el9_8.2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-tcp-0:4.10.0-110.el9_8.2.x86_64"
},
"product_reference": "fence-virtd-tcp-0:4.10.0-110.el9_8.2.x86_64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "fence-virtd-tcp-debuginfo-0:4.10.0-110.el9_8.2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-tcp-debuginfo-0:4.10.0-110.el9_8.2.x86_64"
},
"product_reference": "fence-virtd-tcp-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ha-cloud-support-0:4.10.0-110.el9_8.2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:ha-cloud-support-0:4.10.0-110.el9_8.2.ppc64le"
},
"product_reference": "ha-cloud-support-0:4.10.0-110.el9_8.2.ppc64le",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ha-cloud-support-0:4.10.0-110.el9_8.2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:ha-cloud-support-0:4.10.0-110.el9_8.2.x86_64"
},
"product_reference": "ha-cloud-support-0:4.10.0-110.el9_8.2.x86_64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ha-cloud-support-debuginfo-0:4.10.0-110.el9_8.2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:ha-cloud-support-debuginfo-0:4.10.0-110.el9_8.2.x86_64"
},
"product_reference": "ha-cloud-support-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-26007",
"cwe": {
"id": "CWE-354",
"name": "Improper Validation of Integrity Check Value"
},
"discovery_date": "2026-02-10T22:01:01.036116+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2438762"
}
],
"notes": [
{
"category": "description",
"text": "A validation flaw has been discovered in the python cryptography package. This missing validation allows an attacker to provide a public key point P from a small-order subgroup. This can lead to security issues in various situations, such as the most commonly used signature verification (ECDSA) and shared key negotiation (ECDH). When the victim computes the shared secret as S = [victim_private_key]P via ECDH, this leaks information about victim_private_key mod (small_subgroup_order). For curves with cofactor \u003e 1, this reveals the least significant bits of the private key. When these weak public keys are used in ECDSA , it\u0027s easy to forge signatures on the small subgroup. Only SECT curves are impacted by this.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "cryptography: cryptography Subgroup Attack Due to Missing Subgroup Validation for SECT Curves",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw, while difficult to exploit, would lead to a loss of integrity in the encrypted communication channel. Given that the cryptography package is a library, it is likely to be used in situations that do not require user interaction.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-0:4.10.0-110.el9_8.2.src",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-aliyun-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-all-0:4.10.0-110.el9_8.2.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-all-0:4.10.0-110.el9_8.2.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-all-0:4.10.0-110.el9_8.2.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-all-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-amt-ws-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-apc-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-apc-snmp-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-aws-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-azure-arm-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-bladecenter-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-brocade-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-cisco-mds-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-cisco-ucs-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-common-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-compute-0:4.10.0-110.el9_8.2.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-compute-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-debuginfo-0:4.10.0-110.el9_8.2.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-debuginfo-0:4.10.0-110.el9_8.2.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-debuginfo-0:4.10.0-110.el9_8.2.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-debugsource-0:4.10.0-110.el9_8.2.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-debugsource-0:4.10.0-110.el9_8.2.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-debugsource-0:4.10.0-110.el9_8.2.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-debugsource-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-drac5-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-eaton-snmp-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-emerson-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-eps-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-gce-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-heuristics-ping-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-hpblade-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ibm-powervs-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ibm-vpc-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ibmblade-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ifmib-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ilo-moonshot-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ilo-mp-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ilo-ssh-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ilo2-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-intelmodular-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ipdu-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ipmilan-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kdump-0:4.10.0-110.el9_8.2.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kdump-0:4.10.0-110.el9_8.2.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kdump-0:4.10.0-110.el9_8.2.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kdump-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kdump-debuginfo-0:4.10.0-110.el9_8.2.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kdump-debuginfo-0:4.10.0-110.el9_8.2.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kdump-debuginfo-0:4.10.0-110.el9_8.2.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kdump-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kubevirt-0:4.10.0-110.el9_8.2.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kubevirt-0:4.10.0-110.el9_8.2.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kubevirt-0:4.10.0-110.el9_8.2.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kubevirt-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kubevirt-debuginfo-0:4.10.0-110.el9_8.2.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kubevirt-debuginfo-0:4.10.0-110.el9_8.2.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kubevirt-debuginfo-0:4.10.0-110.el9_8.2.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kubevirt-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-lpar-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-mpath-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-nutanix-ahv-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-openstack-0:4.10.0-110.el9_8.2.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-openstack-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-redfish-0:4.10.0-110.el9_8.2.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-redfish-0:4.10.0-110.el9_8.2.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-redfish-0:4.10.0-110.el9_8.2.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-redfish-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-rhevm-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-rsa-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-rsb-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-sbd-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-scsi-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-virsh-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-vmware-rest-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-vmware-soap-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-wti-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-zvm-0:4.10.0-110.el9_8.2.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virt-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virt-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-cpg-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-cpg-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-libvirt-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-libvirt-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-multicast-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-multicast-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-serial-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-serial-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-tcp-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-tcp-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:ha-cloud-support-0:4.10.0-110.el9_8.2.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:ha-cloud-support-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:ha-cloud-support-debuginfo-0:4.10.0-110.el9_8.2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-26007"
},
{
"category": "external",
"summary": "RHBZ#2438762",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2438762"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-26007",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-26007"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-26007",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-26007"
},
{
"category": "external",
"summary": "https://github.com/pyca/cryptography/commit/0eebb9dbb6343d9bc1d91e5a2482ed4e054a6d8c",
"url": "https://github.com/pyca/cryptography/commit/0eebb9dbb6343d9bc1d91e5a2482ed4e054a6d8c"
},
{
"category": "external",
"summary": "https://github.com/pyca/cryptography/security/advisories/GHSA-r6ph-v2qm-q3c2",
"url": "https://github.com/pyca/cryptography/security/advisories/GHSA-r6ph-v2qm-q3c2"
}
],
"release_date": "2026-02-10T21:42:56.471000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-19T22:05:17+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-0:4.10.0-110.el9_8.2.src",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-aliyun-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-all-0:4.10.0-110.el9_8.2.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-all-0:4.10.0-110.el9_8.2.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-all-0:4.10.0-110.el9_8.2.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-all-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-amt-ws-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-apc-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-apc-snmp-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-aws-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-azure-arm-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-bladecenter-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-brocade-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-cisco-mds-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-cisco-ucs-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-common-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-compute-0:4.10.0-110.el9_8.2.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-compute-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-debuginfo-0:4.10.0-110.el9_8.2.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-debuginfo-0:4.10.0-110.el9_8.2.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-debuginfo-0:4.10.0-110.el9_8.2.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-debugsource-0:4.10.0-110.el9_8.2.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-debugsource-0:4.10.0-110.el9_8.2.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-debugsource-0:4.10.0-110.el9_8.2.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-debugsource-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-drac5-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-eaton-snmp-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-emerson-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-eps-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-gce-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-heuristics-ping-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-hpblade-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ibm-powervs-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ibm-vpc-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ibmblade-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ifmib-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ilo-moonshot-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ilo-mp-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ilo-ssh-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ilo2-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-intelmodular-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ipdu-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ipmilan-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kdump-0:4.10.0-110.el9_8.2.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kdump-0:4.10.0-110.el9_8.2.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kdump-0:4.10.0-110.el9_8.2.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kdump-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kdump-debuginfo-0:4.10.0-110.el9_8.2.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kdump-debuginfo-0:4.10.0-110.el9_8.2.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kdump-debuginfo-0:4.10.0-110.el9_8.2.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kdump-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kubevirt-0:4.10.0-110.el9_8.2.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kubevirt-0:4.10.0-110.el9_8.2.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kubevirt-0:4.10.0-110.el9_8.2.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kubevirt-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kubevirt-debuginfo-0:4.10.0-110.el9_8.2.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kubevirt-debuginfo-0:4.10.0-110.el9_8.2.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kubevirt-debuginfo-0:4.10.0-110.el9_8.2.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kubevirt-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-lpar-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-mpath-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-nutanix-ahv-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-openstack-0:4.10.0-110.el9_8.2.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-openstack-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-redfish-0:4.10.0-110.el9_8.2.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-redfish-0:4.10.0-110.el9_8.2.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-redfish-0:4.10.0-110.el9_8.2.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-redfish-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-rhevm-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-rsa-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-rsb-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-sbd-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-scsi-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-virsh-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-vmware-rest-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-vmware-soap-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-wti-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-zvm-0:4.10.0-110.el9_8.2.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virt-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virt-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-cpg-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-cpg-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-libvirt-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-libvirt-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-multicast-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-multicast-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-serial-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-serial-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-tcp-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-tcp-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:ha-cloud-support-0:4.10.0-110.el9_8.2.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:ha-cloud-support-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:ha-cloud-support-debuginfo-0:4.10.0-110.el9_8.2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:19355"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-0:4.10.0-110.el9_8.2.src",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-aliyun-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-all-0:4.10.0-110.el9_8.2.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-all-0:4.10.0-110.el9_8.2.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-all-0:4.10.0-110.el9_8.2.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-all-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-amt-ws-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-apc-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-apc-snmp-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-aws-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-azure-arm-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-bladecenter-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-brocade-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-cisco-mds-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-cisco-ucs-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-common-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-compute-0:4.10.0-110.el9_8.2.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-compute-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-debuginfo-0:4.10.0-110.el9_8.2.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-debuginfo-0:4.10.0-110.el9_8.2.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-debuginfo-0:4.10.0-110.el9_8.2.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-debugsource-0:4.10.0-110.el9_8.2.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-debugsource-0:4.10.0-110.el9_8.2.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-debugsource-0:4.10.0-110.el9_8.2.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-debugsource-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-drac5-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-eaton-snmp-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-emerson-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-eps-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-gce-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-heuristics-ping-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-hpblade-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ibm-powervs-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ibm-vpc-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ibmblade-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ifmib-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ilo-moonshot-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ilo-mp-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ilo-ssh-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ilo2-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-intelmodular-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ipdu-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ipmilan-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kdump-0:4.10.0-110.el9_8.2.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kdump-0:4.10.0-110.el9_8.2.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kdump-0:4.10.0-110.el9_8.2.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kdump-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kdump-debuginfo-0:4.10.0-110.el9_8.2.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kdump-debuginfo-0:4.10.0-110.el9_8.2.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kdump-debuginfo-0:4.10.0-110.el9_8.2.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kdump-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kubevirt-0:4.10.0-110.el9_8.2.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kubevirt-0:4.10.0-110.el9_8.2.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kubevirt-0:4.10.0-110.el9_8.2.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kubevirt-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kubevirt-debuginfo-0:4.10.0-110.el9_8.2.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kubevirt-debuginfo-0:4.10.0-110.el9_8.2.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kubevirt-debuginfo-0:4.10.0-110.el9_8.2.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kubevirt-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-lpar-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-mpath-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-nutanix-ahv-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-openstack-0:4.10.0-110.el9_8.2.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-openstack-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-redfish-0:4.10.0-110.el9_8.2.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-redfish-0:4.10.0-110.el9_8.2.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-redfish-0:4.10.0-110.el9_8.2.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-redfish-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-rhevm-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-rsa-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-rsb-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-sbd-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-scsi-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-virsh-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-vmware-rest-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-vmware-soap-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-wti-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-zvm-0:4.10.0-110.el9_8.2.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virt-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virt-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-cpg-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-cpg-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-libvirt-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-libvirt-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-multicast-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-multicast-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-serial-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-serial-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-tcp-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-tcp-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:ha-cloud-support-0:4.10.0-110.el9_8.2.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:ha-cloud-support-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:ha-cloud-support-debuginfo-0:4.10.0-110.el9_8.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-0:4.10.0-110.el9_8.2.src",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-aliyun-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-all-0:4.10.0-110.el9_8.2.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-all-0:4.10.0-110.el9_8.2.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-all-0:4.10.0-110.el9_8.2.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-all-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-amt-ws-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-apc-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-apc-snmp-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-aws-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-azure-arm-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-bladecenter-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-brocade-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-cisco-mds-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-cisco-ucs-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-common-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-compute-0:4.10.0-110.el9_8.2.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-compute-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-debuginfo-0:4.10.0-110.el9_8.2.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-debuginfo-0:4.10.0-110.el9_8.2.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-debuginfo-0:4.10.0-110.el9_8.2.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-debugsource-0:4.10.0-110.el9_8.2.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-debugsource-0:4.10.0-110.el9_8.2.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-debugsource-0:4.10.0-110.el9_8.2.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-debugsource-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-drac5-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-eaton-snmp-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-emerson-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-eps-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-gce-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-heuristics-ping-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-hpblade-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ibm-powervs-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ibm-vpc-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ibmblade-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ifmib-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ilo-moonshot-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ilo-mp-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ilo-ssh-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ilo2-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-intelmodular-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ipdu-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ipmilan-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kdump-0:4.10.0-110.el9_8.2.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kdump-0:4.10.0-110.el9_8.2.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kdump-0:4.10.0-110.el9_8.2.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kdump-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kdump-debuginfo-0:4.10.0-110.el9_8.2.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kdump-debuginfo-0:4.10.0-110.el9_8.2.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kdump-debuginfo-0:4.10.0-110.el9_8.2.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kdump-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kubevirt-0:4.10.0-110.el9_8.2.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kubevirt-0:4.10.0-110.el9_8.2.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kubevirt-0:4.10.0-110.el9_8.2.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kubevirt-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kubevirt-debuginfo-0:4.10.0-110.el9_8.2.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kubevirt-debuginfo-0:4.10.0-110.el9_8.2.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kubevirt-debuginfo-0:4.10.0-110.el9_8.2.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kubevirt-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-lpar-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-mpath-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-nutanix-ahv-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-openstack-0:4.10.0-110.el9_8.2.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-openstack-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-redfish-0:4.10.0-110.el9_8.2.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-redfish-0:4.10.0-110.el9_8.2.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-redfish-0:4.10.0-110.el9_8.2.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-redfish-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-rhevm-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-rsa-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-rsb-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-sbd-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-scsi-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-virsh-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-vmware-rest-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-vmware-soap-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-wti-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-zvm-0:4.10.0-110.el9_8.2.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virt-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virt-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-cpg-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-cpg-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-libvirt-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-libvirt-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-multicast-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-multicast-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-serial-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-serial-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-tcp-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-tcp-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:ha-cloud-support-0:4.10.0-110.el9_8.2.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:ha-cloud-support-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:ha-cloud-support-debuginfo-0:4.10.0-110.el9_8.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "cryptography: cryptography Subgroup Attack Due to Missing Subgroup Validation for SECT Curves"
},
{
"cve": "CVE-2026-30922",
"cwe": {
"id": "CWE-835",
"name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
},
"discovery_date": "2026-03-18T04:02:45.401296+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2448553"
}
],
"notes": [
{
"category": "description",
"text": "An unbounded recursion flaw has been discovered in the pypi pyasn1 library. This uncontrolled recursion occurs when decoding ASN.1 data with deeply nested structures. An attacker can supply a crafted payload containing nested SEQUENCE (0x30) or SET (0x31) tags with Indefinite Length (0x80) markers. This forces the decoder to recursively call itself until the Python interpreter crashes with a RecursionError or consumes all available memory (OOM), crashing the host application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "pyasn1: pyasn1 Vulnerable to Denial of Service via Unbounded Recursion",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-0:4.10.0-110.el9_8.2.src",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-aliyun-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-all-0:4.10.0-110.el9_8.2.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-all-0:4.10.0-110.el9_8.2.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-all-0:4.10.0-110.el9_8.2.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-all-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-amt-ws-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-apc-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-apc-snmp-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-aws-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-azure-arm-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-bladecenter-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-brocade-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-cisco-mds-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-cisco-ucs-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-common-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-compute-0:4.10.0-110.el9_8.2.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-compute-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-debuginfo-0:4.10.0-110.el9_8.2.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-debuginfo-0:4.10.0-110.el9_8.2.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-debuginfo-0:4.10.0-110.el9_8.2.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-debugsource-0:4.10.0-110.el9_8.2.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-debugsource-0:4.10.0-110.el9_8.2.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-debugsource-0:4.10.0-110.el9_8.2.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-debugsource-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-drac5-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-eaton-snmp-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-emerson-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-eps-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-gce-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-heuristics-ping-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-hpblade-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ibm-powervs-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ibm-vpc-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ibmblade-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ifmib-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ilo-moonshot-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ilo-mp-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ilo-ssh-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ilo2-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-intelmodular-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ipdu-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ipmilan-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kdump-0:4.10.0-110.el9_8.2.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kdump-0:4.10.0-110.el9_8.2.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kdump-0:4.10.0-110.el9_8.2.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kdump-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kdump-debuginfo-0:4.10.0-110.el9_8.2.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kdump-debuginfo-0:4.10.0-110.el9_8.2.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kdump-debuginfo-0:4.10.0-110.el9_8.2.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kdump-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kubevirt-0:4.10.0-110.el9_8.2.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kubevirt-0:4.10.0-110.el9_8.2.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kubevirt-0:4.10.0-110.el9_8.2.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kubevirt-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kubevirt-debuginfo-0:4.10.0-110.el9_8.2.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kubevirt-debuginfo-0:4.10.0-110.el9_8.2.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kubevirt-debuginfo-0:4.10.0-110.el9_8.2.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kubevirt-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-lpar-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-mpath-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-nutanix-ahv-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-openstack-0:4.10.0-110.el9_8.2.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-openstack-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-redfish-0:4.10.0-110.el9_8.2.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-redfish-0:4.10.0-110.el9_8.2.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-redfish-0:4.10.0-110.el9_8.2.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-redfish-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-rhevm-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-rsa-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-rsb-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-sbd-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-scsi-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-virsh-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-vmware-rest-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-vmware-soap-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-wti-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-zvm-0:4.10.0-110.el9_8.2.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virt-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virt-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-cpg-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-cpg-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-libvirt-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-libvirt-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-multicast-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-multicast-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-serial-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-serial-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-tcp-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-tcp-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:ha-cloud-support-0:4.10.0-110.el9_8.2.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:ha-cloud-support-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:ha-cloud-support-debuginfo-0:4.10.0-110.el9_8.2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-30922"
},
{
"category": "external",
"summary": "RHBZ#2448553",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2448553"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-30922",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-30922"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-30922",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-30922"
},
{
"category": "external",
"summary": "https://github.com/pyasn1/pyasn1/commit/25ad481c19fdb006e20485ef3fc2e5b3eff30ef0",
"url": "https://github.com/pyasn1/pyasn1/commit/25ad481c19fdb006e20485ef3fc2e5b3eff30ef0"
},
{
"category": "external",
"summary": "https://github.com/pyasn1/pyasn1/security/advisories/GHSA-jr27-m4p2-rc6r",
"url": "https://github.com/pyasn1/pyasn1/security/advisories/GHSA-jr27-m4p2-rc6r"
}
],
"release_date": "2026-03-18T02:29:45.857000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-19T22:05:17+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-0:4.10.0-110.el9_8.2.src",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-aliyun-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-all-0:4.10.0-110.el9_8.2.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-all-0:4.10.0-110.el9_8.2.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-all-0:4.10.0-110.el9_8.2.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-all-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-amt-ws-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-apc-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-apc-snmp-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-aws-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-azure-arm-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-bladecenter-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-brocade-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-cisco-mds-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-cisco-ucs-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-common-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-compute-0:4.10.0-110.el9_8.2.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-compute-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-debuginfo-0:4.10.0-110.el9_8.2.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-debuginfo-0:4.10.0-110.el9_8.2.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-debuginfo-0:4.10.0-110.el9_8.2.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-debugsource-0:4.10.0-110.el9_8.2.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-debugsource-0:4.10.0-110.el9_8.2.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-debugsource-0:4.10.0-110.el9_8.2.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-debugsource-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-drac5-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-eaton-snmp-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-emerson-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-eps-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-gce-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-heuristics-ping-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-hpblade-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ibm-powervs-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ibm-vpc-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ibmblade-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ifmib-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ilo-moonshot-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ilo-mp-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ilo-ssh-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ilo2-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-intelmodular-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ipdu-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ipmilan-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kdump-0:4.10.0-110.el9_8.2.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kdump-0:4.10.0-110.el9_8.2.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kdump-0:4.10.0-110.el9_8.2.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kdump-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kdump-debuginfo-0:4.10.0-110.el9_8.2.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kdump-debuginfo-0:4.10.0-110.el9_8.2.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kdump-debuginfo-0:4.10.0-110.el9_8.2.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kdump-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kubevirt-0:4.10.0-110.el9_8.2.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kubevirt-0:4.10.0-110.el9_8.2.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kubevirt-0:4.10.0-110.el9_8.2.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kubevirt-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kubevirt-debuginfo-0:4.10.0-110.el9_8.2.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kubevirt-debuginfo-0:4.10.0-110.el9_8.2.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kubevirt-debuginfo-0:4.10.0-110.el9_8.2.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kubevirt-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-lpar-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-mpath-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-nutanix-ahv-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-openstack-0:4.10.0-110.el9_8.2.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-openstack-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-redfish-0:4.10.0-110.el9_8.2.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-redfish-0:4.10.0-110.el9_8.2.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-redfish-0:4.10.0-110.el9_8.2.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-redfish-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-rhevm-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-rsa-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-rsb-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-sbd-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-scsi-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-virsh-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-vmware-rest-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-vmware-soap-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-wti-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-zvm-0:4.10.0-110.el9_8.2.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virt-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virt-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-cpg-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-cpg-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-libvirt-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-libvirt-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-multicast-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-multicast-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-serial-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-serial-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-tcp-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-tcp-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:ha-cloud-support-0:4.10.0-110.el9_8.2.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:ha-cloud-support-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:ha-cloud-support-debuginfo-0:4.10.0-110.el9_8.2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:19355"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-0:4.10.0-110.el9_8.2.src",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-aliyun-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-all-0:4.10.0-110.el9_8.2.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-all-0:4.10.0-110.el9_8.2.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-all-0:4.10.0-110.el9_8.2.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-all-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-amt-ws-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-apc-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-apc-snmp-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-aws-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-azure-arm-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-bladecenter-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-brocade-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-cisco-mds-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-cisco-ucs-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-common-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-compute-0:4.10.0-110.el9_8.2.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-compute-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-debuginfo-0:4.10.0-110.el9_8.2.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-debuginfo-0:4.10.0-110.el9_8.2.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-debuginfo-0:4.10.0-110.el9_8.2.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-debugsource-0:4.10.0-110.el9_8.2.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-debugsource-0:4.10.0-110.el9_8.2.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-debugsource-0:4.10.0-110.el9_8.2.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-debugsource-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-drac5-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-eaton-snmp-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-emerson-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-eps-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-gce-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-heuristics-ping-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-hpblade-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ibm-powervs-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ibm-vpc-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ibmblade-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ifmib-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ilo-moonshot-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ilo-mp-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ilo-ssh-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ilo2-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-intelmodular-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ipdu-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ipmilan-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kdump-0:4.10.0-110.el9_8.2.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kdump-0:4.10.0-110.el9_8.2.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kdump-0:4.10.0-110.el9_8.2.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kdump-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kdump-debuginfo-0:4.10.0-110.el9_8.2.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kdump-debuginfo-0:4.10.0-110.el9_8.2.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kdump-debuginfo-0:4.10.0-110.el9_8.2.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kdump-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kubevirt-0:4.10.0-110.el9_8.2.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kubevirt-0:4.10.0-110.el9_8.2.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kubevirt-0:4.10.0-110.el9_8.2.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kubevirt-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kubevirt-debuginfo-0:4.10.0-110.el9_8.2.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kubevirt-debuginfo-0:4.10.0-110.el9_8.2.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kubevirt-debuginfo-0:4.10.0-110.el9_8.2.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kubevirt-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-lpar-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-mpath-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-nutanix-ahv-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-openstack-0:4.10.0-110.el9_8.2.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-openstack-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-redfish-0:4.10.0-110.el9_8.2.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-redfish-0:4.10.0-110.el9_8.2.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-redfish-0:4.10.0-110.el9_8.2.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-redfish-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-rhevm-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-rsa-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-rsb-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-sbd-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-scsi-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-virsh-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-vmware-rest-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-vmware-soap-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-wti-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-zvm-0:4.10.0-110.el9_8.2.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virt-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virt-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-cpg-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-cpg-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-libvirt-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-libvirt-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-multicast-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-multicast-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-serial-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-serial-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-tcp-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-tcp-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:ha-cloud-support-0:4.10.0-110.el9_8.2.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:ha-cloud-support-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:ha-cloud-support-debuginfo-0:4.10.0-110.el9_8.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-0:4.10.0-110.el9_8.2.src",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-aliyun-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-all-0:4.10.0-110.el9_8.2.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-all-0:4.10.0-110.el9_8.2.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-all-0:4.10.0-110.el9_8.2.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-all-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-amt-ws-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-apc-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-apc-snmp-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-aws-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-azure-arm-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-bladecenter-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-brocade-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-cisco-mds-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-cisco-ucs-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-common-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-compute-0:4.10.0-110.el9_8.2.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-compute-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-debuginfo-0:4.10.0-110.el9_8.2.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-debuginfo-0:4.10.0-110.el9_8.2.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-debuginfo-0:4.10.0-110.el9_8.2.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-debugsource-0:4.10.0-110.el9_8.2.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-debugsource-0:4.10.0-110.el9_8.2.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-debugsource-0:4.10.0-110.el9_8.2.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-debugsource-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-drac5-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-eaton-snmp-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-emerson-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-eps-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-gce-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-heuristics-ping-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-hpblade-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ibm-powervs-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ibm-vpc-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ibmblade-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ifmib-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ilo-moonshot-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ilo-mp-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ilo-ssh-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ilo2-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-intelmodular-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ipdu-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ipmilan-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kdump-0:4.10.0-110.el9_8.2.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kdump-0:4.10.0-110.el9_8.2.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kdump-0:4.10.0-110.el9_8.2.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kdump-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kdump-debuginfo-0:4.10.0-110.el9_8.2.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kdump-debuginfo-0:4.10.0-110.el9_8.2.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kdump-debuginfo-0:4.10.0-110.el9_8.2.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kdump-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kubevirt-0:4.10.0-110.el9_8.2.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kubevirt-0:4.10.0-110.el9_8.2.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kubevirt-0:4.10.0-110.el9_8.2.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kubevirt-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kubevirt-debuginfo-0:4.10.0-110.el9_8.2.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kubevirt-debuginfo-0:4.10.0-110.el9_8.2.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kubevirt-debuginfo-0:4.10.0-110.el9_8.2.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kubevirt-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-lpar-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-mpath-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-nutanix-ahv-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-openstack-0:4.10.0-110.el9_8.2.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-openstack-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-redfish-0:4.10.0-110.el9_8.2.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-redfish-0:4.10.0-110.el9_8.2.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-redfish-0:4.10.0-110.el9_8.2.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-redfish-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-rhevm-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-rsa-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-rsb-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-sbd-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-scsi-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-virsh-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-vmware-rest-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-vmware-soap-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-wti-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-zvm-0:4.10.0-110.el9_8.2.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virt-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virt-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-cpg-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-cpg-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-libvirt-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-libvirt-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-multicast-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-multicast-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-serial-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-serial-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-tcp-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-tcp-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:ha-cloud-support-0:4.10.0-110.el9_8.2.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:ha-cloud-support-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:ha-cloud-support-debuginfo-0:4.10.0-110.el9_8.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "pyasn1: pyasn1 Vulnerable to Denial of Service via Unbounded Recursion"
},
{
"cve": "CVE-2026-32597",
"cwe": {
"id": "CWE-347",
"name": "Improper Verification of Cryptographic Signature"
},
"discovery_date": "2026-03-12T22:01:29.967713+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2447194"
}
],
"notes": [
{
"category": "description",
"text": "A missing verification step has been discovered in PyJWT. PyJWT does not validate the crit (Critical) Header Parameter defined in RFC 7515 \u00a74.1.11. When a JWS token contains a crit array listing extensions that PyJWT does not understand, the library accepts the token instead of rejecting it. This violates the MUST requirement in the RFC.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "pyjwt: PyJWT accepts unknown `crit` header extensions (RFC 7515 \u00a74.1.11 MUST violation)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-0:4.10.0-110.el9_8.2.src",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-aliyun-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-all-0:4.10.0-110.el9_8.2.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-all-0:4.10.0-110.el9_8.2.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-all-0:4.10.0-110.el9_8.2.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-all-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-amt-ws-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-apc-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-apc-snmp-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-aws-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-azure-arm-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-bladecenter-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-brocade-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-cisco-mds-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-cisco-ucs-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-common-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-compute-0:4.10.0-110.el9_8.2.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-compute-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-debuginfo-0:4.10.0-110.el9_8.2.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-debuginfo-0:4.10.0-110.el9_8.2.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-debuginfo-0:4.10.0-110.el9_8.2.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-debugsource-0:4.10.0-110.el9_8.2.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-debugsource-0:4.10.0-110.el9_8.2.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-debugsource-0:4.10.0-110.el9_8.2.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-debugsource-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-drac5-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-eaton-snmp-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-emerson-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-eps-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-gce-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-heuristics-ping-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-hpblade-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ibm-powervs-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ibm-vpc-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ibmblade-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ifmib-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ilo-moonshot-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ilo-mp-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ilo-ssh-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ilo2-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-intelmodular-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ipdu-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ipmilan-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kdump-0:4.10.0-110.el9_8.2.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kdump-0:4.10.0-110.el9_8.2.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kdump-0:4.10.0-110.el9_8.2.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kdump-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kdump-debuginfo-0:4.10.0-110.el9_8.2.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kdump-debuginfo-0:4.10.0-110.el9_8.2.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kdump-debuginfo-0:4.10.0-110.el9_8.2.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kdump-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kubevirt-0:4.10.0-110.el9_8.2.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kubevirt-0:4.10.0-110.el9_8.2.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kubevirt-0:4.10.0-110.el9_8.2.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kubevirt-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kubevirt-debuginfo-0:4.10.0-110.el9_8.2.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kubevirt-debuginfo-0:4.10.0-110.el9_8.2.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kubevirt-debuginfo-0:4.10.0-110.el9_8.2.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kubevirt-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-lpar-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-mpath-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-nutanix-ahv-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-openstack-0:4.10.0-110.el9_8.2.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-openstack-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-redfish-0:4.10.0-110.el9_8.2.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-redfish-0:4.10.0-110.el9_8.2.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-redfish-0:4.10.0-110.el9_8.2.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-redfish-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-rhevm-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-rsa-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-rsb-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-sbd-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-scsi-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-virsh-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-vmware-rest-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-vmware-soap-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-wti-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-zvm-0:4.10.0-110.el9_8.2.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virt-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virt-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-cpg-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-cpg-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-libvirt-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-libvirt-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-multicast-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-multicast-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-serial-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-serial-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-tcp-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-tcp-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:ha-cloud-support-0:4.10.0-110.el9_8.2.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:ha-cloud-support-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:ha-cloud-support-debuginfo-0:4.10.0-110.el9_8.2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32597"
},
{
"category": "external",
"summary": "RHBZ#2447194",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2447194"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32597",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32597"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32597",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32597"
},
{
"category": "external",
"summary": "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-752w-5fwx-jx9f",
"url": "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-752w-5fwx-jx9f"
}
],
"release_date": "2026-03-12T21:41:50.427000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-19T22:05:17+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-0:4.10.0-110.el9_8.2.src",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-aliyun-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-all-0:4.10.0-110.el9_8.2.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-all-0:4.10.0-110.el9_8.2.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-all-0:4.10.0-110.el9_8.2.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-all-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-amt-ws-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-apc-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-apc-snmp-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-aws-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-azure-arm-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-bladecenter-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-brocade-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-cisco-mds-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-cisco-ucs-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-common-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-compute-0:4.10.0-110.el9_8.2.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-compute-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-debuginfo-0:4.10.0-110.el9_8.2.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-debuginfo-0:4.10.0-110.el9_8.2.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-debuginfo-0:4.10.0-110.el9_8.2.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-debugsource-0:4.10.0-110.el9_8.2.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-debugsource-0:4.10.0-110.el9_8.2.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-debugsource-0:4.10.0-110.el9_8.2.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-debugsource-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-drac5-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-eaton-snmp-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-emerson-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-eps-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-gce-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-heuristics-ping-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-hpblade-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ibm-powervs-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ibm-vpc-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ibmblade-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ifmib-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ilo-moonshot-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ilo-mp-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ilo-ssh-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ilo2-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-intelmodular-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ipdu-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ipmilan-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kdump-0:4.10.0-110.el9_8.2.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kdump-0:4.10.0-110.el9_8.2.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kdump-0:4.10.0-110.el9_8.2.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kdump-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kdump-debuginfo-0:4.10.0-110.el9_8.2.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kdump-debuginfo-0:4.10.0-110.el9_8.2.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kdump-debuginfo-0:4.10.0-110.el9_8.2.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kdump-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kubevirt-0:4.10.0-110.el9_8.2.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kubevirt-0:4.10.0-110.el9_8.2.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kubevirt-0:4.10.0-110.el9_8.2.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kubevirt-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kubevirt-debuginfo-0:4.10.0-110.el9_8.2.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kubevirt-debuginfo-0:4.10.0-110.el9_8.2.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kubevirt-debuginfo-0:4.10.0-110.el9_8.2.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kubevirt-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-lpar-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-mpath-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-nutanix-ahv-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-openstack-0:4.10.0-110.el9_8.2.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-openstack-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-redfish-0:4.10.0-110.el9_8.2.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-redfish-0:4.10.0-110.el9_8.2.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-redfish-0:4.10.0-110.el9_8.2.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-redfish-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-rhevm-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-rsa-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-rsb-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-sbd-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-scsi-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-virsh-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-vmware-rest-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-vmware-soap-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-wti-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-zvm-0:4.10.0-110.el9_8.2.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virt-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virt-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-cpg-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-cpg-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-libvirt-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-libvirt-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-multicast-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-multicast-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-serial-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-serial-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-tcp-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-tcp-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:ha-cloud-support-0:4.10.0-110.el9_8.2.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:ha-cloud-support-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:ha-cloud-support-debuginfo-0:4.10.0-110.el9_8.2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:19355"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-0:4.10.0-110.el9_8.2.src",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-aliyun-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-all-0:4.10.0-110.el9_8.2.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-all-0:4.10.0-110.el9_8.2.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-all-0:4.10.0-110.el9_8.2.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-all-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-amt-ws-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-apc-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-apc-snmp-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-aws-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-azure-arm-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-bladecenter-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-brocade-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-cisco-mds-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-cisco-ucs-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-common-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-compute-0:4.10.0-110.el9_8.2.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-compute-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-debuginfo-0:4.10.0-110.el9_8.2.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-debuginfo-0:4.10.0-110.el9_8.2.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-debuginfo-0:4.10.0-110.el9_8.2.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-debugsource-0:4.10.0-110.el9_8.2.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-debugsource-0:4.10.0-110.el9_8.2.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-debugsource-0:4.10.0-110.el9_8.2.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-debugsource-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-drac5-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-eaton-snmp-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-emerson-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-eps-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-gce-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-heuristics-ping-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-hpblade-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ibm-powervs-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ibm-vpc-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ibmblade-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ifmib-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ilo-moonshot-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ilo-mp-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ilo-ssh-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ilo2-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-intelmodular-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ipdu-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ipmilan-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kdump-0:4.10.0-110.el9_8.2.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kdump-0:4.10.0-110.el9_8.2.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kdump-0:4.10.0-110.el9_8.2.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kdump-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kdump-debuginfo-0:4.10.0-110.el9_8.2.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kdump-debuginfo-0:4.10.0-110.el9_8.2.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kdump-debuginfo-0:4.10.0-110.el9_8.2.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kdump-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kubevirt-0:4.10.0-110.el9_8.2.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kubevirt-0:4.10.0-110.el9_8.2.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kubevirt-0:4.10.0-110.el9_8.2.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kubevirt-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kubevirt-debuginfo-0:4.10.0-110.el9_8.2.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kubevirt-debuginfo-0:4.10.0-110.el9_8.2.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kubevirt-debuginfo-0:4.10.0-110.el9_8.2.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kubevirt-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-lpar-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-mpath-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-nutanix-ahv-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-openstack-0:4.10.0-110.el9_8.2.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-openstack-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-redfish-0:4.10.0-110.el9_8.2.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-redfish-0:4.10.0-110.el9_8.2.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-redfish-0:4.10.0-110.el9_8.2.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-redfish-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-rhevm-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-rsa-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-rsb-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-sbd-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-scsi-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-virsh-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-vmware-rest-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-vmware-soap-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-wti-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-zvm-0:4.10.0-110.el9_8.2.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virt-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virt-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-cpg-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-cpg-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-libvirt-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-libvirt-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-multicast-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-multicast-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-serial-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-serial-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-tcp-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-tcp-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:ha-cloud-support-0:4.10.0-110.el9_8.2.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:ha-cloud-support-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:ha-cloud-support-debuginfo-0:4.10.0-110.el9_8.2.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-0:4.10.0-110.el9_8.2.src",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-aliyun-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-all-0:4.10.0-110.el9_8.2.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-all-0:4.10.0-110.el9_8.2.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-all-0:4.10.0-110.el9_8.2.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-all-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-amt-ws-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-apc-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-apc-snmp-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-aws-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-azure-arm-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-bladecenter-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-brocade-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-cisco-mds-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-cisco-ucs-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-common-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-compute-0:4.10.0-110.el9_8.2.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-compute-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-debuginfo-0:4.10.0-110.el9_8.2.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-debuginfo-0:4.10.0-110.el9_8.2.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-debuginfo-0:4.10.0-110.el9_8.2.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-debugsource-0:4.10.0-110.el9_8.2.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-debugsource-0:4.10.0-110.el9_8.2.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-debugsource-0:4.10.0-110.el9_8.2.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-debugsource-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-drac5-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-eaton-snmp-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-emerson-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-eps-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-gce-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-heuristics-ping-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-hpblade-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ibm-powervs-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ibm-vpc-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ibmblade-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ifmib-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ilo-moonshot-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ilo-mp-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ilo-ssh-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ilo2-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-intelmodular-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ipdu-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-ipmilan-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kdump-0:4.10.0-110.el9_8.2.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kdump-0:4.10.0-110.el9_8.2.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kdump-0:4.10.0-110.el9_8.2.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kdump-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kdump-debuginfo-0:4.10.0-110.el9_8.2.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kdump-debuginfo-0:4.10.0-110.el9_8.2.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kdump-debuginfo-0:4.10.0-110.el9_8.2.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kdump-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kubevirt-0:4.10.0-110.el9_8.2.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kubevirt-0:4.10.0-110.el9_8.2.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kubevirt-0:4.10.0-110.el9_8.2.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kubevirt-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kubevirt-debuginfo-0:4.10.0-110.el9_8.2.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kubevirt-debuginfo-0:4.10.0-110.el9_8.2.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kubevirt-debuginfo-0:4.10.0-110.el9_8.2.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-kubevirt-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-lpar-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-mpath-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-nutanix-ahv-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-openstack-0:4.10.0-110.el9_8.2.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-openstack-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-redfish-0:4.10.0-110.el9_8.2.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-redfish-0:4.10.0-110.el9_8.2.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-redfish-0:4.10.0-110.el9_8.2.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-redfish-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-rhevm-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-rsa-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-rsb-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-sbd-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-scsi-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-virsh-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-vmware-rest-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-vmware-soap-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-wti-0:4.10.0-110.el9_8.2.noarch",
"AppStream-9.8.0.Z.MAIN.EUS:fence-agents-zvm-0:4.10.0-110.el9_8.2.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virt-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virt-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-cpg-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-cpg-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-libvirt-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-libvirt-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-multicast-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-multicast-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-serial-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-serial-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-tcp-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:fence-virtd-tcp-debuginfo-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:ha-cloud-support-0:4.10.0-110.el9_8.2.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:ha-cloud-support-0:4.10.0-110.el9_8.2.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:ha-cloud-support-debuginfo-0:4.10.0-110.el9_8.2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "pyjwt: PyJWT accepts unknown `crit` header extensions (RFC 7515 \u00a74.1.11 MUST violation)"
}
]
}
RHSA-2026:19375
Vulnerability from csaf_redhat - Published: 2026-05-19 21:01 - Updated: 2026-07-20 04:40Summary
Red Hat Security Advisory: Red Hat Quay 3.16.4
Severity
Important
Notes
Topic: Red Hat Quay 3.16.4 is now available with bug fixes.
Details: Quay 3.16.4
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in the net/url package in the Go standard library. The package does not enforce a limit on the number of unique query parameters it parses. A Go application using the net/http.Request.ParseForm method will try to process all parameters provided in the request. A specially crafted HTTP request containing a massive number of query parameters will cause the application to consume an excessive amount of memory, eventually causing the application to crash or become unresponsive, resulting in a denial of service.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not correctly handle hostname normalization when evaluating NO_PROXY rules. An attacker can exploit this by crafting requests to loopback addresses (e.g., localhost. or [::1]) which bypass the NO_PROXY configuration and are routed through the configured proxy. This can lead to Server-Side Request Forgery (SSRF) vulnerabilities, enabling attackers to access sensitive internal or loopback services that should otherwise be protected.
7.0 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Red Hat Quay and mirror registry for Red Hat OpenShift. The log export feature in these products allows an authenticated user to specify an arbitrary callback URL. A backend process then makes server-side HTTP requests to this provided URL. This vulnerability, known as Server-Side Request Forgery (SSRF), could allow an attacker to send requests from the application's internal network, potentially leading to the disclosure of sensitive information.
6.5 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le | — |
Vendor Fix
fix
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le | — |
Threats
Impact
Important
No description is available for this CVE.
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le | — |
Vendor Fix
fix
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le | — |
A flaw was found in jsrsasign. A remote attacker could exploit this vulnerability by providing specially crafted zero or negative inputs to the bnModInverse function within the BigInteger.modInverse implementation. This could lead to an infinite loop, causing a permanent denial of service (DoS) by hanging the process.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in jsrsasign. An attacker can exploit an incomplete comparison vulnerability in the getRandomBigIntegerZeroToMax and getRandomBigIntegerMinToMax functions. By manipulating incorrect comparison checks, an attacker can bias the Digital Signature Algorithm (DSA) nonces during signature generation. This allows the attacker to recover the private key, leading to a critical security compromise.
9.1 (Critical)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in jsrsasign. An attacker can exploit improper verification of cryptographic signatures by supplying malicious domain parameters during the Digital Signature Algorithm (DSA) validation process. This allows the attacker to forge DSA signatures or X.509 certificates, which would then be accepted as legitimate, potentially leading to unauthorized access or data manipulation.
8.2 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in jsrsasign. An attacker can exploit a missing cryptographic step in the Digital Signature Algorithm (DSA) signing process, specifically within the KJUR.crypto.DSA.signWithMessageHash function. By manipulating the signature generation to force specific values, the library emits an invalid signature without retrying. This vulnerability allows an attacker to recover the private key used for signing.
8.7 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in jsrsasign. A remote attacker can exploit an incorrect conversion between numeric types by providing a negative exponent to the `modPow` function. This vulnerability can force the computation of incorrect modular inverses, which ultimately allows an attacker to bypass signature verification.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le | — |
Workaround
|
Threats
Impact
Important
The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le | — |
Workaround
|
Threats
Impact
Important
A certificate validation flaw has been discovered in the golang crypto/x509 module. When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applied, and only the last constraint will be considered.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in pyOpenSSL. The set_cookie_generate_callback callback function can be used to generate DTLS cookies. When the callback returns a cookie string or byte sequence longer than 256 bytes, a buffer overflow can be triggered due to a missing bounds checking before copying the data to a fixed-size buffer provided by the underlying OpenSSL library.
8.1 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Authlib, a Python library used for creating secure authentication and authorization systems. This vulnerability, known as JWK (JSON Web Key) Header Injection, affects how Authlib verifies digital signatures in JWS (JSON Web Signature) tokens. An attacker can exploit this by creating a specially crafted token that includes their own cryptographic key in the header. When the system attempts to verify this token without a predefined key, it mistakenly uses the attacker's key, allowing them to bypass authentication and gain unauthorized access.
9.1 (Critical)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le | — |
Vendor Fix
fix
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le | — |
Threats
Impact
Low
A flaw was found in Authlib, a Python library for building OAuth and OpenID Connect servers. A remote attacker can exploit this vulnerability by crafting a malicious JSON Web Token (JWT) with a "none" algorithm and an empty signature. This bypasses the expected signature verification, potentially allowing the attacker to forge tokens and gain unauthorized access or perform unauthorized actions within applications using Authlib.
9.1 (Critical)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Immutable.js, a library for persistent immutable data structures. This vulnerability, known as Prototype Pollution, allows an attacker with low privileges to inject unwanted properties into core JavaScript object prototypes without user interaction. By manipulating specific APIs such as mergeDeep(), mergeDeepWith(), merge(), Map.toJS(), and Map.toObject(), a remote attacker could potentially execute arbitrary code or cause a denial of service (DoS).
8.8 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le | — |
Vendor Fix
fix
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le | — |
Threats
Impact
Important
A flaw was found in SVGO, an SVG (Scalable Vector Graphics) Optimizer. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by submitting a specially crafted XML file. The application's failure to properly guard against XML entity expansion or recursion can lead to the Node.js process consuming excessive memory and crashing.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le | — |
Workaround
|
Threats
Impact
Important
An unbounded recursion flaw has been discovered in the pypi pyasn1 library. This uncontrolled recursion occurs when decoding ASN.1 data with deeply nested structures. An attacker can supply a crafted payload containing nested SEQUENCE (0x30) or SET (0x31) tags with Indefinite Length (0x80) markers. This forces the decoder to recursively call itself until the Python interpreter crashes with a RecursionError or consumes all available memory (OOM), crashing the host application.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the Go standard library packages `crypto/x509` and `crypto/tls`. During the process of building a certificate chain, an attacker can provide a large number of intermediate certificates. This excessive input is not properly limited, leading to an uncontrolled amount of work being performed. This can result in a denial of service (DoS) condition, making the affected system or application unavailable to legitimate users.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le | — |
Vendor Fix
fix
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le | — |
Threats
Impact
Important
A flaw was found in the internal/syscall/unix package in the Go standard library. If the target of the `Root.Chmod` function is replaced with a symbolic link during execution, specifically after `Root.Chmod` checks the target but before acting, the `chmod` operation will be performed on the file the symbolic link points to. This issue can bypass directory restrictions and lead to unauthorized permission changes on the filesystem.
7.8 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in the DataRow.Decode function within the github.com/jackc/pgproto3/v2 component. A malicious or compromised PostgreSQL server can exploit this by sending a DataRow message containing a negative field length. This improper validation of field lengths leads to a "slice bounds out of range panic", resulting in a Denial of Service (DoS) for the affected application.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Red Hat Quay's container image upload process. An authenticated user with push access to any repository on the registry can interfere with image uploads in progress by other users, including those in repositories they do not have access to. This could allow the attacker to read, modify, or cancel another user's in-progress image upload.
7.4 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le | — |
Vendor Fix
fix
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le | — |
Threats
Impact
Important
A flaw was found in Red Hat Quay's handling of resumable container image layer uploads. The upload process stores intermediate data in the database using a format that, if tampered with, could allow an attacker to execute arbitrary code on the Quay server.
7.1 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le | — |
Vendor Fix
fix
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le | — |
Threats
Impact
Moderate
A missing verification step has been discovered in PyJWT. PyJWT does not validate the crit (Critical) Header Parameter defined in RFC 7515 §4.1.11. When a JWS token contains a crit array listing extensions that PyJWT does not understand, the library accepts the token instead of rejecting it. This violates the MUST requirement in the RFC.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.
9.1 (Critical)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Forge (also called `node-forge`), a JavaScript implementation of Transport Layer Security. A remote attacker could exploit weaknesses in the RSASSA PKCS#1 v1.5 signature verification process. By crafting malicious signatures that include extra data within the ASN structure and do not meet padding requirements, an attacker can bypass signature validation. This allows for the creation of forged signatures that appear legitimate, potentially compromising the integrity and authenticity of communications.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Go JOSE, a library for handling JSON Web Encryption (JWE) objects. A remote attacker could exploit this vulnerability by providing a specially crafted JWE object. When decrypting such an object, if a key wrapping algorithm is specified but the encrypted key field is empty, the application can crash. This leads to a denial of service (DoS), making the affected service unavailable to legitimate users.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the cryptography library. This vulnerability occurs when a non-contiguous buffer is passed to certain application programming interfaces (APIs) that accept Python buffers, such as Hash.update(). A remote attacker could exploit this to cause a buffer overflow, potentially leading to a denial of service.
7.3 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Pillow, a Python imaging library. This vulnerability allows a remote attacker to trigger a denial of service (DoS) by providing a specially crafted FITS image file. The library's failure to limit the amount of GZIP-compressed data during decoding can lead to unbounded memory consumption, causing the system to crash or experience severe performance issues.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le | — |
Workaround
|
Threats
Impact
Important
A flaw was found in follow-redirects. When an HTTP request follows a cross-domain redirect (a redirection to a different domain), custom authentication headers, such as X-API-Key or X-Auth-Token, are not properly stripped. This allows these sensitive headers to be forwarded verbatim to the redirect target, potentially leading to the unintended disclosure of authentication information to an untrusted third party.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le | — |
Vendor Fix
fix
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le | — |
Threats
Impact
Important
A flaw was found in Axios, an HTTP client library. This vulnerability allows an attacker to exploit a prototype pollution issue if another part of the application has already polluted the Object.prototype. By doing so, the attacker can intercept and modify JSON responses or take control of the HTTP communication. This could lead to unauthorized access to sensitive information like user credentials and request details.
7.4 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le | — |
Vendor Fix
fix
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le | — |
Threats
Impact
Important
A flaw was found in Axios, a software library for making network requests. A remote attacker can exploit a prototype pollution vulnerability to inject arbitrary HTTP headers into outgoing requests. This occurs when the application's core object definitions are manipulated, causing Axios to misinterpret data and include attacker-controlled headers in network communications. This could lead to unauthorized actions or data manipulation.
7.4 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in Axios, a promise-based HTTP client for browsers and Node.js. This vulnerability occurs because the `toFormData` function recursively processes nested objects without a depth limit. A remote attacker can exploit this by sending deeply nested request data, which causes the Node.js process to crash due to a RangeError, leading to a potential Denial of Service (DoS) if the process crashes.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le | — |
Vendor Fix
fix
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le | — |
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. This vulnerability, a Prototype Pollution "Gadget" attack, allows an attacker to manipulate the `Object.prototype.validateStatus` property. By polluting this property, all HTTP error responses (such as 401, 403, or 500) are silently treated as successful responses. This can lead to a complete bypass of application-level authentication and error handling, potentially granting unauthorized access.
8.2 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le | — |
Vendor Fix
fix
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le | — |
Threats
Impact
Important
A flaw was found in Axios, a promise-based HTTP client. An attacker who can control the destination address of an Axios request can exploit this vulnerability. By using specific internal network addresses (within the 127.0.0.0/8 range, excluding 127.0.0.1), the attacker can completely bypass the NO_PROXY protection, potentially leading to unauthorized access or information disclosure within the network. This issue is an incomplete fix for a previous vulnerability.
7.2 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le | — |
Vendor Fix
fix
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64 | — | ||
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le | — |
Threats
Impact
Important
A flaw was found in Axios, a widely used HTTP client. This vulnerability, known as a Prototype Pollution "Gadget" attack, allows a remote attacker to subtly alter JSON API responses. By manipulating a specific function, an attacker can selectively modify data within these responses. This could lead to significant security breaches, including unauthorized privilege escalation, fraudulent balance manipulation, or bypassing critical authorization checks.
7.4 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le | — |
Vendor Fix
fix
Workaround
|
Known not affected
19 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le | — |
Workaround
|
Threats
Impact
Important
References
261 references
Acknowledgments
Antony Di Scala
Michael Whale
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat Quay 3.16.4 is now available with bug fixes.",
"title": "Topic"
},
{
"category": "general",
"text": "Quay 3.16.4",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:19375",
"url": "https://access.redhat.com/errata/RHSA-2026:19375"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-61726",
"url": "https://access.redhat.com/security/cve/CVE-2025-61726"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2025-62718",
"url": "https://access.redhat.com/security/cve/CVE-2025-62718"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-2377",
"url": "https://access.redhat.com/security/cve/CVE-2026-2377"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-25679",
"url": "https://access.redhat.com/security/cve/CVE-2026-25679"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-27137",
"url": "https://access.redhat.com/security/cve/CVE-2026-27137"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-27459",
"url": "https://access.redhat.com/security/cve/CVE-2026-27459"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-27962",
"url": "https://access.redhat.com/security/cve/CVE-2026-27962"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-28802",
"url": "https://access.redhat.com/security/cve/CVE-2026-28802"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-29063",
"url": "https://access.redhat.com/security/cve/CVE-2026-29063"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-29074",
"url": "https://access.redhat.com/security/cve/CVE-2026-29074"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-30922",
"url": "https://access.redhat.com/security/cve/CVE-2026-30922"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32280",
"url": "https://access.redhat.com/security/cve/CVE-2026-32280"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32282",
"url": "https://access.redhat.com/security/cve/CVE-2026-32282"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32286",
"url": "https://access.redhat.com/security/cve/CVE-2026-32286"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32589",
"url": "https://access.redhat.com/security/cve/CVE-2026-32589"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32590",
"url": "https://access.redhat.com/security/cve/CVE-2026-32590"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32597",
"url": "https://access.redhat.com/security/cve/CVE-2026-32597"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33186",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33894",
"url": "https://access.redhat.com/security/cve/CVE-2026-33894"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-34986",
"url": "https://access.redhat.com/security/cve/CVE-2026-34986"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39892",
"url": "https://access.redhat.com/security/cve/CVE-2026-39892"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-40192",
"url": "https://access.redhat.com/security/cve/CVE-2026-40192"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-40895",
"url": "https://access.redhat.com/security/cve/CVE-2026-40895"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42033",
"url": "https://access.redhat.com/security/cve/CVE-2026-42033"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42035",
"url": "https://access.redhat.com/security/cve/CVE-2026-42035"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42039",
"url": "https://access.redhat.com/security/cve/CVE-2026-42039"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42041",
"url": "https://access.redhat.com/security/cve/CVE-2026-42041"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42043",
"url": "https://access.redhat.com/security/cve/CVE-2026-42043"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42044",
"url": "https://access.redhat.com/security/cve/CVE-2026-42044"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-4427",
"url": "https://access.redhat.com/security/cve/CVE-2026-4427"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-4598",
"url": "https://access.redhat.com/security/cve/CVE-2026-4598"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-4599",
"url": "https://access.redhat.com/security/cve/CVE-2026-4599"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-4600",
"url": "https://access.redhat.com/security/cve/CVE-2026-4600"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-4601",
"url": "https://access.redhat.com/security/cve/CVE-2026-4601"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-4602",
"url": "https://access.redhat.com/security/cve/CVE-2026-4602"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_19375.json"
}
],
"title": "Red Hat Security Advisory: Red Hat Quay 3.16.4",
"tracking": {
"current_release_date": "2026-07-20T04:40:53+00:00",
"generator": {
"date": "2026-07-20T04:40:53+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.7"
}
},
"id": "RHSA-2026:19375",
"initial_release_date": "2026-05-19T21:01:11+00:00",
"revision_history": [
{
"date": "2026-05-19T21:01:11+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-07-18T05:32:03+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-07-20T04:40:53+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Quay 3.16",
"product": {
"name": "Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:quay:3.16::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat Quay"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64",
"product_id": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-container-security-operator-bundle@sha256%3Aae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee?arch=amd64\u0026repository_url=registry.redhat.io/quay\u0026tag=1778705065"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64",
"product_id": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-container-security-operator-rhel9@sha256%3A2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006?arch=amd64\u0026repository_url=registry.redhat.io/quay\u0026tag=1778704515"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64",
"product_id": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-bridge-operator-bundle@sha256%3A203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f?arch=amd64\u0026repository_url=registry.redhat.io/quay\u0026tag=1778705175"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64",
"product_id": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-bridge-operator-rhel9@sha256%3Af610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b?arch=amd64\u0026repository_url=registry.redhat.io/quay\u0026tag=1778704509"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64",
"product_id": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-builder-qemu-rhcos-rhel8@sha256%3A6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9?arch=amd64\u0026repository_url=registry.redhat.io/quay\u0026tag=1778705015"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64",
"product_id": "registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-builder-rhel9@sha256%3A25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b?arch=amd64\u0026repository_url=registry.redhat.io/quay\u0026tag=1778704550"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64",
"product": {
"name": "registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64",
"product_id": "registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64",
"product_identification_helper": {
"purl": "pkg:oci/clair-rhel9@sha256%3Af423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e?arch=amd64\u0026repository_url=registry.redhat.io/quay\u0026tag=1778704556"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64",
"product_id": "registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-operator-bundle@sha256%3A631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3?arch=amd64\u0026repository_url=registry.redhat.io/quay\u0026tag=1779209336"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64",
"product_id": "registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-operator-rhel9@sha256%3A74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03?arch=amd64\u0026repository_url=registry.redhat.io/quay\u0026tag=1779135957"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64",
"product": {
"name": "registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64",
"product_id": "registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64",
"product_identification_helper": {
"purl": "pkg:oci/quay-rhel9@sha256%3A139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef?arch=amd64\u0026repository_url=registry.redhat.io/quay\u0026tag=1779204086"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le",
"product": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le",
"product_id": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-container-security-operator-rhel9@sha256%3A622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79?arch=ppc64le\u0026repository_url=registry.redhat.io/quay\u0026tag=1778704515"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le",
"product": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le",
"product_id": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-bridge-operator-rhel9@sha256%3A116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f?arch=ppc64le\u0026repository_url=registry.redhat.io/quay\u0026tag=1778704509"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le",
"product": {
"name": "registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le",
"product_id": "registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-builder-rhel9@sha256%3A34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf?arch=ppc64le\u0026repository_url=registry.redhat.io/quay\u0026tag=1778704550"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le",
"product": {
"name": "registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le",
"product_id": "registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/clair-rhel9@sha256%3A478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46?arch=ppc64le\u0026repository_url=registry.redhat.io/quay\u0026tag=1778704556"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le",
"product": {
"name": "registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le",
"product_id": "registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-operator-rhel9@sha256%3Ae77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2?arch=ppc64le\u0026repository_url=registry.redhat.io/quay\u0026tag=1779135957"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le",
"product": {
"name": "registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le",
"product_id": "registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/quay-rhel9@sha256%3Af6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3?arch=ppc64le\u0026repository_url=registry.redhat.io/quay\u0026tag=1779204086"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x",
"product": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x",
"product_id": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-container-security-operator-rhel9@sha256%3A9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1?arch=s390x\u0026repository_url=registry.redhat.io/quay\u0026tag=1778704515"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x",
"product": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x",
"product_id": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-bridge-operator-rhel9@sha256%3A68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66?arch=s390x\u0026repository_url=registry.redhat.io/quay\u0026tag=1778704509"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x",
"product": {
"name": "registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x",
"product_id": "registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-builder-rhel9@sha256%3A8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b?arch=s390x\u0026repository_url=registry.redhat.io/quay\u0026tag=1778704550"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x",
"product": {
"name": "registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x",
"product_id": "registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x",
"product_identification_helper": {
"purl": "pkg:oci/clair-rhel9@sha256%3A4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f?arch=s390x\u0026repository_url=registry.redhat.io/quay\u0026tag=1778704556"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x",
"product": {
"name": "registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x",
"product_id": "registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-operator-rhel9@sha256%3A2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879?arch=s390x\u0026repository_url=registry.redhat.io/quay\u0026tag=1779135957"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x",
"product": {
"name": "registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x",
"product_id": "registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x",
"product_identification_helper": {
"purl": "pkg:oci/quay-rhel9@sha256%3Aad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9?arch=s390x\u0026repository_url=registry.redhat.io/quay\u0026tag=1779204086"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64",
"product": {
"name": "registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64",
"product_id": "registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64",
"product_identification_helper": {
"purl": "pkg:oci/quay-rhel9@sha256%3A52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2?arch=arm64\u0026repository_url=registry.redhat.io/quay\u0026tag=1779204086"
}
}
}
],
"category": "architecture",
"name": "arm64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le"
},
"product_reference": "registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x"
},
"product_reference": "registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x",
"relates_to_product_reference": "Red Hat Quay 3.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64 as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64"
},
"product_reference": "registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64",
"relates_to_product_reference": "Red Hat Quay 3.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64 as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64",
"relates_to_product_reference": "Red Hat Quay 3.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le"
},
"product_reference": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x"
},
"product_reference": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x",
"relates_to_product_reference": "Red Hat Quay 3.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64 as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64",
"relates_to_product_reference": "Red Hat Quay 3.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64 as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64",
"relates_to_product_reference": "Red Hat Quay 3.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64 as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64",
"relates_to_product_reference": "Red Hat Quay 3.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le"
},
"product_reference": "registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x"
},
"product_reference": "registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x",
"relates_to_product_reference": "Red Hat Quay 3.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64 as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64",
"relates_to_product_reference": "Red Hat Quay 3.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64 as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64",
"relates_to_product_reference": "Red Hat Quay 3.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le"
},
"product_reference": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x"
},
"product_reference": "registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x",
"relates_to_product_reference": "Red Hat Quay 3.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64 as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64",
"relates_to_product_reference": "Red Hat Quay 3.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x"
},
"product_reference": "registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x",
"relates_to_product_reference": "Red Hat Quay 3.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64 as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64",
"relates_to_product_reference": "Red Hat Quay 3.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le"
},
"product_reference": "registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64 as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64"
},
"product_reference": "registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64",
"relates_to_product_reference": "Red Hat Quay 3.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64 as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64"
},
"product_reference": "registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64",
"relates_to_product_reference": "Red Hat Quay 3.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x"
},
"product_reference": "registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x",
"relates_to_product_reference": "Red Hat Quay 3.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le as a component of Red Hat Quay 3.16",
"product_id": "Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le"
},
"product_reference": "registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le",
"relates_to_product_reference": "Red Hat Quay 3.16"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-61726",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-01-28T20:01:42.791305+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2434432"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the net/url package in the Go standard library. The package does not enforce a limit on the number of unique query parameters it parses. A Go application using the net/http.Request.ParseForm method will try to process all parameters provided in the request. A specially crafted HTTP request containing a massive number of query parameters will cause the application to consume an excessive amount of memory, eventually causing the application to crash or become unresponsive, resulting in a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang: net/url: Memory exhaustion in query parameter parsing in net/url",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this flaw, an attacker must be able to send a specially crafted HTTP request to an application parsing URL-encoded forms with net/url, specifically a request containing a large number of unique query parameters. The request will cause the application to consume an excessive amount of memory and eventually result in a denial of service, with no impact to confidentiality or integrity. Due to this reason, this vulnerability has been rated with an important severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-61726"
},
{
"category": "external",
"summary": "RHBZ#2434432",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2434432"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-61726",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-61726"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-61726",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-61726"
},
{
"category": "external",
"summary": "https://go.dev/cl/736712",
"url": "https://go.dev/cl/736712"
},
{
"category": "external",
"summary": "https://go.dev/issue/77101",
"url": "https://go.dev/issue/77101"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/Vd2tYVM8eUc",
"url": "https://groups.google.com/g/golang-announce/c/Vd2tYVM8eUc"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4341",
"url": "https://pkg.go.dev/vuln/GO-2026-4341"
}
],
"release_date": "2026-01-28T19:30:31.215000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-19T21:01:11+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:19375"
},
{
"category": "workaround",
"details": "Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected package as soon as possible.",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang: net/url: Memory exhaustion in query parameter parsing in net/url"
},
{
"cve": "CVE-2025-62718",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-04-09T15:01:48.111177+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456913"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. This vulnerability occurs because Axios does not correctly handle hostname normalization when evaluating NO_PROXY rules. An attacker can exploit this by crafting requests to loopback addresses (e.g., localhost. or [::1]) which bypass the NO_PROXY configuration and are routed through the configured proxy. This can lead to Server-Side Request Forgery (SSRF) vulnerabilities, enabling attackers to access sensitive internal or loopback services that should otherwise be protected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Server-Side Request Forgery and proxy bypass due to improper hostname normalization",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw has limited impact due to combination of non-default conditions to exploit: the attacker must be able to control or influence URLs passed to axios in a server-side context, the application must have both `HTTP_PROXY` and `NO_PROXY` configured, and the proxy itself must be positioned to act on the misdirected traffic or have been compromised by the attacker to intercept the rerouted traffic.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2025-62718"
},
{
"category": "external",
"summary": "RHBZ#2456913",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456913"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2025-62718",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-62718"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-62718",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-62718"
},
{
"category": "external",
"summary": "https://datatracker.ietf.org/doc/html/rfc1034#section-3.1",
"url": "https://datatracker.ietf.org/doc/html/rfc1034#section-3.1"
},
{
"category": "external",
"summary": "https://datatracker.ietf.org/doc/html/rfc3986#section-3.2.2",
"url": "https://datatracker.ietf.org/doc/html/rfc3986#section-3.2.2"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/commit/fb3befb6daac6cad26b2e54094d0f2d9e47f24df",
"url": "https://github.com/axios/axios/commit/fb3befb6daac6cad26b2e54094d0f2d9e47f24df"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/pull/10661",
"url": "https://github.com/axios/axios/pull/10661"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/releases/tag/v1.15.0",
"url": "https://github.com/axios/axios/releases/tag/v1.15.0"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-3p68-rc4w-qgx5",
"url": "https://github.com/axios/axios/security/advisories/GHSA-3p68-rc4w-qgx5"
}
],
"release_date": "2026-04-09T14:31:46.067000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-19T21:01:11+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:19375"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Server-Side Request Forgery and proxy bypass due to improper hostname normalization"
},
{
"acknowledgments": [
{
"names": [
"Antony Di Scala",
"Michael Whale"
]
}
],
"cve": "CVE-2026-2377",
"cwe": {
"id": "CWE-918",
"name": "Server-Side Request Forgery (SSRF)"
},
"discovery_date": "2026-02-11T21:02:44.495000+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2439201"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Red Hat Quay and mirror registry for Red Hat OpenShift. The log export feature in these products allows an authenticated user to specify an arbitrary callback URL. A backend process then makes server-side HTTP requests to this provided URL. This vulnerability, known as Server-Side Request Forgery (SSRF), could allow an attacker to send requests from the application\u0027s internal network, potentially leading to the disclosure of sensitive information.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "mirror-registry: quay: quay: Server-Side Request Forgery via log export functionality",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Due to the intended and supported use case of Openshift Mirror Registry, deployment in an offline or network-isolated environment, the impact for this product has been downgraded to `Moderate`.\n\nEven in case of compromise, the blast radius is restricted to mirror-registry. It can not be escalated outside the core product. This vulnerability has been scored based on the lack of change of scope.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-2377"
},
{
"category": "external",
"summary": "RHBZ#2439201",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2439201"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-2377",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-2377"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-2377",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-2377"
}
],
"release_date": "2026-04-08T16:18:10.324000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-19T21:01:11+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:19375"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "mirror-registry: quay: quay: Server-Side Request Forgery via log export functionality"
},
{
"cve": "CVE-2026-4427",
"discovery_date": "2026-03-18T14:02:19.414820+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le"
]
}
],
"notes": [
{
"category": "description",
"text": "No description is available for this CVE.",
"title": "Vulnerability description"
},
{
"category": "other",
"text": "This CVE has been marked as Rejected by the assigning CNA.",
"title": "Statement"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-4427"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-4427",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4427"
}
],
"release_date": "2026-03-18T13:00:31+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-19T21:01:11+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:19375"
}
],
"title": "github.com/jackc/pgproto3: pgproto3: Denial of Service via negative field length in DataRow message"
},
{
"cve": "CVE-2026-4598",
"cwe": {
"id": "CWE-1287",
"name": "Improper Validation of Specified Type of Input"
},
"discovery_date": "2026-03-23T06:01:47.891452+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2450210"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in jsrsasign. A remote attacker could exploit this vulnerability by providing specially crafted zero or negative inputs to the bnModInverse function within the BigInteger.modInverse implementation. This could lead to an infinite loop, causing a permanent denial of service (DoS) by hanging the process.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "jsrsasign: jsrsasign: Denial of Service via infinite loop in bnModInverse function with crafted inputs",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "IMPORTANT: A denial of service flaw was found in jsrsasign. This vulnerability allows a remote attacker to cause a permanent denial of service by providing specially crafted zero or negative inputs to the bnModInverse function, leading to an infinite loop. This affects Red Hat Migration Toolkit for Virtualization and Red Hat Quay, which utilize the vulnerable jsrsasign component.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-4598"
},
{
"category": "external",
"summary": "RHBZ#2450210",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2450210"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-4598",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4598"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-4598",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4598"
},
{
"category": "external",
"summary": "https://gist.github.com/Kr0emer/a1bf5cd4547cc630d2dcc5e761de8264",
"url": "https://gist.github.com/Kr0emer/a1bf5cd4547cc630d2dcc5e761de8264"
},
{
"category": "external",
"summary": "https://github.com/kjur/jsrsasign/commit/ca5b027240287a1e71fe63019fc4400332594323",
"url": "https://github.com/kjur/jsrsasign/commit/ca5b027240287a1e71fe63019fc4400332594323"
},
{
"category": "external",
"summary": "https://github.com/kjur/jsrsasign/pull/648",
"url": "https://github.com/kjur/jsrsasign/pull/648"
},
{
"category": "external",
"summary": "https://security.snyk.io/vuln/SNYK-JS-JSRSASIGN-15370938",
"url": "https://security.snyk.io/vuln/SNYK-JS-JSRSASIGN-15370938"
}
],
"release_date": "2026-03-23T05:00:11.571000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-19T21:01:11+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:19375"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "jsrsasign: jsrsasign: Denial of Service via infinite loop in bnModInverse function with crafted inputs"
},
{
"cve": "CVE-2026-4599",
"cwe": {
"id": "CWE-338",
"name": "Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)"
},
"discovery_date": "2026-03-23T06:01:34.008562+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2450207"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in jsrsasign. An attacker can exploit an incomplete comparison vulnerability in the getRandomBigIntegerZeroToMax and getRandomBigIntegerMinToMax functions. By manipulating incorrect comparison checks, an attacker can bias the Digital Signature Algorithm (DSA) nonces during signature generation. This allows the attacker to recover the private key, leading to a critical security compromise.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "jsrsasign: jsrsasign: Private key recovery via incomplete comparison checks biasing DSA nonces",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-4599"
},
{
"category": "external",
"summary": "RHBZ#2450207",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2450207"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-4599",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4599"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-4599",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4599"
},
{
"category": "external",
"summary": "https://gist.github.com/Kr0emer/081681818b51605c91945126d74b4f20",
"url": "https://gist.github.com/Kr0emer/081681818b51605c91945126d74b4f20"
},
{
"category": "external",
"summary": "https://github.com/kjur/jsrsasign/commit/ee4b013478366cb16cea9a4bdfb218b6077f83b1",
"url": "https://github.com/kjur/jsrsasign/commit/ee4b013478366cb16cea9a4bdfb218b6077f83b1"
},
{
"category": "external",
"summary": "https://github.com/kjur/jsrsasign/pull/647",
"url": "https://github.com/kjur/jsrsasign/pull/647"
},
{
"category": "external",
"summary": "https://security.snyk.io/vuln/SNYK-JS-JSRSASIGN-15370939",
"url": "https://security.snyk.io/vuln/SNYK-JS-JSRSASIGN-15370939"
}
],
"release_date": "2026-03-23T05:00:12.522000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-19T21:01:11+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:19375"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "jsrsasign: jsrsasign: Private key recovery via incomplete comparison checks biasing DSA nonces"
},
{
"cve": "CVE-2026-4600",
"cwe": {
"id": "CWE-347",
"name": "Improper Verification of Cryptographic Signature"
},
"discovery_date": "2026-03-23T06:01:39.334925+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2450208"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in jsrsasign. An attacker can exploit improper verification of cryptographic signatures by supplying malicious domain parameters during the Digital Signature Algorithm (DSA) validation process. This allows the attacker to forge DSA signatures or X.509 certificates, which would then be accepted as legitimate, potentially leading to unauthorized access or data manipulation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "jsrsasign: jsrsasign: Cryptographic signature forgery via malicious DSA domain parameters",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "IMPORTANT. The flaw in jsrsasign allows an attacker to forge Digital Signature Algorithm (DSA) signatures or X.509 certificates by providing malicious domain parameters during validation. This could lead to unauthorized access or data manipulation in affected Red Hat products such as Migration Toolkit for Virtualization and Red Hat Quay, where jsrsasign is utilized for cryptographic signature verification.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-4600"
},
{
"category": "external",
"summary": "RHBZ#2450208",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2450208"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-4600",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4600"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-4600",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4600"
},
{
"category": "external",
"summary": "https://gist.github.com/Kr0emer/bf15ddc097176e951659a24a8e9002a7",
"url": "https://gist.github.com/Kr0emer/bf15ddc097176e951659a24a8e9002a7"
},
{
"category": "external",
"summary": "https://github.com/kjur/jsrsasign/commit/37b4c06b145c7bfd6bc2a6df5d0a12c56b15ef60",
"url": "https://github.com/kjur/jsrsasign/commit/37b4c06b145c7bfd6bc2a6df5d0a12c56b15ef60"
},
{
"category": "external",
"summary": "https://github.com/kjur/jsrsasign/pull/646",
"url": "https://github.com/kjur/jsrsasign/pull/646"
},
{
"category": "external",
"summary": "https://security.snyk.io/vuln/SNYK-JS-JSRSASIGN-15370940",
"url": "https://security.snyk.io/vuln/SNYK-JS-JSRSASIGN-15370940"
}
],
"release_date": "2026-03-23T05:00:08.475000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-19T21:01:11+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:19375"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "jsrsasign: jsrsasign: Cryptographic signature forgery via malicious DSA domain parameters"
},
{
"cve": "CVE-2026-4601",
"cwe": {
"id": "CWE-325",
"name": "Missing Cryptographic Step"
},
"discovery_date": "2026-03-23T06:01:44.014846+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2450209"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in jsrsasign. An attacker can exploit a missing cryptographic step in the Digital Signature Algorithm (DSA) signing process, specifically within the KJUR.crypto.DSA.signWithMessageHash function. By manipulating the signature generation to force specific values, the library emits an invalid signature without retrying. This vulnerability allows an attacker to recover the private key used for signing.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "jsrsasign: jsrsasign: Private Key Recovery via Missing Cryptographic Step in DSA Signing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "IMPORTANT: A flaw in the jsrsasign library allows for private key recovery due to a missing cryptographic step in the Digital Signature Algorithm (DSA) signing process. An attacker can manipulate signature generation within the KJUR.crypto.DSA.signWithMessageHash function to force specific values, enabling the recovery of the private key. This impacts Red Hat products utilizing jsrsasign, such as Migration Toolkit for Virtualization and Red Hat Quay.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-4601"
},
{
"category": "external",
"summary": "RHBZ#2450209",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2450209"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-4601",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4601"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-4601",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4601"
},
{
"category": "external",
"summary": "https://gist.github.com/Kr0emer/93789fe6efe5519db9692d4ad1dad586",
"url": "https://gist.github.com/Kr0emer/93789fe6efe5519db9692d4ad1dad586"
},
{
"category": "external",
"summary": "https://github.com/kjur/jsrsasign/commit/0710e392ec35de697ce11e4219c988ba2b5fe0eb",
"url": "https://github.com/kjur/jsrsasign/commit/0710e392ec35de697ce11e4219c988ba2b5fe0eb"
},
{
"category": "external",
"summary": "https://github.com/kjur/jsrsasign/pull/645",
"url": "https://github.com/kjur/jsrsasign/pull/645"
},
{
"category": "external",
"summary": "https://security.snyk.io/vuln/SNYK-JS-JSRSASIGN-15370941",
"url": "https://security.snyk.io/vuln/SNYK-JS-JSRSASIGN-15370941"
}
],
"release_date": "2026-03-23T05:00:13.312000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-19T21:01:11+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:19375"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "jsrsasign: jsrsasign: Private Key Recovery via Missing Cryptographic Step in DSA Signing"
},
{
"cve": "CVE-2026-4602",
"cwe": {
"id": "CWE-681",
"name": "Incorrect Conversion between Numeric Types"
},
"discovery_date": "2026-03-23T06:01:28.729668+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2450206"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in jsrsasign. A remote attacker can exploit an incorrect conversion between numeric types by providing a negative exponent to the `modPow` function. This vulnerability can force the computation of incorrect modular inverses, which ultimately allows an attacker to bypass signature verification.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "jsrsasign: jsrsasign: Signature verification bypass via negative exponent handling",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an IMPORTANT flaw. The `jsrsasign` library, as used in Red Hat products such as Migration Toolkit for Virtualization and Red Hat Quay, is vulnerable to a signature verification bypass. A remote attacker could provide a specially crafted negative exponent to the `modPow` function, leading to incorrect modular inverse computations and allowing them to bypass signature verification.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-4602"
},
{
"category": "external",
"summary": "RHBZ#2450206",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2450206"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-4602",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4602"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-4602",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4602"
},
{
"category": "external",
"summary": "https://gist.github.com/Kr0emer/7ecd2be7d17419e4677315ef3758faf5",
"url": "https://gist.github.com/Kr0emer/7ecd2be7d17419e4677315ef3758faf5"
},
{
"category": "external",
"summary": "https://github.com/kjur/jsrsasign/commit/5ea1c32bb2aa894b4bd29849839afe4f98728195",
"url": "https://github.com/kjur/jsrsasign/commit/5ea1c32bb2aa894b4bd29849839afe4f98728195"
},
{
"category": "external",
"summary": "https://github.com/kjur/jsrsasign/pull/650",
"url": "https://github.com/kjur/jsrsasign/pull/650"
},
{
"category": "external",
"summary": "https://security.snyk.io/vuln/SNYK-JS-JSRSASIGN-15371175",
"url": "https://security.snyk.io/vuln/SNYK-JS-JSRSASIGN-15371175"
}
],
"release_date": "2026-03-23T05:00:10.567000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-19T21:01:11+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:19375"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "jsrsasign: jsrsasign: Signature verification bypass via negative exponent handling"
},
{
"cve": "CVE-2026-25679",
"cwe": {
"id": "CWE-1286",
"name": "Improper Validation of Syntactic Correctness of Input"
},
"discovery_date": "2026-03-06T22:02:11.567841+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445356"
}
],
"notes": [
{
"category": "description",
"text": "The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/url: Incorrect parsing of IPv6 host literals in net/url",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-25679"
},
{
"category": "external",
"summary": "RHBZ#2445356",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445356"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-25679",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25679"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679"
},
{
"category": "external",
"summary": "https://go.dev/cl/752180",
"url": "https://go.dev/cl/752180"
},
{
"category": "external",
"summary": "https://go.dev/issue/77578",
"url": "https://go.dev/issue/77578"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk",
"url": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4601",
"url": "https://pkg.go.dev/vuln/GO-2026-4601"
}
],
"release_date": "2026-03-06T21:28:14.211000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-19T21:01:11+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:19375"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/url: Incorrect parsing of IPv6 host literals in net/url"
},
{
"cve": "CVE-2026-27137",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-03-06T22:01:38.859733+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445345"
}
],
"notes": [
{
"category": "description",
"text": "A certificate validation flaw has been discovered in the golang crypto/x509 module. When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applied, and only the last constraint will be considered.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: Incorrect enforcement of email constraints in crypto/x509",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27137"
},
{
"category": "external",
"summary": "RHBZ#2445345",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445345"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27137",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27137"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27137",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27137"
},
{
"category": "external",
"summary": "https://go.dev/cl/752182",
"url": "https://go.dev/cl/752182"
},
{
"category": "external",
"summary": "https://go.dev/issue/77952",
"url": "https://go.dev/issue/77952"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk",
"url": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4599",
"url": "https://pkg.go.dev/vuln/GO-2026-4599"
}
],
"release_date": "2026-03-06T21:28:13.748000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-19T21:01:11+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:19375"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: Incorrect enforcement of email constraints in crypto/x509"
},
{
"cve": "CVE-2026-27459",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"discovery_date": "2026-03-18T00:01:41.404915+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2448503"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in pyOpenSSL. The set_cookie_generate_callback callback function can be used to generate DTLS cookies. When the callback returns a cookie string or byte sequence longer than 256 bytes, a buffer overflow can be triggered due to a missing bounds checking before copying the data to a fixed-size buffer provided by the underlying OpenSSL library.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "pyOpenSSL: DTLS cookie callback buffer overflow",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw is only exploitable when an application using the pyOpenSSL library provides a custom callback to the set_cookie_generate_callback function. For the buffer overflow to occur, the callback function must return a cookie string or byte sequence longer than 256 bytes, limiting the exposure of this issue. Due to these reasons, this vulnerability has been rated with an important severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27459"
},
{
"category": "external",
"summary": "RHBZ#2448503",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2448503"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27459",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27459"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27459",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27459"
},
{
"category": "external",
"summary": "https://github.com/pyca/pyopenssl/blob/358cbf29c4e364c59930e53a270116249581eaa3/CHANGELOG.rst",
"url": "https://github.com/pyca/pyopenssl/blob/358cbf29c4e364c59930e53a270116249581eaa3/CHANGELOG.rst"
},
{
"category": "external",
"summary": "https://github.com/pyca/pyopenssl/commit/57f09bb4bb051d3bc2a1abd36e9525313d5cd408",
"url": "https://github.com/pyca/pyopenssl/commit/57f09bb4bb051d3bc2a1abd36e9525313d5cd408"
},
{
"category": "external",
"summary": "https://github.com/pyca/pyopenssl/security/advisories/GHSA-5pwr-322w-8jr4",
"url": "https://github.com/pyca/pyopenssl/security/advisories/GHSA-5pwr-322w-8jr4"
}
],
"release_date": "2026-03-17T23:34:28.483000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-19T21:01:11+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:19375"
},
{
"category": "workaround",
"details": "To mitigate this flaw, ensure the callback provided to the set_cookie_generate_callback function strictly limits the returned cookie string or byte sequence to under 256 bytes.",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "pyOpenSSL: DTLS cookie callback buffer overflow"
},
{
"cve": "CVE-2026-27962",
"cwe": {
"id": "CWE-347",
"name": "Improper Verification of Cryptographic Signature"
},
"discovery_date": "2026-03-16T18:02:07.041902+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2448164"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Authlib, a Python library used for creating secure authentication and authorization systems. This vulnerability, known as JWK (JSON Web Key) Header Injection, affects how Authlib verifies digital signatures in JWS (JSON Web Signature) tokens. An attacker can exploit this by creating a specially crafted token that includes their own cryptographic key in the header. When the system attempts to verify this token without a predefined key, it mistakenly uses the attacker\u0027s key, allowing them to bypass authentication and gain unauthorized access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "authlib: Authlib: Authentication bypass due to JWK Header Injection vulnerability",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This critical vulnerability in Authlib\u0027s JWS implementation allows unauthenticated attackers to forge JWTs by embedding their own cryptographic key in the token header. Impact is high to confidentiality and integrity as attackers can bypass authentication.\n\nThe impact for Red Hat Quay is rated as low because it imports authlib solely as a JWK parsing utility and performs all JWT signature verification through PyJWT, so the vulnerable jws.deserialize_compact() code path is never called.\n\nRed Hat OpenShift AI is not affected, since authlib is only present as a transitive dependency in the dev dependency group and is not included in production image builds, so the vulnerable code is not present in the shipped product.\n\nRed Hat Satellite is not affected, as authlib is only present as a dependency of fastmcp. In Satellite, fastmcp only invokes authlib using jwt.decode() which isn\u0027t able to reach the vulnerability condition even with key=none.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27962"
},
{
"category": "external",
"summary": "RHBZ#2448164",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2448164"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27962",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27962"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27962",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27962"
},
{
"category": "external",
"summary": "https://github.com/authlib/authlib/commit/a5d4b2d4c9e46bfa11c82f85fdc2bcc0b50ae681",
"url": "https://github.com/authlib/authlib/commit/a5d4b2d4c9e46bfa11c82f85fdc2bcc0b50ae681"
},
{
"category": "external",
"summary": "https://github.com/authlib/authlib/releases/tag/v1.6.9",
"url": "https://github.com/authlib/authlib/releases/tag/v1.6.9"
},
{
"category": "external",
"summary": "https://github.com/authlib/authlib/security/advisories/GHSA-wvwj-cvrp-7pv5",
"url": "https://github.com/authlib/authlib/security/advisories/GHSA-wvwj-cvrp-7pv5"
}
],
"release_date": "2026-03-16T17:34:38.946000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-19T21:01:11+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:19375"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "authlib: Authlib: Authentication bypass due to JWK Header Injection vulnerability"
},
{
"cve": "CVE-2026-28802",
"cwe": {
"id": "CWE-347",
"name": "Improper Verification of Cryptographic Signature"
},
"discovery_date": "2026-03-06T07:01:49.366979+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445120"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Authlib, a Python library for building OAuth and OpenID Connect servers. A remote attacker can exploit this vulnerability by crafting a malicious JSON Web Token (JWT) with a \"none\" algorithm and an empty signature. This bypasses the expected signature verification, potentially allowing the attacker to forge tokens and gain unauthorized access or perform unauthorized actions within applications using Authlib.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "authlib: Authlib: Signature verification bypass via malicious JWT allows unauthorized access",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-28802"
},
{
"category": "external",
"summary": "RHBZ#2445120",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445120"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-28802",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-28802"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-28802",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-28802"
},
{
"category": "external",
"summary": "https://github.com/authlib/authlib/commit/a61c2acb807496e67f32051b5f1b1d5ccf8f0a75",
"url": "https://github.com/authlib/authlib/commit/a61c2acb807496e67f32051b5f1b1d5ccf8f0a75"
},
{
"category": "external",
"summary": "https://github.com/authlib/authlib/commit/b87c32ed07b8ae7f805873e1c9cafd1016761df7",
"url": "https://github.com/authlib/authlib/commit/b87c32ed07b8ae7f805873e1c9cafd1016761df7"
},
{
"category": "external",
"summary": "https://github.com/authlib/authlib/security/advisories/GHSA-7wc2-qxgw-g8gg",
"url": "https://github.com/authlib/authlib/security/advisories/GHSA-7wc2-qxgw-g8gg"
}
],
"release_date": "2026-03-06T06:44:26.402000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-19T21:01:11+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:19375"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "authlib: Authlib: Signature verification bypass via malicious JWT allows unauthorized access"
},
{
"cve": "CVE-2026-29063",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-03-06T19:00:57.982727+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445291"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Immutable.js, a library for persistent immutable data structures. This vulnerability, known as Prototype Pollution, allows an attacker with low privileges to inject unwanted properties into core JavaScript object prototypes without user interaction. By manipulating specific APIs such as mergeDeep(), mergeDeepWith(), merge(), Map.toJS(), and Map.toObject(), a remote attacker could potentially execute arbitrary code or cause a denial of service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "immutable-js: Immutable.js: Arbitrary code execution via Prototype Pollution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Exploitation of this vulnerability requires that an attacker is able to provide arbitrary data to clients of this library in a way that calls the affected functions with data the attacker controls. In most deployments, the ability to provide data in this fashion requires that an attacker has some degree of privileges to access the affected applications.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-29063"
},
{
"category": "external",
"summary": "RHBZ#2445291",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445291"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-29063",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-29063"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-29063",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-29063"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/releases/tag/v3.8.3",
"url": "https://github.com/immutable-js/immutable-js/releases/tag/v3.8.3"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/releases/tag/v4.3.8",
"url": "https://github.com/immutable-js/immutable-js/releases/tag/v4.3.8"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/releases/tag/v5.1.5",
"url": "https://github.com/immutable-js/immutable-js/releases/tag/v5.1.5"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/security/advisories/GHSA-wf6x-7x77-mvgw",
"url": "https://github.com/immutable-js/immutable-js/security/advisories/GHSA-wf6x-7x77-mvgw"
}
],
"release_date": "2026-03-06T18:25:22.438000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-19T21:01:11+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:19375"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "immutable-js: Immutable.js: Arbitrary code execution via Prototype Pollution"
},
{
"cve": "CVE-2026-29074",
"cwe": {
"id": "CWE-776",
"name": "Improper Restriction of Recursive Entity References in DTDs (\u0027XML Entity Expansion\u0027)"
},
"discovery_date": "2026-03-06T00:00:00+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445132"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in SVGO, an SVG (Scalable Vector Graphics) Optimizer. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by submitting a specially crafted XML file. The application\u0027s failure to properly guard against XML entity expansion or recursion can lead to the Node.js process consuming excessive memory and crashing.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "svgo: SVGO: Denial of Service via XML entity expansion",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-29074"
},
{
"category": "external",
"summary": "RHBZ#2445132",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445132"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-29074",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-29074"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-29074",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-29074"
},
{
"category": "external",
"summary": "https://github.com/svg/svgo/security/advisories/GHSA-xpqw-6gx7-v673",
"url": "https://github.com/svg/svgo/security/advisories/GHSA-xpqw-6gx7-v673"
}
],
"release_date": "2026-03-06T07:23:05.716000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-19T21:01:11+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:19375"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "svgo: SVGO: Denial of Service via XML entity expansion"
},
{
"cve": "CVE-2026-30922",
"cwe": {
"id": "CWE-835",
"name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
},
"discovery_date": "2026-03-18T04:02:45.401296+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2448553"
}
],
"notes": [
{
"category": "description",
"text": "An unbounded recursion flaw has been discovered in the pypi pyasn1 library. This uncontrolled recursion occurs when decoding ASN.1 data with deeply nested structures. An attacker can supply a crafted payload containing nested SEQUENCE (0x30) or SET (0x31) tags with Indefinite Length (0x80) markers. This forces the decoder to recursively call itself until the Python interpreter crashes with a RecursionError or consumes all available memory (OOM), crashing the host application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "pyasn1: pyasn1 Vulnerable to Denial of Service via Unbounded Recursion",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-30922"
},
{
"category": "external",
"summary": "RHBZ#2448553",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2448553"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-30922",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-30922"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-30922",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-30922"
},
{
"category": "external",
"summary": "https://github.com/pyasn1/pyasn1/commit/25ad481c19fdb006e20485ef3fc2e5b3eff30ef0",
"url": "https://github.com/pyasn1/pyasn1/commit/25ad481c19fdb006e20485ef3fc2e5b3eff30ef0"
},
{
"category": "external",
"summary": "https://github.com/pyasn1/pyasn1/security/advisories/GHSA-jr27-m4p2-rc6r",
"url": "https://github.com/pyasn1/pyasn1/security/advisories/GHSA-jr27-m4p2-rc6r"
}
],
"release_date": "2026-03-18T02:29:45.857000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-19T21:01:11+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:19375"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "pyasn1: pyasn1 Vulnerable to Denial of Service via Unbounded Recursion"
},
{
"cve": "CVE-2026-32280",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-04-08T02:01:19.572351+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456339"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Go standard library packages `crypto/x509` and `crypto/tls`. During the process of building a certificate chain, an attacker can provide a large number of intermediate certificates. This excessive input is not properly limited, leading to an uncontrolled amount of work being performed. This can result in a denial of service (DoS) condition, making the affected system or application unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go standard library\u0027s certificate chain building process. Systems utilizing Go applications that process untrusted TLS certificates or X.509 certificate chains are susceptible to resource exhaustion when presented with an excessive number of intermediate certificates, potentially leading to service unavailability. This flaw impacts applications directly using `crypto/x509` or `crypto/tls`.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32280"
},
{
"category": "external",
"summary": "RHBZ#2456339",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456339"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32280",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32280"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32280",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32280"
},
{
"category": "external",
"summary": "https://go.dev/cl/758320",
"url": "https://go.dev/cl/758320"
},
{
"category": "external",
"summary": "https://go.dev/issue/78282",
"url": "https://go.dev/issue/78282"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4947",
"url": "https://pkg.go.dev/vuln/GO-2026-4947"
}
],
"release_date": "2026-04-08T01:06:58.595000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-19T21:01:11+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:19375"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: crypto/tls: golang: Go: Denial of Service vulnerability in certificate chain building"
},
{
"cve": "CVE-2026-32282",
"cwe": {
"id": "CWE-367",
"name": "Time-of-check Time-of-use (TOCTOU) Race Condition"
},
"discovery_date": "2026-04-08T02:01:12.683211+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456336"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the internal/syscall/unix package in the Go standard library. If the target of the `Root.Chmod` function is replaced with a symbolic link during execution, specifically after `Root.Chmod` checks the target but before acting, the `chmod` operation will be performed on the file the symbolic link points to. This issue can bypass directory restrictions and lead to unauthorized permission changes on the filesystem.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "To exploit this issue, an attacker needs access to the system and the required permissions to create a symbolic link. Additionally, the attacker must swap the target file with a symbolic link in the exact window after the `Root.Chmod` function checks its target but before acting. Due to these conditions, this flaw has been rated with a moderate severity.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32282"
},
{
"category": "external",
"summary": "RHBZ#2456336",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456336"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32282",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32282"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32282",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32282"
},
{
"category": "external",
"summary": "https://go.dev/cl/763761",
"url": "https://go.dev/cl/763761"
},
{
"category": "external",
"summary": "https://go.dev/issue/78293",
"url": "https://go.dev/issue/78293"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4864",
"url": "https://pkg.go.dev/vuln/GO-2026-4864"
}
],
"release_date": "2026-04-08T01:06:55.953000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-19T21:01:11+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:19375"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang: internal/syscall/unix: Root.Chmod can follow symlinks out of the root"
},
{
"cve": "CVE-2026-32286",
"cwe": {
"id": "CWE-1285",
"name": "Improper Validation of Specified Index, Position, or Offset in Input"
},
"discovery_date": "2026-03-26T20:01:59.226117+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2451847"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the DataRow.Decode function within the github.com/jackc/pgproto3/v2 component. A malicious or compromised PostgreSQL server can exploit this by sending a DataRow message containing a negative field length. This improper validation of field lengths leads to a \"slice bounds out of range panic\", resulting in a Denial of Service (DoS) for the affected application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/jackc/pgproto3/v2: github.com/jackc/pgproto3/v2: Denial of Service via malicious PostgreSQL server",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "The PostgreSQL server multicluster-globalhub-manager connects to is either provisioned by the operator itself or specified by the admin managing the deployment. To successfully exploit the vulnerability in this context the attacker would need to compromise the operator-deployed PostgreSQL server to force a crafted malicious DataRow message or they would need to have the privileges required to modify the operator-provisioned deployment or configure globalhub-manager to use a compromised/malicious \u201cBYO Postgres\u201d server.\n\nThe first scenario (compromising a legitimate PostgreSQL server) would change Attack Complexity from Low to High resulting in an adjusted CVSS v3.1 score of 5.9 (Moderate)\nThe other scenarios (manipulating the operator provisioned-deployment or configuring the globalhub-manager to use a malicious server) would maintain AC:L but would require privileged access. This would change Privileges Required from None to High resulting in an adjusted CVSS v3.1 score of 4.9 (Moderate)\n\nBased on the above the Impact Rating for multicluster-globalhub-manager-rhel9 is Moderate.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32286"
},
{
"category": "external",
"summary": "RHBZ#2451847",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2451847"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32286",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32286"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32286",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32286"
},
{
"category": "external",
"summary": "https://github.com/golang/vulndb/issues/4518",
"url": "https://github.com/golang/vulndb/issues/4518"
},
{
"category": "external",
"summary": "https://github.com/jackc/pgx/issues/2507",
"url": "https://github.com/jackc/pgx/issues/2507"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4518",
"url": "https://pkg.go.dev/vuln/GO-2026-4518"
}
],
"release_date": "2026-03-26T19:40:51.974000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-19T21:01:11+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:19375"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/jackc/pgproto3/v2: github.com/jackc/pgproto3/v2: Denial of Service via malicious PostgreSQL server"
},
{
"acknowledgments": [
{
"names": [
"Antony Di Scala",
"Michael Whale"
]
}
],
"cve": "CVE-2026-32589",
"cwe": {
"id": "CWE-639",
"name": "Authorization Bypass Through User-Controlled Key"
},
"discovery_date": "2026-03-12T14:43:07.878000+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2446963"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Red Hat Quay\u0027s container image upload process. An authenticated user with push access to any repository on the registry can interfere with image uploads in progress by other users, including those in repositories they do not have access to. This could allow the attacker to read, modify, or cancel another user\u0027s in-progress image upload.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "mirror-registry: quay: insecure direct object reference in BlobUpload",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Exploitation requires valid login credentials to the Quay registry. Unauthenticated users cannot exploit this flaw.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32589"
},
{
"category": "external",
"summary": "RHBZ#2446963",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2446963"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32589",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32589"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32589",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32589"
}
],
"release_date": "2026-04-08T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-19T21:01:11+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:19375"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "mirror-registry: quay: insecure direct object reference in BlobUpload"
},
{
"acknowledgments": [
{
"names": [
"Antony Di Scala",
"Michael Whale"
]
}
],
"cve": "CVE-2026-32590",
"cwe": {
"id": "CWE-502",
"name": "Deserialization of Untrusted Data"
},
"discovery_date": "2026-03-12T14:43:11.443000+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2446964"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Red Hat Quay\u0027s handling of resumable container image layer uploads. The upload process stores intermediate data in the database using a format that, if tampered with, could allow an attacker to execute arbitrary code on the Quay server.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "mirror-registry: remote code execution using pickle deserialization",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Exploitation requires valid login credentials. The attacker must be authenticated to the registry, either through the web interface or through a container tool such as Podman.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32590"
},
{
"category": "external",
"summary": "RHBZ#2446964",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2446964"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32590",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32590"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32590",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32590"
}
],
"release_date": "2026-04-08T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-19T21:01:11+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:19375"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "mirror-registry: remote code execution using pickle deserialization"
},
{
"cve": "CVE-2026-32597",
"cwe": {
"id": "CWE-347",
"name": "Improper Verification of Cryptographic Signature"
},
"discovery_date": "2026-03-12T22:01:29.967713+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2447194"
}
],
"notes": [
{
"category": "description",
"text": "A missing verification step has been discovered in PyJWT. PyJWT does not validate the crit (Critical) Header Parameter defined in RFC 7515 \u00a74.1.11. When a JWS token contains a crit array listing extensions that PyJWT does not understand, the library accepts the token instead of rejecting it. This violates the MUST requirement in the RFC.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "pyjwt: PyJWT accepts unknown `crit` header extensions (RFC 7515 \u00a74.1.11 MUST violation)",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32597"
},
{
"category": "external",
"summary": "RHBZ#2447194",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2447194"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32597",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32597"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32597",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32597"
},
{
"category": "external",
"summary": "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-752w-5fwx-jx9f",
"url": "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-752w-5fwx-jx9f"
}
],
"release_date": "2026-03-12T21:41:50.427000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-19T21:01:11+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:19375"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "pyjwt: PyJWT accepts unknown `crit` header extensions (RFC 7515 \u00a74.1.11 MUST violation)"
},
{
"cve": "CVE-2026-33186",
"cwe": {
"id": "CWE-551",
"name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization"
},
"discovery_date": "2026-03-20T23:02:27.802640+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2449833"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in gRPC-Go, the Go language implementation of gRPC. This vulnerability, an authorization bypass, is caused by improper input validation of the HTTP/2 `:path` pseudo-header. A remote attacker can exploit this by sending raw HTTP/2 frames with a malformed `:path` that omits the mandatory leading slash. This allows the attacker to bypass defined security policies, potentially leading to unauthorized access to services or information disclosure.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33186"
},
{
"category": "external",
"summary": "RHBZ#2449833",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449833"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33186",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33186"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33186"
},
{
"category": "external",
"summary": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3",
"url": "https://github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3"
}
],
"release_date": "2026-03-20T22:23:32.147000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-19T21:01:11+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:19375"
},
{
"category": "workaround",
"details": "To mitigate this issue, implement infrastructure-level normalization to ensure all incoming HTTP/2 `:path` headers are properly formatted with a leading slash before reaching the gRPC-Go server. This can be achieved by configuring a reverse proxy or API gateway to validate and normalize the `:path` header. Ensure that any such intermediary is properly configured and restarted to apply the changes, which may temporarily impact service availability.",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation"
},
{
"cve": "CVE-2026-33894",
"cwe": {
"id": "CWE-347",
"name": "Improper Verification of Cryptographic Signature"
},
"discovery_date": "2026-03-27T21:02:52.462999+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2452464"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Forge (also called `node-forge`), a JavaScript implementation of Transport Layer Security. A remote attacker could exploit weaknesses in the RSASSA PKCS#1 v1.5 signature verification process. By crafting malicious signatures that include extra data within the ASN structure and do not meet padding requirements, an attacker can bypass signature validation. This allows for the creation of forged signatures that appear legitimate, potentially compromising the integrity and authenticity of communications.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "node-forge: Forge: Signature Forgery via Weak RSASSA PKCS#1 v1.5 Verification",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33894"
},
{
"category": "external",
"summary": "RHBZ#2452464",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2452464"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33894",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33894"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33894",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33894"
},
{
"category": "external",
"summary": "https://datatracker.ietf.org/doc/html/rfc2313#section-8",
"url": "https://datatracker.ietf.org/doc/html/rfc2313#section-8"
},
{
"category": "external",
"summary": "https://github.com/digitalbazaar/forge/security/advisories/GHSA-ppp5-5v6c-4jwp",
"url": "https://github.com/digitalbazaar/forge/security/advisories/GHSA-ppp5-5v6c-4jwp"
},
{
"category": "external",
"summary": "https://mailarchive.ietf.org/arch/msg/openpgp/5rnE9ZRN1AokBVj3VqblGlP63QE",
"url": "https://mailarchive.ietf.org/arch/msg/openpgp/5rnE9ZRN1AokBVj3VqblGlP63QE"
},
{
"category": "external",
"summary": "https://www.rfc-editor.org/rfc/rfc8017.html",
"url": "https://www.rfc-editor.org/rfc/rfc8017.html"
}
],
"release_date": "2026-03-27T20:45:49.583000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-19T21:01:11+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:19375"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "node-forge: Forge: Signature Forgery via Weak RSASSA PKCS#1 v1.5 Verification"
},
{
"cve": "CVE-2026-34986",
"cwe": {
"id": "CWE-131",
"name": "Incorrect Calculation of Buffer Size"
},
"discovery_date": "2026-04-06T17:01:34.639203+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2455470"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Go JOSE, a library for handling JSON Web Encryption (JWE) objects. A remote attacker could exploit this vulnerability by providing a specially crafted JWE object. When decrypting such an object, if a key wrapping algorithm is specified but the encrypted key field is empty, the application can crash. This leads to a denial of service (DoS), making the affected service unavailable to legitimate users.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-34986"
},
{
"category": "external",
"summary": "RHBZ#2455470",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2455470"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-34986",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-34986"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-34986",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34986"
},
{
"category": "external",
"summary": "https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8",
"url": "https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants",
"url": "https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants"
}
],
"release_date": "2026-04-06T16:22:45.353000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-19T21:01:11+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:19375"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/go-jose/go-jose/v3: github.com/go-jose/go-jose/v4: Go JOSE: Denial of Service via crafted JSON Web Encryption (JWE) object"
},
{
"cve": "CVE-2026-39892",
"cwe": {
"id": "CWE-131",
"name": "Incorrect Calculation of Buffer Size"
},
"discovery_date": "2026-04-08T22:00:59.416053+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456735"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the cryptography library. This vulnerability occurs when a non-contiguous buffer is passed to certain application programming interfaces (APIs) that accept Python buffers, such as Hash.update(). A remote attacker could exploit this to cause a buffer overflow, potentially leading to a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "cryptography: Cryptography: Buffer overflow via non-contiguous buffer in API",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "In default configurations Red Hat products isolate service processes from total system access. Should an attacker be able to exploit this vulnerability their impact will be limited to that service account and they will not have access to the broader system.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39892"
},
{
"category": "external",
"summary": "RHBZ#2456735",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456735"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39892",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39892"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39892",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39892"
},
{
"category": "external",
"summary": "http://www.openwall.com/lists/oss-security/2026/04/08/12",
"url": "http://www.openwall.com/lists/oss-security/2026/04/08/12"
},
{
"category": "external",
"summary": "https://github.com/pyca/cryptography/commit/622d672e429a7cff836a23c5903683dbec1901f5",
"url": "https://github.com/pyca/cryptography/commit/622d672e429a7cff836a23c5903683dbec1901f5"
},
{
"category": "external",
"summary": "https://github.com/pyca/cryptography/security/advisories/GHSA-p423-j2cm-9vmq",
"url": "https://github.com/pyca/cryptography/security/advisories/GHSA-p423-j2cm-9vmq"
}
],
"release_date": "2026-04-08T20:49:41.967000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-19T21:01:11+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:19375"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.3,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "cryptography: Cryptography: Buffer overflow via non-contiguous buffer in API"
},
{
"cve": "CVE-2026-40192",
"cwe": {
"id": "CWE-409",
"name": "Improper Handling of Highly Compressed Data (Data Amplification)"
},
"discovery_date": "2026-04-16T00:00:49.590876+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2458856"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Pillow, a Python imaging library. This vulnerability allows a remote attacker to trigger a denial of service (DoS) by providing a specially crafted FITS image file. The library\u0027s failure to limit the amount of GZIP-compressed data during decoding can lead to unbounded memory consumption, causing the system to crash or experience severe performance issues.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Pillow: Pillow: Denial of Service via decompression bomb in FITS image processing",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-40192"
},
{
"category": "external",
"summary": "RHBZ#2458856",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2458856"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-40192",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-40192"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-40192",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-40192"
},
{
"category": "external",
"summary": "https://github.com/python-pillow/Pillow/commit/3cb854e8b2bab43f40e342e665f9340d861aa628",
"url": "https://github.com/python-pillow/Pillow/commit/3cb854e8b2bab43f40e342e665f9340d861aa628"
},
{
"category": "external",
"summary": "https://github.com/python-pillow/Pillow/pull/9521",
"url": "https://github.com/python-pillow/Pillow/pull/9521"
},
{
"category": "external",
"summary": "https://github.com/python-pillow/Pillow/security/advisories/GHSA-whj4-6x5x-4v2j",
"url": "https://github.com/python-pillow/Pillow/security/advisories/GHSA-whj4-6x5x-4v2j"
},
{
"category": "external",
"summary": "https://pillow.readthedocs.io/en/stable/releasenotes/12.2.0.html#prevent-fits-decompression-bomb",
"url": "https://pillow.readthedocs.io/en/stable/releasenotes/12.2.0.html#prevent-fits-decompression-bomb"
}
],
"release_date": "2026-04-15T22:53:56.147000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-19T21:01:11+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:19375"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Pillow: Pillow: Denial of Service via decompression bomb in FITS image processing"
},
{
"cve": "CVE-2026-40895",
"cwe": {
"id": "CWE-212",
"name": "Improper Removal of Sensitive Information Before Storage or Transfer"
},
"discovery_date": "2026-04-21T21:02:33.280553+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2460297"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in follow-redirects. When an HTTP request follows a cross-domain redirect (a redirection to a different domain), custom authentication headers, such as X-API-Key or X-Auth-Token, are not properly stripped. This allows these sensitive headers to be forwarded verbatim to the redirect target, potentially leading to the unintended disclosure of authentication information to an untrusted third party.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "follow-redirects: follow-redirects: Information disclosure via cross-domain redirects",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-40895"
},
{
"category": "external",
"summary": "RHBZ#2460297",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2460297"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-40895",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-40895"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-40895",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-40895"
},
{
"category": "external",
"summary": "https://github.com/follow-redirects/follow-redirects/security/advisories/GHSA-r4q5-vmmm-2653",
"url": "https://github.com/follow-redirects/follow-redirects/security/advisories/GHSA-r4q5-vmmm-2653"
}
],
"release_date": "2026-04-21T19:59:59.759000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-19T21:01:11+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:19375"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "follow-redirects: follow-redirects: Information disclosure via cross-domain redirects"
},
{
"cve": "CVE-2026-42033",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-04-24T18:01:20.937507+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2461607"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, an HTTP client library. This vulnerability allows an attacker to exploit a prototype pollution issue if another part of the application has already polluted the Object.prototype. By doing so, the attacker can intercept and modify JSON responses or take control of the HTTP communication. This could lead to unauthorized access to sensitive information like user credentials and request details.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: HTTP Transport Hijacking via Prototype Pollution",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42033"
},
{
"category": "external",
"summary": "RHBZ#2461607",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2461607"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42033",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42033"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42033",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42033"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-pf86-5x62-jrwf",
"url": "https://github.com/axios/axios/security/advisories/GHSA-pf86-5x62-jrwf"
}
],
"release_date": "2026-04-24T17:36:44.132000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-19T21:01:11+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:19375"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: HTTP Transport Hijacking via Prototype Pollution"
},
{
"cve": "CVE-2026-42035",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-04-24T18:01:17.109481+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2461606"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a software library for making network requests. A remote attacker can exploit a prototype pollution vulnerability to inject arbitrary HTTP headers into outgoing requests. This occurs when the application\u0027s core object definitions are manipulated, causing Axios to misinterpret data and include attacker-controlled headers in network communications. This could lead to unauthorized actions or data manipulation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Arbitrary HTTP header injection via prototype pollution",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42035"
},
{
"category": "external",
"summary": "RHBZ#2461606",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2461606"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42035",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42035"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42035",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42035"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-6chq-wfr3-2hj9",
"url": "https://github.com/axios/axios/security/advisories/GHSA-6chq-wfr3-2hj9"
}
],
"release_date": "2026-04-24T17:38:07.752000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-19T21:01:11+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:19375"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "axios: Axios: Arbitrary HTTP header injection via prototype pollution"
},
{
"cve": "CVE-2026-42039",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-04-24T19:01:44.887156+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2461630"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client for browsers and Node.js. This vulnerability occurs because the `toFormData` function recursively processes nested objects without a depth limit. A remote attacker can exploit this by sending deeply nested request data, which causes the Node.js process to crash due to a RangeError, leading to a potential Denial of Service (DoS) if the process crashes.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Node.js: Axios: Denial of Service via unbounded recursion in toFormData with deeply nested request data",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42039"
},
{
"category": "external",
"summary": "RHBZ#2461630",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2461630"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42039",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42039"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42039",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42039"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-62hf-57xw-28j9",
"url": "https://github.com/axios/axios/security/advisories/GHSA-62hf-57xw-28j9"
}
],
"release_date": "2026-04-24T18:01:30.775000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-19T21:01:11+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:19375"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Node.js: Axios: Denial of Service via unbounded recursion in toFormData with deeply nested request data"
},
{
"cve": "CVE-2026-42041",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-04-24T19:01:41.034289+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2461629"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. This vulnerability, a Prototype Pollution \"Gadget\" attack, allows an attacker to manipulate the `Object.prototype.validateStatus` property. By polluting this property, all HTTP error responses (such as 401, 403, or 500) are silently treated as successful responses. This can lead to a complete bypass of application-level authentication and error handling, potentially granting unauthorized access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Authentication bypass due to prototype pollution of HTTP error handling",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42041"
},
{
"category": "external",
"summary": "RHBZ#2461629",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2461629"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42041",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42041"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42041",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42041"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-w9j2-pvgh-6h63",
"url": "https://github.com/axios/axios/security/advisories/GHSA-w9j2-pvgh-6h63"
}
],
"release_date": "2026-04-24T17:55:30.036000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-19T21:01:11+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:19375"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Authentication bypass due to prototype pollution of HTTP error handling"
},
{
"cve": "CVE-2026-42043",
"cwe": {
"id": "CWE-918",
"name": "Server-Side Request Forgery (SSRF)"
},
"discovery_date": "2026-04-24T19:01:22.552379+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2461626"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a promise-based HTTP client. An attacker who can control the destination address of an Axios request can exploit this vulnerability. By using specific internal network addresses (within the 127.0.0.0/8 range, excluding 127.0.0.1), the attacker can completely bypass the NO_PROXY protection, potentially leading to unauthorized access or information disclosure within the network. This issue is an incomplete fix for a previous vulnerability.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: NO_PROXY bypass via crafted URL",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42043"
},
{
"category": "external",
"summary": "RHBZ#2461626",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2461626"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42043",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42043"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42043",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42043"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-pmwg-cvhr-8vh7",
"url": "https://github.com/axios/axios/security/advisories/GHSA-pmwg-cvhr-8vh7"
}
],
"release_date": "2026-04-24T17:54:42.668000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-19T21:01:11+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:19375"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: NO_PROXY bypass via crafted URL"
},
{
"cve": "CVE-2026-42044",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-04-24T19:01:13.418725+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2461624"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Axios, a widely used HTTP client. This vulnerability, known as a Prototype Pollution \"Gadget\" attack, allows a remote attacker to subtly alter JSON API responses. By manipulating a specific function, an attacker can selectively modify data within these responses. This could lead to significant security breaches, including unauthorized privilege escalation, fraudulent balance manipulation, or bypassing critical authorization checks.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "axios: Axios: Invisible JSON Response Tampering via Prototype Pollution Gadget",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le"
],
"known_not_affected": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42044"
},
{
"category": "external",
"summary": "RHBZ#2461624",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2461624"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42044",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42044"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42044",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42044"
},
{
"category": "external",
"summary": "https://github.com/axios/axios/security/advisories/GHSA-3w6x-2g7m-8v23",
"url": "https://github.com/axios/axios/security/advisories/GHSA-3w6x-2g7m-8v23"
}
],
"release_date": "2026-04-24T17:49:49.517000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-19T21:01:11+00:00",
"details": "Before applying this update, make sure all previously released errata relevant\nto your system have been applied.\n\nFor details on how to apply this update, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:19375"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:478f0e44eaf9907d18c8e765b16d80b9cc0bb3eac50ff8e118e3349aa29a9b46_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:4e7266596726edd7cde2b55bd7bed8910f4cbc1b310c11557e3552239ed3750f_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/clair-rhel9@sha256:f423a53dff70862980ee4381a9fe0fb5d19ce4d9932d7784491d057671d1fc2e_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-bundle@sha256:203097d7c260c95d7cf8e14a378542f75aae84f234a28d61d419f7b434562a9f_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:116b0249564f8424a5438e4a2edd0a9fa8c9449c4cea1ac1b642904d46dccf2f_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:68e02cfb3de2728a3f7f3cdd7b3ab231aa50ff51be51455bf1015ebc8addac66_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-bridge-operator-rhel9@sha256:f610987c52a000670dd5ba0a943f8d3ca38cdd71a0239a95b93260b4ce254b7b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-qemu-rhcos-rhel8@sha256:6c64c35079e0af57beeb1dec93cad23c91dbfca34d25ecdf6326cdf5d557e1b9_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:25be6b83e985ef60d32dec94f57f530b8a4be88c6f23627789f11eb4a0e8870b_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:34d0eac97f889384b67037fdf957e53c02c7ec2579e436e28f49b66d586062cf_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-builder-rhel9@sha256:8d71f18daf54d0311be34071b85d6f48c2895785c986e31a218cd748c443d60b_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-bundle@sha256:ae76dd5965cf14d53a81b5e88ec2f9406d12834a8f5fb1f3ee14fc3271ecceee_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:2fc63e77e837796a5082b58defffc6c46a9a4e8038190c9b8f87213bdf46c006_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:622a11babb195484a89cad806b9b79b6a99df53ad6ebb3d3d68b0a97ded78f79_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-container-security-operator-rhel9@sha256:9e77748984103da9604314a20f66f4fe9710f645dec385b1069ea20d9d0c6ed1_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-bundle@sha256:631c61a88de857bac8503386173a7689c462cfa07141969beb1ab958d85996a3_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:2c5d16299741b7ebcb712479d5c82bb4fa498c6e043786abbff4c52b982c4879_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:74cda2cf2b38b3cd62e5527e421dd7fbe756350e326e0b385ad9518302e08f03_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-operator-rhel9@sha256:e77909a680cd9586f86b793363ffcba2352d25b2c255e7608582e6e7a6659ff2_ppc64le",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:139cae64e4790ebf8b760c6376a33d15233222a25e4da39c6062d7e46c3a1bef_amd64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:52883f389182907dec0e286d626c4faea0f4ae29a5d0e841d6ad2287fdb964c2_arm64",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:ad162e6ea2f6fd246f605180699ce36e4ea91c4b551c7af600a64e671a303ee9_s390x",
"Red Hat Quay 3.16:registry.redhat.io/quay/quay-rhel9@sha256:f6a15c2f1b4d5900cdbd366080e40d3a90d51ba9e5b4d6196e15eefe69d902c3_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "axios: Axios: Invisible JSON Response Tampering via Prototype Pollution Gadget"
}
]
}
Loading…
Trend slope:
-
(linear fit over daily sighting counts)
Show additional events:
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…