RHSA-2026:49770
Vulnerability from csaf_redhat - Published: 2026-08-03 18:29 - Updated: 2026-08-04 22:23Summary
Red Hat Security Advisory: Red Hat OpenShift Service Mesh 3.4.1
Severity
Important
Notes
Topic: Red Hat OpenShift Service Mesh 3.4.1
This update has a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: Red Hat OpenShift Service Mesh 3.4.1, which is based on the open source Istio project, addresses a variety of problems in a microservice architecture by creating a centralized point of control in an application.
Security Fix(es):
* CVE-2026-27145 openshift-service-mesh/istio-proxyv2-rhel9: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries (OSSM-14933)
* CVE-2026-27145 openshift-service-mesh/istio-pilot-rhel9: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries (OSSM-14933)
* CVE-2026-27145 openshift-service-mesh/istio-cni-rhel9: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries (OSSM-14933)
* CVE-2026-27145 openshift-service-mesh/istio-rhel9-operator: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries (OSSM-14933)
Fixes/Improvements:
* Istiod-default-validator points to non-existent istiod Service after OSSM 3.3.4 upgrade when using non-default Istio name with default revision tag (OSSM-14646)
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in the `crypto/x509` package of `golang`. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name (SAN) entries. The certificate verification process, specifically the `VerifyHostname` function, incurs excessive computational overhead due to repeated string operations when processing these entries. This can lead to a significant performance degradation or unresponsiveness of systems validating such certificates.
7.5 (High)
Affected products
Fixed
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:c93cb2c93c0827d9aff606327b0a862d9df37ee819b503ccfce641ead4b56585_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:cc983205b0d67830e7207b972467318ea18c2e8fca82058ed78e5953efc09bd8_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:ebfd4e4edb0bc5e7ac269999a3e2fbf0a16f077d21ad7c92bc83bb61051583e0_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:ff59e61200dc3a5a965e555eaec0e23a4e11ce8d23999bba23c91f0a89a76233_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:069e61b67e8f0001090dfaffa24a916cefb410cd5b128fb24700cba00c6af93f_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:20e1e7bacaeecc453edbc50c82e6d7590fcb1de2e6a0802f09078b51f825d085_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:3945eae12aabfa9d2fe0af09a4153baec22957401be9e36f5d0cc3e81df3fd1c_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:d3470569e40eb0a5bf6599f8cd3cbbaf321563292adea0cbbeb8b98bae4ec82d_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:8abb96980eb5a365ec7ac0d6d77e94aa60ba29a9b99960fcc8bfbe78ce541734_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:97893287c1b8b5669316edd9cfc3683981afa2f2b7b21b515ea8d786e689b434_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:dae12ab72d3b11a638770b300e43aea322473d89dcc5d50bba87c5f6210844b5_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:dcc6eaa106cd01bab37f82242f4d4b48dfb18348d4904122523185fbbd4dfedd_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:07951fb97cb2b41cd1529dd6ec1296be383db4450916079c72df9d39d9eba1e8_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:31465f50beb7b5be5be1265037d5a6c494c153e0058d958c10696551c2b8af25_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:8bb8a88ee02c83e4aad718e6a81b60ae47329d766d1bc84dabb7447ccd2b2e6d_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:eb0f91c5c1f6166a49f4b30ed7d4a10c484e4dbb16bc274ea89988300907cf62_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
9 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:0ac49c38b56687b61e5adf6e02c4d46a164ee53e8d56814cd4708151615267dc_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:892e9a5e7bbf10a3acca5995c96d2c578b71fe0513c65ecf73753acd6fb9239d_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:c6950bdd7361196349dd6f08c6e639411a09ff22faff8da6cd0e927f42a045c4_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:caf4f8b0de85da26afa6ffeae015f951d00309eaf9b04a8168324f2bff01ccea_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:d962ab210306e10800af7c36800d3fe5f624827635fd5a611969fc9c254552bf_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:03d82d6ae2fb57a212cb0dbd2233a6f60e910f036d05bbe27f6493763ef51c3a_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:6218984a408565bf4191827657c59d7f1af49ee9b9af155ae643a93dccc67d7c_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:8a028953a98be89c25bb0301261f4e43978b8e1d9c89ebbeecce4eb7938eb7b9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:a3ab604a154186ec0c8651de867fe07d5963a7eaa2c7fb6e3dd3102973812589_ppc64le | — |
Workaround
|
Threats
Impact
Important
References
12 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat OpenShift Service Mesh 3.4.1\n\nThis update has a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat OpenShift Service Mesh 3.4.1, which is based on the open source Istio project, addresses a variety of problems in a microservice architecture by creating a centralized point of control in an application.\n\nSecurity Fix(es):\n\n* CVE-2026-27145 openshift-service-mesh/istio-proxyv2-rhel9: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries (OSSM-14933)\n* CVE-2026-27145 openshift-service-mesh/istio-pilot-rhel9: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries (OSSM-14933)\n* CVE-2026-27145 openshift-service-mesh/istio-cni-rhel9: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries (OSSM-14933)\n* CVE-2026-27145 openshift-service-mesh/istio-rhel9-operator: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries (OSSM-14933)\n\nFixes/Improvements:\n\n* Istiod-default-validator points to non-existent istiod Service after OSSM 3.3.4 upgrade when using non-default Istio name with default revision tag (OSSM-14646)",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:49770",
"url": "https://access.redhat.com/errata/RHSA-2026:49770"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-27145",
"url": "https://access.redhat.com/security/cve/CVE-2026-27145"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_49770.json"
}
],
"title": "Red Hat Security Advisory: Red Hat OpenShift Service Mesh 3.4.1",
"tracking": {
"current_release_date": "2026-08-04T22:23:28+00:00",
"generator": {
"date": "2026-08-04T22:23:28+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.8"
}
},
"id": "RHSA-2026:49770",
"initial_release_date": "2026-08-03T18:29:49+00:00",
"revision_history": [
{
"date": "2026-08-03T18:29:49+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-03T18:30:01+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-08-04T22:23:28+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat OpenShift Service Mesh 3.4",
"product": {
"name": "Red Hat OpenShift Service Mesh 3.4",
"product_id": "Red Hat OpenShift Service Mesh 3.4",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:service_mesh:3.4::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenShift Service Mesh"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:d962ab210306e10800af7c36800d3fe5f624827635fd5a611969fc9c254552bf_amd64",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:d962ab210306e10800af7c36800d3fe5f624827635fd5a611969fc9c254552bf_amd64",
"product_id": "registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:d962ab210306e10800af7c36800d3fe5f624827635fd5a611969fc9c254552bf_amd64",
"product_identification_helper": {
"purl": "pkg:oci/istio-sail-operator-bundle@sha256%3Ad962ab210306e10800af7c36800d3fe5f624827635fd5a611969fc9c254552bf?arch=amd64\u0026repository_url=registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle\u0026tag=1785320531"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:ff59e61200dc3a5a965e555eaec0e23a4e11ce8d23999bba23c91f0a89a76233_amd64",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:ff59e61200dc3a5a965e555eaec0e23a4e11ce8d23999bba23c91f0a89a76233_amd64",
"product_id": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:ff59e61200dc3a5a965e555eaec0e23a4e11ce8d23999bba23c91f0a89a76233_amd64",
"product_identification_helper": {
"purl": "pkg:oci/istio-cni-rhel9@sha256%3Aff59e61200dc3a5a965e555eaec0e23a4e11ce8d23999bba23c91f0a89a76233?arch=amd64\u0026repository_url=registry.redhat.io/openshift-service-mesh/istio-cni-rhel9\u0026tag=1785131046"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:c6950bdd7361196349dd6f08c6e639411a09ff22faff8da6cd0e927f42a045c4_amd64",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:c6950bdd7361196349dd6f08c6e639411a09ff22faff8da6cd0e927f42a045c4_amd64",
"product_id": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:c6950bdd7361196349dd6f08c6e639411a09ff22faff8da6cd0e927f42a045c4_amd64",
"product_identification_helper": {
"purl": "pkg:oci/istio-must-gather-rhel9@sha256%3Ac6950bdd7361196349dd6f08c6e639411a09ff22faff8da6cd0e927f42a045c4?arch=amd64\u0026repository_url=registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9\u0026tag=1784795830"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:07951fb97cb2b41cd1529dd6ec1296be383db4450916079c72df9d39d9eba1e8_amd64",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:07951fb97cb2b41cd1529dd6ec1296be383db4450916079c72df9d39d9eba1e8_amd64",
"product_id": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:07951fb97cb2b41cd1529dd6ec1296be383db4450916079c72df9d39d9eba1e8_amd64",
"product_identification_helper": {
"purl": "pkg:oci/istio-rhel9-operator@sha256%3A07951fb97cb2b41cd1529dd6ec1296be383db4450916079c72df9d39d9eba1e8?arch=amd64\u0026repository_url=registry.redhat.io/openshift-service-mesh/istio-rhel9-operator\u0026tag=1785317214"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:d3470569e40eb0a5bf6599f8cd3cbbaf321563292adea0cbbeb8b98bae4ec82d_amd64",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:d3470569e40eb0a5bf6599f8cd3cbbaf321563292adea0cbbeb8b98bae4ec82d_amd64",
"product_id": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:d3470569e40eb0a5bf6599f8cd3cbbaf321563292adea0cbbeb8b98bae4ec82d_amd64",
"product_identification_helper": {
"purl": "pkg:oci/istio-pilot-rhel9@sha256%3Ad3470569e40eb0a5bf6599f8cd3cbbaf321563292adea0cbbeb8b98bae4ec82d?arch=amd64\u0026repository_url=registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9\u0026tag=1785131063"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:8abb96980eb5a365ec7ac0d6d77e94aa60ba29a9b99960fcc8bfbe78ce541734_amd64",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:8abb96980eb5a365ec7ac0d6d77e94aa60ba29a9b99960fcc8bfbe78ce541734_amd64",
"product_id": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:8abb96980eb5a365ec7ac0d6d77e94aa60ba29a9b99960fcc8bfbe78ce541734_amd64",
"product_identification_helper": {
"purl": "pkg:oci/istio-proxyv2-rhel9@sha256%3A8abb96980eb5a365ec7ac0d6d77e94aa60ba29a9b99960fcc8bfbe78ce541734?arch=amd64\u0026repository_url=registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9\u0026tag=1785131291"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:8a028953a98be89c25bb0301261f4e43978b8e1d9c89ebbeecce4eb7938eb7b9_amd64",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:8a028953a98be89c25bb0301261f4e43978b8e1d9c89ebbeecce4eb7938eb7b9_amd64",
"product_id": "registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:8a028953a98be89c25bb0301261f4e43978b8e1d9c89ebbeecce4eb7938eb7b9_amd64",
"product_identification_helper": {
"purl": "pkg:oci/istio-ztunnel-rhel9@sha256%3A8a028953a98be89c25bb0301261f4e43978b8e1d9c89ebbeecce4eb7938eb7b9?arch=amd64\u0026repository_url=registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9\u0026tag=1784799629"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:cc983205b0d67830e7207b972467318ea18c2e8fca82058ed78e5953efc09bd8_arm64",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:cc983205b0d67830e7207b972467318ea18c2e8fca82058ed78e5953efc09bd8_arm64",
"product_id": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:cc983205b0d67830e7207b972467318ea18c2e8fca82058ed78e5953efc09bd8_arm64",
"product_identification_helper": {
"purl": "pkg:oci/istio-cni-rhel9@sha256%3Acc983205b0d67830e7207b972467318ea18c2e8fca82058ed78e5953efc09bd8?arch=arm64\u0026repository_url=registry.redhat.io/openshift-service-mesh/istio-cni-rhel9\u0026tag=1785131046"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:892e9a5e7bbf10a3acca5995c96d2c578b71fe0513c65ecf73753acd6fb9239d_arm64",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:892e9a5e7bbf10a3acca5995c96d2c578b71fe0513c65ecf73753acd6fb9239d_arm64",
"product_id": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:892e9a5e7bbf10a3acca5995c96d2c578b71fe0513c65ecf73753acd6fb9239d_arm64",
"product_identification_helper": {
"purl": "pkg:oci/istio-must-gather-rhel9@sha256%3A892e9a5e7bbf10a3acca5995c96d2c578b71fe0513c65ecf73753acd6fb9239d?arch=arm64\u0026repository_url=registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9\u0026tag=1784795830"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:eb0f91c5c1f6166a49f4b30ed7d4a10c484e4dbb16bc274ea89988300907cf62_arm64",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:eb0f91c5c1f6166a49f4b30ed7d4a10c484e4dbb16bc274ea89988300907cf62_arm64",
"product_id": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:eb0f91c5c1f6166a49f4b30ed7d4a10c484e4dbb16bc274ea89988300907cf62_arm64",
"product_identification_helper": {
"purl": "pkg:oci/istio-rhel9-operator@sha256%3Aeb0f91c5c1f6166a49f4b30ed7d4a10c484e4dbb16bc274ea89988300907cf62?arch=arm64\u0026repository_url=registry.redhat.io/openshift-service-mesh/istio-rhel9-operator\u0026tag=1785317214"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:3945eae12aabfa9d2fe0af09a4153baec22957401be9e36f5d0cc3e81df3fd1c_arm64",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:3945eae12aabfa9d2fe0af09a4153baec22957401be9e36f5d0cc3e81df3fd1c_arm64",
"product_id": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:3945eae12aabfa9d2fe0af09a4153baec22957401be9e36f5d0cc3e81df3fd1c_arm64",
"product_identification_helper": {
"purl": "pkg:oci/istio-pilot-rhel9@sha256%3A3945eae12aabfa9d2fe0af09a4153baec22957401be9e36f5d0cc3e81df3fd1c?arch=arm64\u0026repository_url=registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9\u0026tag=1785131063"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:dcc6eaa106cd01bab37f82242f4d4b48dfb18348d4904122523185fbbd4dfedd_arm64",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:dcc6eaa106cd01bab37f82242f4d4b48dfb18348d4904122523185fbbd4dfedd_arm64",
"product_id": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:dcc6eaa106cd01bab37f82242f4d4b48dfb18348d4904122523185fbbd4dfedd_arm64",
"product_identification_helper": {
"purl": "pkg:oci/istio-proxyv2-rhel9@sha256%3Adcc6eaa106cd01bab37f82242f4d4b48dfb18348d4904122523185fbbd4dfedd?arch=arm64\u0026repository_url=registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9\u0026tag=1785131291"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:6218984a408565bf4191827657c59d7f1af49ee9b9af155ae643a93dccc67d7c_arm64",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:6218984a408565bf4191827657c59d7f1af49ee9b9af155ae643a93dccc67d7c_arm64",
"product_id": "registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:6218984a408565bf4191827657c59d7f1af49ee9b9af155ae643a93dccc67d7c_arm64",
"product_identification_helper": {
"purl": "pkg:oci/istio-ztunnel-rhel9@sha256%3A6218984a408565bf4191827657c59d7f1af49ee9b9af155ae643a93dccc67d7c?arch=arm64\u0026repository_url=registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9\u0026tag=1784799629"
}
}
}
],
"category": "architecture",
"name": "arm64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:ebfd4e4edb0bc5e7ac269999a3e2fbf0a16f077d21ad7c92bc83bb61051583e0_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:ebfd4e4edb0bc5e7ac269999a3e2fbf0a16f077d21ad7c92bc83bb61051583e0_ppc64le",
"product_id": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:ebfd4e4edb0bc5e7ac269999a3e2fbf0a16f077d21ad7c92bc83bb61051583e0_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/istio-cni-rhel9@sha256%3Aebfd4e4edb0bc5e7ac269999a3e2fbf0a16f077d21ad7c92bc83bb61051583e0?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-service-mesh/istio-cni-rhel9\u0026tag=1785131046"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:caf4f8b0de85da26afa6ffeae015f951d00309eaf9b04a8168324f2bff01ccea_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:caf4f8b0de85da26afa6ffeae015f951d00309eaf9b04a8168324f2bff01ccea_ppc64le",
"product_id": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:caf4f8b0de85da26afa6ffeae015f951d00309eaf9b04a8168324f2bff01ccea_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/istio-must-gather-rhel9@sha256%3Acaf4f8b0de85da26afa6ffeae015f951d00309eaf9b04a8168324f2bff01ccea?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9\u0026tag=1784795830"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:8bb8a88ee02c83e4aad718e6a81b60ae47329d766d1bc84dabb7447ccd2b2e6d_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:8bb8a88ee02c83e4aad718e6a81b60ae47329d766d1bc84dabb7447ccd2b2e6d_ppc64le",
"product_id": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:8bb8a88ee02c83e4aad718e6a81b60ae47329d766d1bc84dabb7447ccd2b2e6d_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/istio-rhel9-operator@sha256%3A8bb8a88ee02c83e4aad718e6a81b60ae47329d766d1bc84dabb7447ccd2b2e6d?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-service-mesh/istio-rhel9-operator\u0026tag=1785317214"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:069e61b67e8f0001090dfaffa24a916cefb410cd5b128fb24700cba00c6af93f_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:069e61b67e8f0001090dfaffa24a916cefb410cd5b128fb24700cba00c6af93f_ppc64le",
"product_id": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:069e61b67e8f0001090dfaffa24a916cefb410cd5b128fb24700cba00c6af93f_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/istio-pilot-rhel9@sha256%3A069e61b67e8f0001090dfaffa24a916cefb410cd5b128fb24700cba00c6af93f?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9\u0026tag=1785131063"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:dae12ab72d3b11a638770b300e43aea322473d89dcc5d50bba87c5f6210844b5_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:dae12ab72d3b11a638770b300e43aea322473d89dcc5d50bba87c5f6210844b5_ppc64le",
"product_id": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:dae12ab72d3b11a638770b300e43aea322473d89dcc5d50bba87c5f6210844b5_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/istio-proxyv2-rhel9@sha256%3Adae12ab72d3b11a638770b300e43aea322473d89dcc5d50bba87c5f6210844b5?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9\u0026tag=1785131291"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:a3ab604a154186ec0c8651de867fe07d5963a7eaa2c7fb6e3dd3102973812589_ppc64le",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:a3ab604a154186ec0c8651de867fe07d5963a7eaa2c7fb6e3dd3102973812589_ppc64le",
"product_id": "registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:a3ab604a154186ec0c8651de867fe07d5963a7eaa2c7fb6e3dd3102973812589_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/istio-ztunnel-rhel9@sha256%3Aa3ab604a154186ec0c8651de867fe07d5963a7eaa2c7fb6e3dd3102973812589?arch=ppc64le\u0026repository_url=registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9\u0026tag=1784799629"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:c93cb2c93c0827d9aff606327b0a862d9df37ee819b503ccfce641ead4b56585_s390x",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:c93cb2c93c0827d9aff606327b0a862d9df37ee819b503ccfce641ead4b56585_s390x",
"product_id": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:c93cb2c93c0827d9aff606327b0a862d9df37ee819b503ccfce641ead4b56585_s390x",
"product_identification_helper": {
"purl": "pkg:oci/istio-cni-rhel9@sha256%3Ac93cb2c93c0827d9aff606327b0a862d9df37ee819b503ccfce641ead4b56585?arch=s390x\u0026repository_url=registry.redhat.io/openshift-service-mesh/istio-cni-rhel9\u0026tag=1785131046"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:0ac49c38b56687b61e5adf6e02c4d46a164ee53e8d56814cd4708151615267dc_s390x",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:0ac49c38b56687b61e5adf6e02c4d46a164ee53e8d56814cd4708151615267dc_s390x",
"product_id": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:0ac49c38b56687b61e5adf6e02c4d46a164ee53e8d56814cd4708151615267dc_s390x",
"product_identification_helper": {
"purl": "pkg:oci/istio-must-gather-rhel9@sha256%3A0ac49c38b56687b61e5adf6e02c4d46a164ee53e8d56814cd4708151615267dc?arch=s390x\u0026repository_url=registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9\u0026tag=1784795830"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:31465f50beb7b5be5be1265037d5a6c494c153e0058d958c10696551c2b8af25_s390x",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:31465f50beb7b5be5be1265037d5a6c494c153e0058d958c10696551c2b8af25_s390x",
"product_id": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:31465f50beb7b5be5be1265037d5a6c494c153e0058d958c10696551c2b8af25_s390x",
"product_identification_helper": {
"purl": "pkg:oci/istio-rhel9-operator@sha256%3A31465f50beb7b5be5be1265037d5a6c494c153e0058d958c10696551c2b8af25?arch=s390x\u0026repository_url=registry.redhat.io/openshift-service-mesh/istio-rhel9-operator\u0026tag=1785317214"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:20e1e7bacaeecc453edbc50c82e6d7590fcb1de2e6a0802f09078b51f825d085_s390x",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:20e1e7bacaeecc453edbc50c82e6d7590fcb1de2e6a0802f09078b51f825d085_s390x",
"product_id": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:20e1e7bacaeecc453edbc50c82e6d7590fcb1de2e6a0802f09078b51f825d085_s390x",
"product_identification_helper": {
"purl": "pkg:oci/istio-pilot-rhel9@sha256%3A20e1e7bacaeecc453edbc50c82e6d7590fcb1de2e6a0802f09078b51f825d085?arch=s390x\u0026repository_url=registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9\u0026tag=1785131063"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:97893287c1b8b5669316edd9cfc3683981afa2f2b7b21b515ea8d786e689b434_s390x",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:97893287c1b8b5669316edd9cfc3683981afa2f2b7b21b515ea8d786e689b434_s390x",
"product_id": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:97893287c1b8b5669316edd9cfc3683981afa2f2b7b21b515ea8d786e689b434_s390x",
"product_identification_helper": {
"purl": "pkg:oci/istio-proxyv2-rhel9@sha256%3A97893287c1b8b5669316edd9cfc3683981afa2f2b7b21b515ea8d786e689b434?arch=s390x\u0026repository_url=registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9\u0026tag=1785131291"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:03d82d6ae2fb57a212cb0dbd2233a6f60e910f036d05bbe27f6493763ef51c3a_s390x",
"product": {
"name": "registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:03d82d6ae2fb57a212cb0dbd2233a6f60e910f036d05bbe27f6493763ef51c3a_s390x",
"product_id": "registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:03d82d6ae2fb57a212cb0dbd2233a6f60e910f036d05bbe27f6493763ef51c3a_s390x",
"product_identification_helper": {
"purl": "pkg:oci/istio-ztunnel-rhel9@sha256%3A03d82d6ae2fb57a212cb0dbd2233a6f60e910f036d05bbe27f6493763ef51c3a?arch=s390x\u0026repository_url=registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9\u0026tag=1784799629"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:c93cb2c93c0827d9aff606327b0a862d9df37ee819b503ccfce641ead4b56585_s390x as a component of Red Hat OpenShift Service Mesh 3.4",
"product_id": "Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:c93cb2c93c0827d9aff606327b0a862d9df37ee819b503ccfce641ead4b56585_s390x"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:c93cb2c93c0827d9aff606327b0a862d9df37ee819b503ccfce641ead4b56585_s390x",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:cc983205b0d67830e7207b972467318ea18c2e8fca82058ed78e5953efc09bd8_arm64 as a component of Red Hat OpenShift Service Mesh 3.4",
"product_id": "Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:cc983205b0d67830e7207b972467318ea18c2e8fca82058ed78e5953efc09bd8_arm64"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:cc983205b0d67830e7207b972467318ea18c2e8fca82058ed78e5953efc09bd8_arm64",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:ebfd4e4edb0bc5e7ac269999a3e2fbf0a16f077d21ad7c92bc83bb61051583e0_ppc64le as a component of Red Hat OpenShift Service Mesh 3.4",
"product_id": "Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:ebfd4e4edb0bc5e7ac269999a3e2fbf0a16f077d21ad7c92bc83bb61051583e0_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:ebfd4e4edb0bc5e7ac269999a3e2fbf0a16f077d21ad7c92bc83bb61051583e0_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:ff59e61200dc3a5a965e555eaec0e23a4e11ce8d23999bba23c91f0a89a76233_amd64 as a component of Red Hat OpenShift Service Mesh 3.4",
"product_id": "Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:ff59e61200dc3a5a965e555eaec0e23a4e11ce8d23999bba23c91f0a89a76233_amd64"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:ff59e61200dc3a5a965e555eaec0e23a4e11ce8d23999bba23c91f0a89a76233_amd64",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:0ac49c38b56687b61e5adf6e02c4d46a164ee53e8d56814cd4708151615267dc_s390x as a component of Red Hat OpenShift Service Mesh 3.4",
"product_id": "Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:0ac49c38b56687b61e5adf6e02c4d46a164ee53e8d56814cd4708151615267dc_s390x"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:0ac49c38b56687b61e5adf6e02c4d46a164ee53e8d56814cd4708151615267dc_s390x",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:892e9a5e7bbf10a3acca5995c96d2c578b71fe0513c65ecf73753acd6fb9239d_arm64 as a component of Red Hat OpenShift Service Mesh 3.4",
"product_id": "Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:892e9a5e7bbf10a3acca5995c96d2c578b71fe0513c65ecf73753acd6fb9239d_arm64"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:892e9a5e7bbf10a3acca5995c96d2c578b71fe0513c65ecf73753acd6fb9239d_arm64",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:c6950bdd7361196349dd6f08c6e639411a09ff22faff8da6cd0e927f42a045c4_amd64 as a component of Red Hat OpenShift Service Mesh 3.4",
"product_id": "Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:c6950bdd7361196349dd6f08c6e639411a09ff22faff8da6cd0e927f42a045c4_amd64"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:c6950bdd7361196349dd6f08c6e639411a09ff22faff8da6cd0e927f42a045c4_amd64",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:caf4f8b0de85da26afa6ffeae015f951d00309eaf9b04a8168324f2bff01ccea_ppc64le as a component of Red Hat OpenShift Service Mesh 3.4",
"product_id": "Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:caf4f8b0de85da26afa6ffeae015f951d00309eaf9b04a8168324f2bff01ccea_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:caf4f8b0de85da26afa6ffeae015f951d00309eaf9b04a8168324f2bff01ccea_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:069e61b67e8f0001090dfaffa24a916cefb410cd5b128fb24700cba00c6af93f_ppc64le as a component of Red Hat OpenShift Service Mesh 3.4",
"product_id": "Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:069e61b67e8f0001090dfaffa24a916cefb410cd5b128fb24700cba00c6af93f_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:069e61b67e8f0001090dfaffa24a916cefb410cd5b128fb24700cba00c6af93f_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:20e1e7bacaeecc453edbc50c82e6d7590fcb1de2e6a0802f09078b51f825d085_s390x as a component of Red Hat OpenShift Service Mesh 3.4",
"product_id": "Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:20e1e7bacaeecc453edbc50c82e6d7590fcb1de2e6a0802f09078b51f825d085_s390x"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:20e1e7bacaeecc453edbc50c82e6d7590fcb1de2e6a0802f09078b51f825d085_s390x",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:3945eae12aabfa9d2fe0af09a4153baec22957401be9e36f5d0cc3e81df3fd1c_arm64 as a component of Red Hat OpenShift Service Mesh 3.4",
"product_id": "Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:3945eae12aabfa9d2fe0af09a4153baec22957401be9e36f5d0cc3e81df3fd1c_arm64"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:3945eae12aabfa9d2fe0af09a4153baec22957401be9e36f5d0cc3e81df3fd1c_arm64",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:d3470569e40eb0a5bf6599f8cd3cbbaf321563292adea0cbbeb8b98bae4ec82d_amd64 as a component of Red Hat OpenShift Service Mesh 3.4",
"product_id": "Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:d3470569e40eb0a5bf6599f8cd3cbbaf321563292adea0cbbeb8b98bae4ec82d_amd64"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:d3470569e40eb0a5bf6599f8cd3cbbaf321563292adea0cbbeb8b98bae4ec82d_amd64",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:8abb96980eb5a365ec7ac0d6d77e94aa60ba29a9b99960fcc8bfbe78ce541734_amd64 as a component of Red Hat OpenShift Service Mesh 3.4",
"product_id": "Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:8abb96980eb5a365ec7ac0d6d77e94aa60ba29a9b99960fcc8bfbe78ce541734_amd64"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:8abb96980eb5a365ec7ac0d6d77e94aa60ba29a9b99960fcc8bfbe78ce541734_amd64",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:97893287c1b8b5669316edd9cfc3683981afa2f2b7b21b515ea8d786e689b434_s390x as a component of Red Hat OpenShift Service Mesh 3.4",
"product_id": "Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:97893287c1b8b5669316edd9cfc3683981afa2f2b7b21b515ea8d786e689b434_s390x"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:97893287c1b8b5669316edd9cfc3683981afa2f2b7b21b515ea8d786e689b434_s390x",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:dae12ab72d3b11a638770b300e43aea322473d89dcc5d50bba87c5f6210844b5_ppc64le as a component of Red Hat OpenShift Service Mesh 3.4",
"product_id": "Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:dae12ab72d3b11a638770b300e43aea322473d89dcc5d50bba87c5f6210844b5_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:dae12ab72d3b11a638770b300e43aea322473d89dcc5d50bba87c5f6210844b5_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:dcc6eaa106cd01bab37f82242f4d4b48dfb18348d4904122523185fbbd4dfedd_arm64 as a component of Red Hat OpenShift Service Mesh 3.4",
"product_id": "Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:dcc6eaa106cd01bab37f82242f4d4b48dfb18348d4904122523185fbbd4dfedd_arm64"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:dcc6eaa106cd01bab37f82242f4d4b48dfb18348d4904122523185fbbd4dfedd_arm64",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:07951fb97cb2b41cd1529dd6ec1296be383db4450916079c72df9d39d9eba1e8_amd64 as a component of Red Hat OpenShift Service Mesh 3.4",
"product_id": "Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:07951fb97cb2b41cd1529dd6ec1296be383db4450916079c72df9d39d9eba1e8_amd64"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:07951fb97cb2b41cd1529dd6ec1296be383db4450916079c72df9d39d9eba1e8_amd64",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:31465f50beb7b5be5be1265037d5a6c494c153e0058d958c10696551c2b8af25_s390x as a component of Red Hat OpenShift Service Mesh 3.4",
"product_id": "Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:31465f50beb7b5be5be1265037d5a6c494c153e0058d958c10696551c2b8af25_s390x"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:31465f50beb7b5be5be1265037d5a6c494c153e0058d958c10696551c2b8af25_s390x",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:8bb8a88ee02c83e4aad718e6a81b60ae47329d766d1bc84dabb7447ccd2b2e6d_ppc64le as a component of Red Hat OpenShift Service Mesh 3.4",
"product_id": "Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:8bb8a88ee02c83e4aad718e6a81b60ae47329d766d1bc84dabb7447ccd2b2e6d_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:8bb8a88ee02c83e4aad718e6a81b60ae47329d766d1bc84dabb7447ccd2b2e6d_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:eb0f91c5c1f6166a49f4b30ed7d4a10c484e4dbb16bc274ea89988300907cf62_arm64 as a component of Red Hat OpenShift Service Mesh 3.4",
"product_id": "Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:eb0f91c5c1f6166a49f4b30ed7d4a10c484e4dbb16bc274ea89988300907cf62_arm64"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:eb0f91c5c1f6166a49f4b30ed7d4a10c484e4dbb16bc274ea89988300907cf62_arm64",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:d962ab210306e10800af7c36800d3fe5f624827635fd5a611969fc9c254552bf_amd64 as a component of Red Hat OpenShift Service Mesh 3.4",
"product_id": "Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:d962ab210306e10800af7c36800d3fe5f624827635fd5a611969fc9c254552bf_amd64"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:d962ab210306e10800af7c36800d3fe5f624827635fd5a611969fc9c254552bf_amd64",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:03d82d6ae2fb57a212cb0dbd2233a6f60e910f036d05bbe27f6493763ef51c3a_s390x as a component of Red Hat OpenShift Service Mesh 3.4",
"product_id": "Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:03d82d6ae2fb57a212cb0dbd2233a6f60e910f036d05bbe27f6493763ef51c3a_s390x"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:03d82d6ae2fb57a212cb0dbd2233a6f60e910f036d05bbe27f6493763ef51c3a_s390x",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:6218984a408565bf4191827657c59d7f1af49ee9b9af155ae643a93dccc67d7c_arm64 as a component of Red Hat OpenShift Service Mesh 3.4",
"product_id": "Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:6218984a408565bf4191827657c59d7f1af49ee9b9af155ae643a93dccc67d7c_arm64"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:6218984a408565bf4191827657c59d7f1af49ee9b9af155ae643a93dccc67d7c_arm64",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:8a028953a98be89c25bb0301261f4e43978b8e1d9c89ebbeecce4eb7938eb7b9_amd64 as a component of Red Hat OpenShift Service Mesh 3.4",
"product_id": "Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:8a028953a98be89c25bb0301261f4e43978b8e1d9c89ebbeecce4eb7938eb7b9_amd64"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:8a028953a98be89c25bb0301261f4e43978b8e1d9c89ebbeecce4eb7938eb7b9_amd64",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:a3ab604a154186ec0c8651de867fe07d5963a7eaa2c7fb6e3dd3102973812589_ppc64le as a component of Red Hat OpenShift Service Mesh 3.4",
"product_id": "Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:a3ab604a154186ec0c8651de867fe07d5963a7eaa2c7fb6e3dd3102973812589_ppc64le"
},
"product_reference": "registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:a3ab604a154186ec0c8651de867fe07d5963a7eaa2c7fb6e3dd3102973812589_ppc64le",
"relates_to_product_reference": "Red Hat OpenShift Service Mesh 3.4"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-27145",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-06-02T23:01:08.992540+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:0ac49c38b56687b61e5adf6e02c4d46a164ee53e8d56814cd4708151615267dc_s390x",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:892e9a5e7bbf10a3acca5995c96d2c578b71fe0513c65ecf73753acd6fb9239d_arm64",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:c6950bdd7361196349dd6f08c6e639411a09ff22faff8da6cd0e927f42a045c4_amd64",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:caf4f8b0de85da26afa6ffeae015f951d00309eaf9b04a8168324f2bff01ccea_ppc64le",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:d962ab210306e10800af7c36800d3fe5f624827635fd5a611969fc9c254552bf_amd64",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:03d82d6ae2fb57a212cb0dbd2233a6f60e910f036d05bbe27f6493763ef51c3a_s390x",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:6218984a408565bf4191827657c59d7f1af49ee9b9af155ae643a93dccc67d7c_arm64",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:8a028953a98be89c25bb0301261f4e43978b8e1d9c89ebbeecce4eb7938eb7b9_amd64",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:a3ab604a154186ec0c8651de867fe07d5963a7eaa2c7fb6e3dd3102973812589_ppc64le"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2484207"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `crypto/x509` package of `golang`. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name (SAN) entries. The certificate verification process, specifically the `VerifyHostname` function, incurs excessive computational overhead due to repeated string operations when processing these entries. This can lead to a significant performance degradation or unresponsiveness of systems validating such certificates.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in the Go standard library crypto/x509 package. When verifying a TLS certificate hostname, VerifyHostname processed each DNS Subject Alternative Name (SAN) entry in a loop and repeatedly split the candidate hostname on \".\" characters. For certificates with a very large DNS SAN list, CPU use could grow quadratically with the number of SAN entries and hostname labels. Because hostname verification runs before the certificate chain is built, this overhead can occur even when the certificate is not trusted.\n\nRed Hat rates this issue as Important. It affects Red Hat products that include the Go standard library crypto/x509 code from an affected Go toolchain version (before Go 1.25.11, or from Go 1.26.0 through Go 1.26.3). Applications and container images built with a fixed Go release (1.25.11 or later, or 1.26.4 or later) are not affected. Community distributions such as Fedora are also affected.\n\nUpstream fix: Go 1.25.11 and Go 1.26.4 (GO-2026-5037).",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:c93cb2c93c0827d9aff606327b0a862d9df37ee819b503ccfce641ead4b56585_s390x",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:cc983205b0d67830e7207b972467318ea18c2e8fca82058ed78e5953efc09bd8_arm64",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:ebfd4e4edb0bc5e7ac269999a3e2fbf0a16f077d21ad7c92bc83bb61051583e0_ppc64le",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:ff59e61200dc3a5a965e555eaec0e23a4e11ce8d23999bba23c91f0a89a76233_amd64",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:069e61b67e8f0001090dfaffa24a916cefb410cd5b128fb24700cba00c6af93f_ppc64le",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:20e1e7bacaeecc453edbc50c82e6d7590fcb1de2e6a0802f09078b51f825d085_s390x",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:3945eae12aabfa9d2fe0af09a4153baec22957401be9e36f5d0cc3e81df3fd1c_arm64",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:d3470569e40eb0a5bf6599f8cd3cbbaf321563292adea0cbbeb8b98bae4ec82d_amd64",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:8abb96980eb5a365ec7ac0d6d77e94aa60ba29a9b99960fcc8bfbe78ce541734_amd64",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:97893287c1b8b5669316edd9cfc3683981afa2f2b7b21b515ea8d786e689b434_s390x",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:dae12ab72d3b11a638770b300e43aea322473d89dcc5d50bba87c5f6210844b5_ppc64le",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:dcc6eaa106cd01bab37f82242f4d4b48dfb18348d4904122523185fbbd4dfedd_arm64",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:07951fb97cb2b41cd1529dd6ec1296be383db4450916079c72df9d39d9eba1e8_amd64",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:31465f50beb7b5be5be1265037d5a6c494c153e0058d958c10696551c2b8af25_s390x",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:8bb8a88ee02c83e4aad718e6a81b60ae47329d766d1bc84dabb7447ccd2b2e6d_ppc64le",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:eb0f91c5c1f6166a49f4b30ed7d4a10c484e4dbb16bc274ea89988300907cf62_arm64"
],
"known_not_affected": [
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:0ac49c38b56687b61e5adf6e02c4d46a164ee53e8d56814cd4708151615267dc_s390x",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:892e9a5e7bbf10a3acca5995c96d2c578b71fe0513c65ecf73753acd6fb9239d_arm64",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:c6950bdd7361196349dd6f08c6e639411a09ff22faff8da6cd0e927f42a045c4_amd64",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:caf4f8b0de85da26afa6ffeae015f951d00309eaf9b04a8168324f2bff01ccea_ppc64le",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:d962ab210306e10800af7c36800d3fe5f624827635fd5a611969fc9c254552bf_amd64",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:03d82d6ae2fb57a212cb0dbd2233a6f60e910f036d05bbe27f6493763ef51c3a_s390x",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:6218984a408565bf4191827657c59d7f1af49ee9b9af155ae643a93dccc67d7c_arm64",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:8a028953a98be89c25bb0301261f4e43978b8e1d9c89ebbeecce4eb7938eb7b9_amd64",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:a3ab604a154186ec0c8651de867fe07d5963a7eaa2c7fb6e3dd3102973812589_ppc64le"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27145"
},
{
"category": "external",
"summary": "RHBZ#2484207",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484207"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27145",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27145"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27145",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27145"
},
{
"category": "external",
"summary": "https://go.dev/cl/783621",
"url": "https://go.dev/cl/783621"
},
{
"category": "external",
"summary": "https://go.dev/issue/79694",
"url": "https://go.dev/issue/79694"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw",
"url": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5037",
"url": "https://pkg.go.dev/vuln/GO-2026-5037"
}
],
"release_date": "2026-06-02T22:01:36.954000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-03T18:29:49+00:00",
"details": "See Red Hat OpenShift Service Mesh 3.4.1 documentation at https://docs.redhat.com/en/documentation/red_hat_openshift_service_mesh/3.4",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:c93cb2c93c0827d9aff606327b0a862d9df37ee819b503ccfce641ead4b56585_s390x",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:cc983205b0d67830e7207b972467318ea18c2e8fca82058ed78e5953efc09bd8_arm64",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:ebfd4e4edb0bc5e7ac269999a3e2fbf0a16f077d21ad7c92bc83bb61051583e0_ppc64le",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:ff59e61200dc3a5a965e555eaec0e23a4e11ce8d23999bba23c91f0a89a76233_amd64",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:069e61b67e8f0001090dfaffa24a916cefb410cd5b128fb24700cba00c6af93f_ppc64le",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:20e1e7bacaeecc453edbc50c82e6d7590fcb1de2e6a0802f09078b51f825d085_s390x",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:3945eae12aabfa9d2fe0af09a4153baec22957401be9e36f5d0cc3e81df3fd1c_arm64",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:d3470569e40eb0a5bf6599f8cd3cbbaf321563292adea0cbbeb8b98bae4ec82d_amd64",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:8abb96980eb5a365ec7ac0d6d77e94aa60ba29a9b99960fcc8bfbe78ce541734_amd64",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:97893287c1b8b5669316edd9cfc3683981afa2f2b7b21b515ea8d786e689b434_s390x",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:dae12ab72d3b11a638770b300e43aea322473d89dcc5d50bba87c5f6210844b5_ppc64le",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:dcc6eaa106cd01bab37f82242f4d4b48dfb18348d4904122523185fbbd4dfedd_arm64",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:07951fb97cb2b41cd1529dd6ec1296be383db4450916079c72df9d39d9eba1e8_amd64",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:31465f50beb7b5be5be1265037d5a6c494c153e0058d958c10696551c2b8af25_s390x",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:8bb8a88ee02c83e4aad718e6a81b60ae47329d766d1bc84dabb7447ccd2b2e6d_ppc64le",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:eb0f91c5c1f6166a49f4b30ed7d4a10c484e4dbb16bc274ea89988300907cf62_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:49770"
},
{
"category": "workaround",
"details": "A flaw was found in the Go standard library crypto/x509 package. When verifying a TLS certificate hostname, VerifyHostname processed each DNS Subject Alternative Name (SAN) entry in a loop and repeatedly split the candidate hostname on \".\" characters. For certificates with a very large DNS SAN list, CPU use could grow quadratically with the number of SAN entries and hostname labels. Because hostname verification runs before the certificate chain is built, this overhead can occur even when the certificate is not trusted.\n\nRed Hat rates this issue as Important. It affects Red Hat products that include the Go standard library crypto/x509 code from an affected Go toolchain version (before Go 1.25.11, or from Go 1.26.0 through Go 1.26.3). Applications and container images built with a fixed Go release (1.25.11 or later, or 1.26.4 or later) are not affected. Community distributions such as Fedora are also affected.\n\nUpstream fix: Go 1.25.11 and Go 1.26.4 (GO-2026-5037).",
"product_ids": [
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:c93cb2c93c0827d9aff606327b0a862d9df37ee819b503ccfce641ead4b56585_s390x",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:cc983205b0d67830e7207b972467318ea18c2e8fca82058ed78e5953efc09bd8_arm64",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:ebfd4e4edb0bc5e7ac269999a3e2fbf0a16f077d21ad7c92bc83bb61051583e0_ppc64le",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:ff59e61200dc3a5a965e555eaec0e23a4e11ce8d23999bba23c91f0a89a76233_amd64",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:0ac49c38b56687b61e5adf6e02c4d46a164ee53e8d56814cd4708151615267dc_s390x",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:892e9a5e7bbf10a3acca5995c96d2c578b71fe0513c65ecf73753acd6fb9239d_arm64",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:c6950bdd7361196349dd6f08c6e639411a09ff22faff8da6cd0e927f42a045c4_amd64",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:caf4f8b0de85da26afa6ffeae015f951d00309eaf9b04a8168324f2bff01ccea_ppc64le",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:069e61b67e8f0001090dfaffa24a916cefb410cd5b128fb24700cba00c6af93f_ppc64le",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:20e1e7bacaeecc453edbc50c82e6d7590fcb1de2e6a0802f09078b51f825d085_s390x",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:3945eae12aabfa9d2fe0af09a4153baec22957401be9e36f5d0cc3e81df3fd1c_arm64",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:d3470569e40eb0a5bf6599f8cd3cbbaf321563292adea0cbbeb8b98bae4ec82d_amd64",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:8abb96980eb5a365ec7ac0d6d77e94aa60ba29a9b99960fcc8bfbe78ce541734_amd64",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:97893287c1b8b5669316edd9cfc3683981afa2f2b7b21b515ea8d786e689b434_s390x",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:dae12ab72d3b11a638770b300e43aea322473d89dcc5d50bba87c5f6210844b5_ppc64le",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:dcc6eaa106cd01bab37f82242f4d4b48dfb18348d4904122523185fbbd4dfedd_arm64",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:07951fb97cb2b41cd1529dd6ec1296be383db4450916079c72df9d39d9eba1e8_amd64",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:31465f50beb7b5be5be1265037d5a6c494c153e0058d958c10696551c2b8af25_s390x",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:8bb8a88ee02c83e4aad718e6a81b60ae47329d766d1bc84dabb7447ccd2b2e6d_ppc64le",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:eb0f91c5c1f6166a49f4b30ed7d4a10c484e4dbb16bc274ea89988300907cf62_arm64",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:d962ab210306e10800af7c36800d3fe5f624827635fd5a611969fc9c254552bf_amd64",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:03d82d6ae2fb57a212cb0dbd2233a6f60e910f036d05bbe27f6493763ef51c3a_s390x",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:6218984a408565bf4191827657c59d7f1af49ee9b9af155ae643a93dccc67d7c_arm64",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:8a028953a98be89c25bb0301261f4e43978b8e1d9c89ebbeecce4eb7938eb7b9_amd64",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:a3ab604a154186ec0c8651de867fe07d5963a7eaa2c7fb6e3dd3102973812589_ppc64le"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:c93cb2c93c0827d9aff606327b0a862d9df37ee819b503ccfce641ead4b56585_s390x",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:cc983205b0d67830e7207b972467318ea18c2e8fca82058ed78e5953efc09bd8_arm64",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:ebfd4e4edb0bc5e7ac269999a3e2fbf0a16f077d21ad7c92bc83bb61051583e0_ppc64le",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-cni-rhel9@sha256:ff59e61200dc3a5a965e555eaec0e23a4e11ce8d23999bba23c91f0a89a76233_amd64",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:0ac49c38b56687b61e5adf6e02c4d46a164ee53e8d56814cd4708151615267dc_s390x",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:892e9a5e7bbf10a3acca5995c96d2c578b71fe0513c65ecf73753acd6fb9239d_arm64",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:c6950bdd7361196349dd6f08c6e639411a09ff22faff8da6cd0e927f42a045c4_amd64",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-must-gather-rhel9@sha256:caf4f8b0de85da26afa6ffeae015f951d00309eaf9b04a8168324f2bff01ccea_ppc64le",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:069e61b67e8f0001090dfaffa24a916cefb410cd5b128fb24700cba00c6af93f_ppc64le",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:20e1e7bacaeecc453edbc50c82e6d7590fcb1de2e6a0802f09078b51f825d085_s390x",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:3945eae12aabfa9d2fe0af09a4153baec22957401be9e36f5d0cc3e81df3fd1c_arm64",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-pilot-rhel9@sha256:d3470569e40eb0a5bf6599f8cd3cbbaf321563292adea0cbbeb8b98bae4ec82d_amd64",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:8abb96980eb5a365ec7ac0d6d77e94aa60ba29a9b99960fcc8bfbe78ce541734_amd64",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:97893287c1b8b5669316edd9cfc3683981afa2f2b7b21b515ea8d786e689b434_s390x",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:dae12ab72d3b11a638770b300e43aea322473d89dcc5d50bba87c5f6210844b5_ppc64le",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-proxyv2-rhel9@sha256:dcc6eaa106cd01bab37f82242f4d4b48dfb18348d4904122523185fbbd4dfedd_arm64",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:07951fb97cb2b41cd1529dd6ec1296be383db4450916079c72df9d39d9eba1e8_amd64",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:31465f50beb7b5be5be1265037d5a6c494c153e0058d958c10696551c2b8af25_s390x",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:8bb8a88ee02c83e4aad718e6a81b60ae47329d766d1bc84dabb7447ccd2b2e6d_ppc64le",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-rhel9-operator@sha256:eb0f91c5c1f6166a49f4b30ed7d4a10c484e4dbb16bc274ea89988300907cf62_arm64",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-sail-operator-bundle@sha256:d962ab210306e10800af7c36800d3fe5f624827635fd5a611969fc9c254552bf_amd64",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:03d82d6ae2fb57a212cb0dbd2233a6f60e910f036d05bbe27f6493763ef51c3a_s390x",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:6218984a408565bf4191827657c59d7f1af49ee9b9af155ae643a93dccc67d7c_arm64",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:8a028953a98be89c25bb0301261f4e43978b8e1d9c89ebbeecce4eb7938eb7b9_amd64",
"Red Hat OpenShift Service Mesh 3.4:registry.redhat.io/openshift-service-mesh/istio-ztunnel-rhel9@sha256:a3ab604a154186ec0c8651de867fe07d5963a7eaa2c7fb6e3dd3102973812589_ppc64le"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
Loading…
Loading…